Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 14, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1981 8.2 重要
Network 		OpenClaw OpenClaw OpenClawにおけるTime-of-check Time-of-use (TOCTOU) 競合状態の脆弱性 CWE-367
Time-of-check Time-of-use (TOCTOU) 競合状態 		CVE-2026-41296 2026-04-30 12:26 2026-04-21 Show GitHub Exploit DB Packet Storm
1982 7.6 重要
Network 		OpenClaw OpenClaw OpenClawにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-41297 2026-04-30 12:26 2026-04-21 Show GitHub Exploit DB Packet Storm
1983 5.4 警告
Network 		OpenClaw OpenClaw OpenClawにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-41298 2026-04-30 12:26 2026-04-21 Show GitHub Exploit DB Packet Storm
1984 7.1 重要
Network 		OpenClaw OpenClaw OpenClawにおけるセキュリティ決定の信頼できない入力への依存に関する脆弱性 CWE-807
セキュリティ決定の信頼できない入力への依存 		CVE-2026-41299 2026-04-30 12:26 2026-04-21 Show GitHub Exploit DB Packet Storm
1985 6.5 警告
Network 		OpenClaw OpenClaw OpenClawにおける不完全な内部状態の区別に関する脆弱性 CWE-372
不完全な内部状態の区別 		CVE-2026-41300 2026-04-30 12:26 2026-04-21 Show GitHub Exploit DB Packet Storm
1986 5.3 警告
Network 		OpenClaw OpenClaw OpenClawにおけるデジタル署名の検証に関する脆弱性 CWE-347
デジタル署名の不適切な検証 		CVE-2026-41301 2026-04-30 12:26 2026-04-21 Show GitHub Exploit DB Packet Storm
1987 6.3 警告
Network 		OpenClaw OpenClaw OpenClawにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-41302 2026-04-30 12:26 2026-04-21 Show GitHub Exploit DB Packet Storm
1988 8.8 重要
Network 		OpenClaw OpenClaw OpenClawにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-41303 2026-04-30 12:26 2026-04-21 Show GitHub Exploit DB Packet Storm
1989 6.5 警告
Network 		pypdf project pypdf pypdf projectのpypdfにおける過剰なサイズ値のメモリ割り当てに関する脆弱性 CWE-789
過剰なサイズ値のメモリ割り当て 		CVE-2026-41312 2026-04-30 12:26 2026-04-22 Show GitHub Exploit DB Packet Storm
1990 6.5 警告
Network 		pypdf project pypdf pypdf projectのpypdfにおける過度な反復の脆弱性 CWE-834
過度なイテレーション 		CVE-2026-41313 2026-04-30 12:26 2026-04-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1101 6.5 MEDIUM
Adjacent 		watchguard agent Stack-based Buffer Overflow vulnerability in the WatchGuard Agent discovery service on Windows allows Overflow Buffers. An unauthenticated attacker on the same local network could exploit this vulner… Update CWE-121
Stack-based Buffer Overflow 		CVE-2026-41286 2026-05-12 03:36 2026-05-7 Show GitHub Exploit DB Packet Storm
1102 7.8 HIGH
Local 		watchguard agent Incorrect permission assignment for a resource in the patch management component of the WatchGuard Agent on Windows allows an authenticated local user to elevate their privileges to NT AUTHORITY\\SYS… Update CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2026-41288 2026-05-12 03:35 2026-05-7 Show GitHub Exploit DB Packet Storm
1103 7.8 HIGH
Local 		watchguard agent Use of Hard-coded Cryptographic Key vulnerability in WatchGuard Agent on Windows allows Inclusion of Code in Existing Process.This issue affects WatchGuard Agent: before 1.25.03.0000. Update CWE-321
 Use of Hard-coded Cryptographic Key 		CVE-2026-6787 2026-05-12 03:33 2026-05-7 Show GitHub Exploit DB Packet Storm
1104 7.8 HIGH
Local 		watchguard agent Uncontrolled Search Path Element vulnerability in WatchGuard Agent on Windows allows Using Malicious Files.This issue affects WatchGuard Agent before 1.25.03.0000. Update CWE-427
 Uncontrolled Search Path Element 		CVE-2026-6788 2026-05-12 03:33 2026-05-7 Show GitHub Exploit DB Packet Storm
1105 7.5 HIGH
Network 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ovpn: tcp - fix packet extraction from stream When processing TCP stream data in ovpn_tcp_recv, we receive large cloned skbs from… Update CWE-190
 Integer Overflow or Wraparound 		CVE-2026-43254 2026-05-12 03:21 2026-05-6 Show GitHub Exploit DB Packet Storm
1106 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: wifi: libertas: fix WARNING in usb_tx_block The function usb_tx_block() submits cardp->tx_urb without ensuring that any previous … Update NVD-CWE-noinfo
CVE-2026-43255 2026-05-12 03:18 2026-05-6 Show GitHub Exploit DB Packet Storm
1107 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: media: qcom: camss: vfe: Fix out-of-bounds access in vfe_isr_reg_update() vfe_isr() iterates using MSM_VFE_IMAGE_MASTERS_NUM(7) a… Update CWE-125
Out-of-bounds Read 		CVE-2026-43256 2026-05-12 03:16 2026-05-6 Show GitHub Exploit DB Packet Storm
1108 7.3 HIGH
Network 		- - A vulnerability was detected in OpenClaw up to 2026.1.24. The impacted element is the function handleBlueBubblesWebhookRequest of the file extensions/bluebubbles/src/monitor.ts of the component blueb… New CWE-287
Improper Authentication 		CVE-2026-8305 2026-05-12 03:16 2026-05-12 Show GitHub Exploit DB Packet Storm
1109 4.6 MEDIUM
Adjacent 		- - A vulnerability was determined in Dotouch XproUPF 2.0.0-release-088aa7c4. Affected is an unknown function of the component UPF. This manipulation causes improper access controls. A high degree of com… Update CWE-266
CWE-284
 Incorrect Privilege Assignment
Improper Access Control 		CVE-2026-8233 2026-05-12 03:16 2026-05-10 Show GitHub Exploit DB Packet Storm
1110 4.8 MEDIUM
Network 		- - Stored cross-site scripting (XSS) vulnerability in pgAdmin 4 Browser Tree and Explain Visualizer modules. User-controlled PostgreSQL object names (database, schema, table, column, etc.) were assigne… New CWE-79
Cross-site Scripting 		CVE-2026-7814 2026-05-12 03:16 2026-05-12 Show GitHub Exploit DB Packet Storm