Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 15, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2181	6.5	警告 Network	OpenClaw	OpenClaw	OpenClawにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-3689	2026-04-30 12:29	2026-04-11	Show	GitHub Exploit DB Packet Storm

2182	7.4	重要 Network	OpenClaw	OpenClaw	OpenClawにおける認証時の IP アドレスへの依存に関する脆弱性	CWE-291 認証時の IP アドレスへの依存	CVE-2026-3690	2026-04-30 12:29	2026-04-11	Show	GitHub Exploit DB Packet Storm

2183	5.3	警告 Network	OpenClaw	OpenClaw	OpenClawにおける情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2026-3691	2026-04-30 12:29	2026-04-11	Show	GitHub Exploit DB Packet Storm

2184	7.3	重要 Network	Shenzhen Tenda Technology Co.,Ltd.	w30e ファームウェア	Shenzhen Tenda Technology Co.,Ltd.のw30e ファームウェアにおけるコマンドインジェクションの脆弱性	CWE-77 コマンドインジェクション	CVE-2026-38834	2026-04-30 12:29	2026-04-21	Show	GitHub Exploit DB Packet Storm

2185	9.8	緊急 Network	Shenzhen Tenda Technology Co.,Ltd.	w30e ファームウェア	Shenzhen Tenda Technology Co.,Ltd.のw30e ファームウェアにおけるコマンドインジェクションの脆弱性	CWE-77 コマンドインジェクション	CVE-2026-38835	2026-04-30 12:29	2026-04-21	Show	GitHub Exploit DB Packet Storm

2186	5.4	警告 Network	pyLoad	pyLoad	pyLoadにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-40071	2026-04-30 12:29	2026-04-9	Show	GitHub Exploit DB Packet Storm

2187	6.5	警告 Network	getkirby	kirby	getkirbyのkirbyにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-40099	2026-04-30 12:29	2026-04-24	Show	GitHub Exploit DB Packet Storm

2188	5.4	警告 Network	Auth0 Inc.	nextjs-auth0	Auth0 Inc.のnextjs-auth0における複数の脆弱性	CWE-362 CWE-863	CVE-2026-40155	2026-04-30 12:29	2026-04-17	Show	GitHub Exploit DB Packet Storm

2189	5.5	警告 Local	systemd project	systemd	systemd projectのsystemdにおける不適切な動作順序に関する脆弱性	CWE-696 不適切な動作順序	CVE-2026-40223	2026-04-30 12:29	2026-04-10	Show	GitHub Exploit DB Packet Storm

2190	7.3	重要 Local	systemd project	systemd	systemd projectのsystemdにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-40224	2026-04-30 12:29	2026-04-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
313711	7.5	HIGH Network	rust-bitcoin	miniscript	The Miniscript (aka rust-miniscript) library before 12.2.0 for Rust allows stack consumption because it does not properly track tree depth.	CWE-787 Out-of-bounds Write	CVE-2024-44073	2024-09-7 02:35	2024-08-19	Show	GitHub Exploit DB Packet Storm

313712	-		-	-	The News Element Elementor Blog Magazine WordPress plugin before 1.0.6 is vulnerable to Local File Inclusion via the template parameter. This makes it possible for unauthenticated attacker to include…	-	CVE-2024-6459	2024-09-7 02:35	2024-08-17	Show	GitHub Exploit DB Packet Storm

313713	9.8	CRITICAL Network	totolink	lr350_firmware	Incorrect access control in TOTOLINK LR350 V9.3.5u.6369_B20220309 allows attackers to obtain the apmib configuration file, which contains the username and the password, via a crafted request to /cgi-…	NVD-CWE-noinfo	CVE-2024-42967	2024-09-7 02:35	2024-08-16	Show	GitHub Exploit DB Packet Storm

313714	9.8	CRITICAL Network	tenda	fh1201_firmware	An issue in the handler function in /goform/telnet of Tenda FH1201 v1.2.0.14 (408) allows attackers to execute arbitrary commands via a crafted HTTP request.	NVD-CWE-noinfo	CVE-2024-42947	2024-09-7 02:35	2024-08-16	Show	GitHub Exploit DB Packet Storm

313715	7.8	HIGH Local	cysoft168	super_easy_enterprise_management_system	SQL Injection vulnerability in Super easy enterprise management system v.1.0.0 and before allows a local attacker to execute arbitrary code via a crafted script to the/ajax/Login.ashx component.	CWE-89 SQL Injection	CVE-2024-42679	2024-09-7 02:35	2024-08-15	Show	GitHub Exploit DB Packet Storm

313716	4.8	MEDIUM Network	micro.company	collect.chat	The Chatbot for WordPress by Collect.chat ?? WordPress plugin before 2.4.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Sit…	CWE-79 Cross-site Scripting	CVE-2024-6498	2024-09-7 02:35	2024-08-5	Show	GitHub Exploit DB Packet Storm

313717	8.6	HIGH Network	rocket.chat	rocket.chat	A Server-Side Request Forgery (SSRF) affects Rocket.Chat's Twilio webhook endpoint before version 6.10.1.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2024-39713	2024-09-7 02:35	2024-08-5	Show	GitHub Exploit DB Packet Storm

313718	-		-	-	The UsersWP WordPress plugin before 1.2.12 uses predictable filenames when an admin generates an export, which could allow unauthenticated attackers to download them and retrieve sensitive informati…	-	CVE-2024-6477	2024-09-7 02:35	2024-08-3	Show	GitHub Exploit DB Packet Storm

313719	7.2	HIGH Network	teamt5	threatsonar_anti-ransomware	ThreatSonar Anti-Ransomware from TeamT5 does not properly validate the content of uploaded files. Remote attackers with administrator privileges on the product platform can upload malicious files, w…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2024-7694	2024-09-7 02:24	2024-08-12	Show	GitHub Exploit DB Packet Storm

313720	5.4	MEDIUM Network	wpextended	wp_extended	The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.0.8 via the duplicate_post function due…	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2024-8123	2024-09-7 02:20	2024-09-4	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed