Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 15, 2026, 2:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2231	7.8	重要 Local	OpenClaw	OpenClaw	OpenClawにおける信頼できない制御領域からの機能の組み込みに関する脆弱性	CWE-829 信頼性のない制御領域からの機能の組み込み	CVE-2026-41295	2026-04-30 12:26	2026-04-21	Show	GitHub Exploit DB Packet Storm

2232	8.2	重要 Network	OpenClaw	OpenClaw	OpenClawにおけるTime-of-check Time-of-use (TOCTOU) 競合状態の脆弱性	CWE-367 Time-of-check Time-of-use (TOCTOU) 競合状態	CVE-2026-41296	2026-04-30 12:26	2026-04-21	Show	GitHub Exploit DB Packet Storm

2233	7.6	重要 Network	OpenClaw	OpenClaw	OpenClawにおけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-41297	2026-04-30 12:26	2026-04-21	Show	GitHub Exploit DB Packet Storm

2234	5.4	警告 Network	OpenClaw	OpenClaw	OpenClawにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-41298	2026-04-30 12:26	2026-04-21	Show	GitHub Exploit DB Packet Storm

2235	7.1	重要 Network	OpenClaw	OpenClaw	OpenClawにおけるセキュリティ決定の信頼できない入力への依存に関する脆弱性	CWE-807 セキュリティ決定の信頼できない入力への依存	CVE-2026-41299	2026-04-30 12:26	2026-04-21	Show	GitHub Exploit DB Packet Storm

2236	6.5	警告 Network	OpenClaw	OpenClaw	OpenClawにおける不完全な内部状態の区別に関する脆弱性	CWE-372 不完全な内部状態の区別	CVE-2026-41300	2026-04-30 12:26	2026-04-21	Show	GitHub Exploit DB Packet Storm

2237	5.3	警告 Network	OpenClaw	OpenClaw	OpenClawにおけるデジタル署名の検証に関する脆弱性	CWE-347 デジタル署名の不適切な検証	CVE-2026-41301	2026-04-30 12:26	2026-04-21	Show	GitHub Exploit DB Packet Storm

2238	6.3	警告 Network	OpenClaw	OpenClaw	OpenClawにおけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-41302	2026-04-30 12:26	2026-04-21	Show	GitHub Exploit DB Packet Storm

2239	8.8	重要 Network	OpenClaw	OpenClaw	OpenClawにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-41303	2026-04-30 12:26	2026-04-21	Show	GitHub Exploit DB Packet Storm

2240	6.5	警告 Network	pypdf project	pypdf	pypdf projectのpypdfにおける過剰なサイズ値のメモリ割り当てに関する脆弱性	CWE-789 過剰なサイズ値のメモリ割り当て	CVE-2026-41312	2026-04-30 12:26	2026-04-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
941	9.8	CRITICAL Network	-	-	The _load_model() function in the neural_magic_training.py script of the optimate project in commit a6d302f912b481c94370811af6b11402f51d377f (2024-07-21) allows arbitrary code execution. When a user … New	CWE-94 Code Injection	CVE-2026-31217	2026-05-14 00:52	2026-05-13	Show	GitHub Exploit DB Packet Storm

942	8.8	HIGH Network	-	-	The superduper project thru v0.10.0 contains a critical remote code execution vulnerability in its query parsing component. The _parse_op_part() function in query.py uses the unsafe eval() function t… New	CWE-94 Code Injection	CVE-2026-31225	2026-05-14 00:52	2026-05-13	Show	GitHub Exploit DB Packet Storm

943	9.8	CRITICAL Network	-	-	The TinyZero project thru commit 6652a63c57fa7e5ccde3fc9c598c7176ff15b839 (2025-58-24) contains a critical command injection vulnerability (CWE-78) in its HDFS file operation utilities. The vulnerabi… New	CWE-78 OS Command	CVE-2026-31226	2026-05-14 00:52	2026-05-13	Show	GitHub Exploit DB Packet Storm

944	9.8	CRITICAL Network	-	-	The Adversarial Robustness Toolbox (ART) thru 1.20.1 contains a remote code execution vulnerability in its Kubeflow component. The robustness evaluation function for PyTorch models uses the unsafe ev… New	CWE-94 Code Injection	CVE-2026-31228	2026-05-14 00:52	2026-05-13	Show	GitHub Exploit DB Packet Storm

945	9.8	CRITICAL Network	-	-	Exim before 4.99.3, in certain GnuTLS configurations, has a remotely reachable use-after-free in the BDAT body parsing path. It is triggered when a client sends a TLS close_notify mid-body during a C… New	CWE-416 Use After Free	CVE-2026-45185	2026-05-14 00:52	2026-05-13	Show	GitHub Exploit DB Packet Storm

946	9.8	CRITICAL Network	-	-	The torch-checkpoint-shrink.py script in the ml-engineering project in commit 0099885db36a8f06556efe1faf552518852cb1e0 (2025-20-27) contains an insecure deserialization vulnerability (CWE-502). The s… New	CWE-502 Deserialization of Untrusted Data	CVE-2026-31214	2026-05-14 00:51	2026-05-13	Show	GitHub Exploit DB Packet Storm

947	-		-	-	The llm CLI tool thru 0.27.1 contains a critical code injection vulnerability via its --functions command-line argument. This argument is intended to allow users to provide custom Python function def… New	-	CVE-2026-31236	2026-05-14 00:48	2026-05-13	Show	GitHub Exploit DB Packet Storm

948	8.0	HIGH Network	-	-	An arbitrary file upload vulnerability in MK-Auth 23.01K4.9 allows attackers to execute arbitrary code via uploading a crafted PHP file. New	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2023-27753	2026-05-14 00:48	2026-05-13	Show	GitHub Exploit DB Packet Storm

949	5.4	MEDIUM Network	-	-	An insecure direct object reference in MK-Auth 23.01K4.9 allows attackers to access and send support calls for other users via manipulation of the chamado parameter through a crafted GET request. New	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2023-30059	2026-05-14 00:48	2026-05-13	Show	GitHub Exploit DB Packet Storm

950	6.5	MEDIUM Network	-	-	GPT-Pilot thru commit 0819827ce20346ef5f25b3fe29293cb448840565 (2025-09-03) contains a command injection vulnerability (CWE-78) in the Executor.run() method. During project execution, when the system… Update	CWE-78 OS Command	CVE-2026-31246	2026-05-14 00:47	2026-05-12	Show	GitHub Exploit DB Packet Storm