Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 22, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
225981	10	危険	ヒューレット・パッカードアドビシステムズオラクル	-	Adobe Flash Player および Adobe AIR におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2011-2459	2013-03-27 17:31	2011-11-10	Show	GitHub Exploit DB Packet Storm

225982	10	危険	ヒューレット・パッカードアドビシステムズオラクル	-	Adobe Flash Player および Adobe AIR におけるクロスドメインポリシーを回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-2458	2013-03-27 17:29	2011-11-10	Show	GitHub Exploit DB Packet Storm

225983	10	危険	ヒューレット・パッカードアドビシステムズオラクル	-	Adobe Flash Player および Adobe AIR におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-2457	2013-03-27 17:27	2011-11-10	Show	GitHub Exploit DB Packet Storm

225984	10	危険	ヒューレット・パッカードアドビシステムズオラクル	-	Adobe Flash Player および Adobe AIR におけるバッファオーバーフローの脆弱性	CWE-noinfo 情報不足	CVE-2011-2456	2013-03-27 17:26	2011-11-10	Show	GitHub Exploit DB Packet Storm

225985	10	危険	ヒューレット・パッカードアドビシステムズオラクル	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-2455	2013-03-27 17:25	2011-11-10	Show	GitHub Exploit DB Packet Storm

225986	10	危険	ヒューレット・パッカードアドビシステムズオラクル	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-2454	2013-03-27 17:24	2011-11-10	Show	GitHub Exploit DB Packet Storm

225987	10	危険	ヒューレット・パッカードアドビシステムズオラクル	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-2453	2013-03-27 17:22	2011-11-10	Show	GitHub Exploit DB Packet Storm

225988	10	危険	ヒューレット・パッカードアドビシステムズオラクル	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-2452	2013-03-27 17:19	2011-11-10	Show	GitHub Exploit DB Packet Storm

225989	10	危険	ヒューレット・パッカードアドビシステムズオラクル	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-2451	2013-03-27 17:18	2011-11-10	Show	GitHub Exploit DB Packet Storm

225990	10	危険	ヒューレット・パッカードアドビシステムズオラクル	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-2450	2013-03-27 17:16	2011-11-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2421	6.0	MEDIUM Network	openclaw	openclaw	OpenClaw before 2026.4.23 caches resolved webhook route secrets backed by SecretRef values, allowing stale secrets to remain valid after rotation and reload. Attackers with previously valid webhook r…	CWE-672 Operation on a Resource after Expiration or Release	CVE-2026-45005	2026-05-13 23:14	2026-05-12	Show	GitHub Exploit DB Packet Storm

2422	7.8	HIGH Local	openclaw	openclaw	OpenClaw before 2026.4.23 contains an arbitrary code execution vulnerability in the bundled plugin setup resolver that loads setup-api.js from process.cwd() during provider setup metadata resolution.…	CWE-427 Uncontrolled Search Path Element	CVE-2026-45004	2026-05-13 23:13	2026-05-12	Show	GitHub Exploit DB Packet Storm

2423	5.0	MEDIUM Local	openclaw	openclaw	OpenClaw before 2026.4.22 allows workspace dotenv files to override connector endpoint hosts for Matrix, Mattermost, IRC, and Synology connectors. Attackers with workspace access can redirect runtime…	CWE-441 Confused Deputy	CVE-2026-45003	2026-05-13 23:13	2026-05-12	Show	GitHub Exploit DB Packet Storm

2424	5.3	MEDIUM Network	openclaw	openclaw	OpenClaw before 2026.4.20 contains a hook session-key bypass vulnerability that allows attackers to circumvent the hooks.allowRequestSessionKey opt-in restriction. Attackers can render externally inf…	CWE-863 Incorrect Authorization	CVE-2026-45002	2026-05-13 23:13	2026-05-12	Show	GitHub Exploit DB Packet Storm

2425	7.1	HIGH Network	openclaw	openclaw	OpenClaw before 2026.4.20 contains a guard bypass vulnerability in the agent-facing gateway config.patch and config.apply endpoints that fails to protect operator-trusted settings including sandbox p…	CWE-862 Missing Authorization	CVE-2026-45001	2026-05-13 23:13	2026-05-12	Show	GitHub Exploit DB Packet Storm

2426	5.0	MEDIUM Network	openclaw	openclaw	OpenClaw before 2026.4.20 contains a server-side request forgery vulnerability in browser CDP profile creation that skips strict-mode SSRF policy checks. Attackers can create stored profiles pointing…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-45000	2026-05-13 23:12	2026-05-12	Show	GitHub Exploit DB Packet Storm

2427	5.3	MEDIUM Network	openclaw	openclaw	OpenClaw before 2026.4.20 fails to properly preserve untrusted labels for isolated cron awareness events, allowing webhook-triggered cron agent output to be recorded as trusted system events. Attacke…	CWE-345 Insufficient Verification of Data Authenticity	CVE-2026-44999	2026-05-13 23:12	2026-05-12	Show	GitHub Exploit DB Packet Storm

2428	5.4	MEDIUM Network	openclaw	openclaw	OpenClaw before 2026.4.20 contains a tool policy bypass vulnerability allowing bundled MCP and LSP tools to circumvent configured tool restrictions. Attackers with local agent access can append restr…	CWE-863 Incorrect Authorization	CVE-2026-44998	2026-05-13 23:12	2026-05-12	Show	GitHub Exploit DB Packet Storm

2429	4.3	MEDIUM Network	openclaw	openclaw	OpenClaw before 2026.4.22 contains a security envelope constraint bypass vulnerability allowing restricted subagents to spawn ACP child sessions that fail to inherit depth, child-count limits, contro…	CWE-266 Incorrect Privilege Assignment	CVE-2026-44997	2026-05-13 23:12	2026-05-12	Show	GitHub Exploit DB Packet Storm

2430	3.7	LOW Network	openclaw	openclaw	OpenClaw before 2026.4.15 contains an arbitrary local file read vulnerability in the webchat audio embedding helper that fails to apply local media root containment checks. Attackers can influence ag…	CWE-22 Path Traversal	CVE-2026-44996	2026-05-13 23:12	2026-05-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed