Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 26, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
227051 - - Ruby on Rails project - ** 削除 ** Ruby on Rails 用 Authlogic gem における SQL インジェクションの脆弱性 - CVE-2012-5664 2012-12-28 14:22 2012-12-26 Show GitHub Exploit DB Packet Storm
227052 4.3 警告 Opera Software ASA - Android 版 Opera Mini ウェブブラウザおよび Opera Mobile ウェブブラウザにおいて任意のスクリプトが実行される脆弱性 CWE-200
情報漏えい
CVE-2012-5180 2012-12-28 14:17 2012-12-20 Show GitHub Exploit DB Packet Storm
227053 2.6 注意 WordPress.org - WordPress における有効なセッション識別子を取得される脆弱性 CWE-200
情報漏えい
CVE-2012-5868 2012-12-28 11:58 2012-12-27 Show GitHub Exploit DB Packet Storm
227054 4.9 警告 Linux - Linux Kernel と一緒に配布される hypervkvpd におけるサービス運用妨害 (Daemon Exit) の脆弱性 CWE-noinfo
情報不足
CVE-2012-5532 2012-12-28 11:44 2012-12-22 Show GitHub Exploit DB Packet Storm
227055 5 警告 シトリックス・システムズ - Citrix XenDesktop Virtual Desktop Agent における USB デバイスへのアクセス権を保持される脆弱性 CWE-noinfo
情報不足
CVE-2012-6314 2012-12-28 11:20 2012-12-11 Show GitHub Exploit DB Packet Storm
227056 9.3 危険 シトリックス・システムズ - Citrix XenApp の XML Service インターフェースにおける任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2012-5161 2012-12-28 11:08 2012-12-11 Show GitHub Exploit DB Packet Storm
227057 10 危険 CA Technologies - CA IdentityMinder におけるアクセス制限を回避される脆弱性 CWE-noinfo
情報不足
CVE-2012-6299 2012-12-28 10:58 2012-12-20 Show GitHub Exploit DB Packet Storm
227058 10 危険 CA Technologies - CA IdentityMinder における任意のコマンドを実行される脆弱性 CWE-noinfo
情報不足
CVE-2012-6298 2012-12-28 10:57 2012-12-20 Show GitHub Exploit DB Packet Storm
227059 5 警告 DELL EMC (旧 EMC Corporation) - EMC Data Protection Advisor におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2012-4616 2012-12-28 10:40 2012-12-26 Show GitHub Exploit DB Packet Storm
227060 7.2 危険 IBM - IBM z/OS 上で稼働する Tivoli NetView における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-5951 2012-12-28 10:38 2012-12-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3661 7.3 HIGH
Network
- - A vulnerability was found in SourceCodester Pharmacy Sales and Inventory System 1.0. This affects an unknown part of the file /ajax.php?action=save_user. The manipulation of the argument ID results i… CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-8083 2026-05-8 04:48 2026-05-8 Show GitHub Exploit DB Packet Storm
3662 8.8 HIGH
Local
sandboxie-plus sandboxie Sandboxie-Plus is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, the SbieSvc proxy service's GetRawInputDeviceInfoSlave handler contains two vulnerabilit… CWE-121
Stack-based Buffer Overflow
CVE-2026-34459 2026-05-8 04:48 2026-05-6 Show GitHub Exploit DB Packet Storm
3663 7.0 HIGH
Local
sandboxie-plus sandboxie Sandboxie-Plus is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, a Time-of-Check-to-Time-of-Use (TOCTOU) race condition exists during addon installation.… CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-34596 2026-05-8 04:45 2026-05-6 Show GitHub Exploit DB Packet Storm
3664 4.3 MEDIUM
Network
openclaw openclaw OpenClaw before 2026.4.15 contains an arbitrary file read vulnerability in the QMD backend memory_get function that allows callers to read any Markdown files within the workspace root. Attackers with… CWE-183
 Permissive List of Allowed Inputs
CVE-2026-44111 2026-05-8 04:42 2026-05-7 Show GitHub Exploit DB Packet Storm
3665 8.8 HIGH
Network
openclaw openclaw OpenClaw before 2026.4.15 contains an authorization bypass vulnerability in Matrix room control-command authorization that trusts DM pairing-store entries. Attackers with DM-paired sender IDs can exe… CWE-863
 Incorrect Authorization
CVE-2026-44110 2026-05-8 04:41 2026-05-7 Show GitHub Exploit DB Packet Storm
3666 9.8 CRITICAL
Network
openclaw openclaw OpenClaw before 2026.4.15 contains an authentication bypass vulnerability in Feishu webhook and card-action validation that allows unauthenticated requests to reach command dispatch. Missing encryptK… CWE-1188
 Insecure Default Initialization of Resource
CVE-2026-44109 2026-05-8 04:40 2026-05-7 Show GitHub Exploit DB Packet Storm
3667 9.8 CRITICAL
Network
openclaw openclaw OpenClaw before 2026.4.15 captures resolved bearer-auth configuration at startup, allowing revoked tokens to remain valid after SecretRef rotation. Gateway HTTP and WebSocket handlers fail to re-reso… CWE-672
 Operation on a Resource after Expiration or Release
CVE-2026-43585 2026-05-8 04:36 2026-05-7 Show GitHub Exploit DB Packet Storm
3668 8.8 HIGH
Network
openclaw openclaw OpenClaw before 2026.4.10 contains an insufficient environment variable denylist vulnerability in its exec environment policy that allows operator-supplied overrides of high-risk interpreter startup … CWE-184
 Incomplete Blacklist
CVE-2026-43584 2026-05-8 04:36 2026-05-7 Show GitHub Exploit DB Packet Storm
3669 7.8 HIGH
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy Buffer size used in dma allocation and memcpy is wrong. It can lead to und… CWE-787
 Out-of-bounds Write
CVE-2026-31743 2026-05-8 04:36 2026-05-2 Show GitHub Exploit DB Packet Storm
3670 6.5 MEDIUM
Network
openclaw openclaw OpenClaw versions 2026.4.10 before 2026.4.14 fail to persist session context during delivery queue recovery for media replay. Attackers can exploit recovered queued outbound media to bypass group too… CWE-862
 Missing Authorization
CVE-2026-43583 2026-05-8 04:36 2026-05-7 Show GitHub Exploit DB Packet Storm