Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 29, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
229591 5 警告 サムスン - Samsung Kies Air におけるサービス運用妨害 (クラッシュ) の脆弱性 CWE-noinfo
情報不足
CVE-2012-5859 2012-12-5 15:59 2012-12-3 Show GitHub Exploit DB Packet Storm
229592 4.3 警告 サムスン - Samsung Kies Air における端末内の任意のコンテンツを読み取られる脆弱性 CWE-287
不適切な認証
CVE-2012-5858 2012-12-5 15:57 2012-12-3 Show GitHub Exploit DB Packet Storm
229593 7.5 危険 FlashTux - WeeChat 用 プラグイン API における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2012-5534 2012-12-5 15:48 2012-11-18 Show GitHub Exploit DB Packet Storm
229594 6.8 警告 CMS Made Simple - CMS Made Simple におけるクロスサイトリクエストフォージェリ脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2012-5450 2012-12-5 14:30 2012-10-17 Show GitHub Exploit DB Packet Storm
229595 6 警告 OrangeHRM - OrangeHRM における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-5367 2012-12-5 14:26 2012-12-3 Show GitHub Exploit DB Packet Storm
229596 1.9 注意 シトリックス・システムズ - Xen におけるサービス運用妨害 (ホストハング) の脆弱性 CWE-noinfo
情報不足
CVE-2012-2934 2012-12-5 13:21 2012-06-12 Show GitHub Exploit DB Packet Storm
229597 1.9 注意 シトリックス・システムズ - Xen 用 MMIO オペレーションエミュレータにおけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-3432 2012-12-5 13:05 2012-07-26 Show GitHub Exploit DB Packet Storm
229598 1.9 注意 シトリックス・システムズ - Xen におけるサービス運用妨害 (ゲストクラッシュ) の脆弱性 CWE-DesignError
CVE-2012-0218 2012-12-5 12:22 2012-06-12 Show GitHub Exploit DB Packet Storm
229599 5 警告 Joomla! - Joomla! における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-1599 2012-12-5 11:58 2012-03-27 Show GitHub Exploit DB Packet Storm
229600 7.5 危険 Joomla! - Joomla! における脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-1598 2012-12-5 11:55 2012-03-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
71 - - - Netskope was notified about a potential gap in the Endpoint DLP Module for Netskope Client on Windows systems. The successful exploitation of the gap can potentially allow an unprivileged user to tri… New CWE-125
Out-of-bounds Read
CVE-2026-2810 2026-04-30 01:16 2026-04-30 Show GitHub Exploit DB Packet Storm
72 3.3 LOW
Local
uutils coreutils A logic error in the tr utility of uutils coreutils causes the program to incorrectly define the [:graph:] and [:print:] character classes. The implementation mistakenly includes the ASCII space char… Update CWE-684
 Incorrect Provision of Specified Functionality
CVE-2026-35379 2026-04-30 00:59 2026-04-23 Show GitHub Exploit DB Packet Storm
73 5.5 MEDIUM
Local
uutils coreutils A logic error in the cut utility of uutils coreutils causes the program to incorrectly interpret the literal two-byte string '' (two single quotes) as an empty delimiter. The implementation mistakenl… Update CWE-20
NVD-CWE-noinfo
 Improper Input Validation 
CVE-2026-35380 2026-04-30 00:57 2026-04-23 Show GitHub Exploit DB Packet Storm
74 5.4 MEDIUM
Network
openclaw openclaw OpenClaw before 2026.3.31 contains a logic error in Discord component interaction routing that misclassifies group direct messages as direct messages in extensions/discord/src/monitor/agent-component… Update CWE-351
 Insufficient Type Distinction
CVE-2026-41341 2026-04-30 00:56 2026-04-24 Show GitHub Exploit DB Packet Storm
75 8.1 HIGH
Adjacent
openclaw openclaw OpenClaw before 2026.3.28 contains an authentication bypass vulnerability in the remote onboarding component that persists unauthenticated discovery endpoints without explicit trust confirmation. Att… Update CWE-346
 Origin Validation Error
CVE-2026-41342 2026-04-30 00:55 2026-04-24 Show GitHub Exploit DB Packet Storm
76 8.8 HIGH
Network
openclaw openclaw OpenClaw before 2026.3.28 contains a privilege escalation vulnerability in the chat.send endpoint that allows write-scoped gateway callers to persist admin-only verboseLevel session overrides. Attack… Update CWE-863
 Incorrect Authorization
CVE-2026-41344 2026-04-30 00:52 2026-04-24 Show GitHub Exploit DB Packet Storm
77 10.0 CRITICAL
Network
voidzero vite\+ Vite+ is a unified toolchain and entry point for web development. Prior to version 0.1.17, `downloadPackageManager()` accepts an untrusted `version` string and uses it directly in filesystem paths. A… Update CWE-22
Path Traversal
CVE-2026-41211 2026-04-30 00:49 2026-04-23 Show GitHub Exploit DB Packet Storm
78 7.8 HIGH
Local
parzivalhack pyspector PySpector is a static analysis security testing (SAST) Framework engineered for modern Python development workflows. The plugin security validator in PySpector uses AST-based static analysis to preve… Update CWE-184
 Incomplete Blacklist
CVE-2026-41206 2026-04-30 00:48 2026-04-23 Show GitHub Exploit DB Packet Storm
79 5.4 MEDIUM
Network
siemvk openlearn OpenLearn is open-source educational forum software. Prior to commit 844b2a40a69d0c4911580fe501923f0b391313ab, when `safeMode` is enabled, unapproved forum posts are hidden from the public list, but … Update CWE-284
Improper Access Control
CVE-2026-41243 2026-04-30 00:39 2026-04-23 Show GitHub Exploit DB Packet Storm
80 7.8 HIGH
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: can: raw: fix ro->uniq use-after-free in raw_rcv() raw_release() unregisters raw CAN receive filters via can_rx_unregister(), but… Update CWE-416
 Use After Free
CVE-2026-31532 2026-04-30 00:26 2026-04-23 Show GitHub Exploit DB Packet Storm