Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 22, 2026, 12:09 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
2481 9 緊急
Network
angular Angular CLI angularのAngular CLIにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-32635 2026-05-7 12:30 2026-03-16 Show GitHub Exploit DB Packet Storm
2482 6.5 警告
Network
Ruby on Rails project rails Ruby on Rails projectのRailsにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て
CVE-2026-33658 2026-05-7 12:30 2026-03-26 Show GitHub Exploit DB Packet Storm
2483 9.8 緊急
Network
ggml.ai llama.cpp ggml.aiのllama.cppにおけるバッファエラーの脆弱性 CWE-119
バッファエラー
CVE-2026-34159 2026-05-7 12:30 2026-04-1 Show GitHub Exploit DB Packet Storm
2484 7.8 重要
Local
OpenClaw OpenClaw OpenClawにおける許容された入力値の許可リストに関する脆弱性 CWE-183
許容された入力値の許可リスト
CVE-2026-41387 2026-05-7 12:30 2026-04-28 Show GitHub Exploit DB Packet Storm
2485 6.5 警告
Network
OpenClaw OpenClaw OpenClawにおける不完全な内部状態の区別に関する脆弱性 CWE-372
不完全な内部状態の区別
CVE-2026-41388 2026-05-7 12:30 2026-04-28 Show GitHub Exploit DB Packet Storm
2486 7.3 重要
Local
OpenClaw OpenClaw OpenClawにおけるセキュリティ決定の信頼できない入力への依存に関する脆弱性 CWE-807
セキュリティ決定の信頼できない入力への依存
CVE-2026-41390 2026-05-7 12:30 2026-04-28 Show GitHub Exploit DB Packet Storm
2487 6.1 警告
Local
OpenClaw OpenClaw OpenClawにおける不完全なブラックリストに関する脆弱性 CWE-184
不完全なブラックリスト
CVE-2026-41391 2026-05-7 12:30 2026-04-28 Show GitHub Exploit DB Packet Storm
2488 7.3 重要
Local
OpenClaw OpenClaw OpenClawにおける不完全なブラックリストに関する脆弱性 CWE-184
不完全なブラックリスト
CVE-2026-41392 2026-05-7 12:29 2026-04-28 Show GitHub Exploit DB Packet Storm
2489 4.8 警告
Adjacent
OpenClaw OpenClaw OpenClawにおける同一生成元ポリシー違反に関する脆弱性 CWE-346
同一生成元ポリシー違反
CVE-2026-41393 2026-05-7 12:29 2026-04-28 Show GitHub Exploit DB Packet Storm
2490 8.2 重要
Network
OpenClaw OpenClaw OpenClawにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如
CVE-2026-41394 2026-05-7 12:29 2026-04-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313271 - - - The Versa Director offers REST APIs for orchestration and management. By design, certain APIs, such as the login screen, banner display, and device registration, do not require authentication. Howeve… - CVE-2024-45229 2024-09-26 22:32 2024-09-21 Show GitHub Exploit DB Packet Storm
313272 - - - Arc before 2024-08-26 allows remote code execution in JavaScript boosts. Boosts that run JavaScript cannot be shared by default; however (because of misconfigured Firebase ACLs), it is possible to cr… - CVE-2024-45489 2024-09-26 22:32 2024-09-21 Show GitHub Exploit DB Packet Storm
313273 - - - A vulnerability classified as critical has been found in Codezips Internal Marks Calculation 1.0. Affected is an unknown function of the file index.php. The manipulation of the argument tid leads to … CWE-89
SQL Injection
CVE-2024-9037 2024-09-26 22:32 2024-09-21 Show GitHub Exploit DB Packet Storm
313274 - - - A vulnerability was found in itsourcecode Online Bookstore 1.0. It has been rated as critical. This issue affects some unknown processing of the file admin_add.php. The manipulation of the argument i… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2024-9036 2024-09-26 22:32 2024-09-21 Show GitHub Exploit DB Packet Storm
313275 - - - Tenda AC8v4 V16.03.34.06 has a stack overflow vulnerability in the fromAdvSetMacMtuWan function. - CVE-2024-46652 2024-09-26 22:32 2024-09-21 Show GitHub Exploit DB Packet Storm
313276 - - - A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/login.php of the component Admin Login… CWE-89
SQL Injection
CVE-2024-9035 2024-09-26 22:32 2024-09-21 Show GitHub Exploit DB Packet Storm
313277 - - - A vulnerability was found in code-projects Patient Record Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file login.php. The manipulatio… CWE-89
SQL Injection
CVE-2024-9034 2024-09-26 22:32 2024-09-21 Show GitHub Exploit DB Packet Storm
313278 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check index for aux_rd_interval before using aux_rd_interval has size of 7 and should be checked. This fixes 3 … NVD-CWE-noinfo
CVE-2024-46728 2024-09-26 22:31 2024-09-18 Show GitHub Exploit DB Packet Storm
313279 7.1 HIGH
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: fix the Out-of-bounds read warning using index i - 1U may beyond element index for mc_data[] when i = 0. CWE-125
Out-of-bounds Read
CVE-2024-46731 2024-09-26 22:29 2024-09-18 Show GitHub Exploit DB Packet Storm
313280 5.4 MEDIUM
Network
puma puma Puma is a Ruby/Rack web server built for parallelism. In affected versions clients could clobber values set by intermediate proxies (such as X-Forwarded-For) by providing a underscore version of the … CWE-444
HTTP Request Smuggling
CVE-2024-45614 2024-09-26 22:28 2024-09-20 Show GitHub Exploit DB Packet Storm