Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 4:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
250851 7.5 危険 MH Products - MHP DownloadScript の admin/login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4842 2011-09-30 14:09 2011-09-27 Show GitHub Exploit DB Packet Storm
250852 10 危険 Interactive Data Corporation. - eSignal の WinSig.exe におけるサービス運用妨害 (クラッシュ) の脆弱性 CWE-119
バッファエラー
CVE-2011-3494 2011-09-30 14:01 2011-09-16 Show GitHub Exploit DB Packet Storm
250853 5 警告 Cogent Real-Time Systems Inc. - Cogent DataHub における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2011-3501 2011-09-30 13:35 2011-09-16 Show GitHub Exploit DB Packet Storm
250854 10 危険 Progea Srl - Progea Movicon / PowerHMI におけるサービス運用妨害 (メモリ破損およびクラッシュ) の脆弱性 CWE-119
バッファエラー
CVE-2011-3499 2011-09-30 13:29 2011-09-16 Show GitHub Exploit DB Packet Storm
250855 10 危険 Progea Srl - Progea Movicon / PowerHMI におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-3491 2011-09-30 13:23 2011-09-16 Show GitHub Exploit DB Packet Storm
250856 4.9 警告 baserCMSユーザー会 - BaserCMS におけるアクセス制限不備の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-2674 2011-09-30 12:04 2011-09-30 Show GitHub Exploit DB Packet Storm
250857 4.3 警告 baserCMSユーザー会 - BaserCMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-2673 2011-09-30 12:03 2011-09-30 Show GitHub Exploit DB Packet Storm
250858 5 警告 Joomla! - Joomla! における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2011-3747 2011-09-29 16:56 2011-09-23 Show GitHub Exploit DB Packet Storm
250859 9.3 危険 Argonne National Laboratory - Bcfg2 のサーバにおける任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2011-3211 2011-09-29 14:30 2011-09-16 Show GitHub Exploit DB Packet Storm
250860 9.3 危険 シーメンス - Siemens WinCC Runtime Advanced Loader におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-3321 2011-09-29 14:27 2011-08-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1881 5.0 MEDIUM
Network
openclaw openclaw OpenClaw versions 2026.2.14 through 2026.3.24 fail to consistently apply guild and channel policy gates to Discord button and component interactions. Attackers can trigger privileged component action… CWE-863
 Incorrect Authorization
CVE-2026-41367 2026-04-29 03:45 2026-04-28 Show GitHub Exploit DB Packet Storm
1882 6.5 MEDIUM
Network
openclaw openclaw OpenClaw before 2026.3.28 contains an environment variable disclosure vulnerability in the jq safe-bin policy that fails to block the $ENV filter. Attackers can bypass safe-bin restrictions by using … CWE-668
 Exposure of Resource to Wrong Sphere
CVE-2026-41368 2026-04-29 03:44 2026-04-28 Show GitHub Exploit DB Packet Storm
1883 6.5 MEDIUM
Network
openclaw openclaw OpenClaw before 2026.3.31 contains insufficient environment variable sanitization in host exec operations, failing to filter package, registry, Docker, compiler, and TLS override variables. Attackers… CWE-668
 Exposure of Resource to Wrong Sphere
CVE-2026-41369 2026-04-29 03:44 2026-04-28 Show GitHub Exploit DB Packet Storm
1884 8.5 HIGH
Network
openclaw openclaw OpenClaw before 2026.3.28 contains a privilege escalation vulnerability in chat.send that allows write-scoped gateway callers to trigger admin-only session reset operations. Attackers can rotate targ… CWE-863
 Incorrect Authorization
CVE-2026-41371 2026-04-29 03:44 2026-04-28 Show GitHub Exploit DB Packet Storm
1885 5.8 MEDIUM
Network
openclaw openclaw OpenClaw before 2026.4.2 fails to normalize trailing-dot localhost hosts in remote CDP discovery responses, allowing bypass of loopback protections. Attackers can craft hostile discovery responses re… CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2026-41372 2026-04-29 03:43 2026-04-28 Show GitHub Exploit DB Packet Storm
1886 8.8 HIGH
Network
jpcert logontracer An OS command Injection issue exists in LogonTracer prior to v2.0.0. An arbitrary OS command may be executed by a logged-in user. CWE-78
OS Command 
CVE-2026-33277 2026-04-29 03:43 2026-04-27 Show GitHub Exploit DB Packet Storm
1887 7.4 HIGH
Network
apache thrift Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixe… CWE-297
CWE-306
 Improper Validation of Certificate with Host Mismatch
Missing Authentication for Critical Function
CVE-2026-41603 2026-04-29 03:42 2026-04-28 Show GitHub Exploit DB Packet Storm
1888 5.4 MEDIUM
Network
openclaw openclaw OpenClaw before 2026.3.31 contains a sender allowlist bypass vulnerability in MS Teams thread history fetched via Graph API. Attackers can retrieve thread messages that should be filtered by sender a… CWE-441
Confused Deputy
CVE-2026-41365 2026-04-29 03:41 2026-04-28 Show GitHub Exploit DB Packet Storm
1889 6.5 MEDIUM
Network
openclaw openclaw OpenClaw before 2026.3.31 contains a path traversal vulnerability in ACP dispatch that allows attackers to read arbitrary files by manipulating inbound channel attachment paths. Remote attackers can … CWE-22
Path Traversal
CVE-2026-41370 2026-04-29 03:41 2026-04-28 Show GitHub Exploit DB Packet Storm
1890 7.5 HIGH
Network
apache thrift Mismatched Memory Management Routines vulnerability in Apache Thrift c_glib language bindings. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, w… CWE-762
 Mismatched Memory Management Routines
CVE-2025-48431 2026-04-29 03:40 2026-04-28 Show GitHub Exploit DB Packet Storm