Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 22, 2026, 12:09 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
254801 8.5 危険 オラクル - Oracle Fusion Middleware の Oracle Document Capture コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-3592 2011-02-10 11:51 2011-01-18 Show GitHub Exploit DB Packet Storm
254802 9.4 危険 オラクル - Oracle Fusion Middleware の Oracle Document Capture コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-3599 2011-02-10 11:44 2011-01-18 Show GitHub Exploit DB Packet Storm
254803 7.5 危険 オラクル - Oracle Audit Vault の Audit Vault コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-4449 2011-02-10 11:36 2011-01-18 Show GitHub Exploit DB Packet Storm
254804 6.4 警告 オラクル - Oracle Secure Backup の mod_ssl コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-3596 2011-02-10 11:30 2011-01-18 Show GitHub Exploit DB Packet Storm
254805 3.6 注意 オラクル - Oracle Database Server の Database Vault コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-4420 2011-02-9 16:44 2011-01-18 Show GitHub Exploit DB Packet Storm
254806 4.3 警告 オラクル - Oracle Database Server の Scheduler Agent コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-4413 2011-02-9 16:43 2011-01-18 Show GitHub Exploit DB Packet Storm
254807 4.9 警告 オラクル - Oracle Database Server の Oracle Spatial コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-3590 2011-02-9 16:43 2011-01-18 Show GitHub Exploit DB Packet Storm
254808 6.9 警告 オラクル - Windows 上で稼働する Oracle Database Server の Cluster Verify Utility コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-4423 2011-02-9 16:42 2011-01-18 Show GitHub Exploit DB Packet Storm
254809 6.8 警告 オラクル - Oracle Database Server の Database Vault コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-4421 2011-02-9 16:42 2011-01-18 Show GitHub Exploit DB Packet Storm
254810 7.5 危険 オラクル - 複数の Oracle 製品の Client System Analyzer コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-3600 2011-02-9 16:41 2011-01-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3661 8.8 HIGH
Network 		openclaw openclaw OpenClaw before 2026.4.10 contains a plugin trust bypass vulnerability that allows channel setup catalog lookups to resolve workspace plugin shadows before bundled channel plugins. Attackers can expl… CWE-829
 Inclusion of Functionality from Untrusted Control Sphere 		CVE-2026-43571 2026-05-8 01:03 2026-05-5 Show GitHub Exploit DB Packet Storm
3662 6.5 MEDIUM
Network 		openclaw openclaw OpenClaw versions 2026.3.22 before 2026.4.5 contain a symlink traversal vulnerability in remote marketplace repository path handling that allows attackers to escape the expected repository root. Atta… CWE-61
 UNIX Symbolic Link (Symlink) Following 		CVE-2026-43570 2026-05-8 01:03 2026-05-5 Show GitHub Exploit DB Packet Storm
3663 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: validate connector number in ucsi_notify_common() The connector number extracted from CCI via UCSI_CCI_CONNECTO… CWE-129
 Improper Validation of Array Index 		CVE-2026-31729 2026-05-8 01:02 2026-05-2 Show GitHub Exploit DB Packet Storm
3664 8.1 HIGH
Network 		openclaw openclaw OpenClaw before 2026.4.14 contains an authorization context reuse vulnerability in collect-mode queue batches that allows messages from different senders to inherit the final sender's authorization c… CWE-266
 Incorrect Privilege Assignment 		CVE-2026-43535 2026-05-8 01:01 2026-05-5 Show GitHub Exploit DB Packet Storm
3665 8.8 HIGH
Network 		openclaw openclaw OpenClaw before 2026.4.9 contains an environment variable injection vulnerability allowing malicious workspace .env files to set runtime-control variables. Attackers can inject variables affecting up… CWE-15
 External Control of System or Configuration Setting 		CVE-2026-43531 2026-05-8 00:59 2026-05-5 Show GitHub Exploit DB Packet Storm
3666 8.8 HIGH
Network 		openclaw openclaw OpenClaw versions 2026.2.23 before 2026.4.12 contain a weakened exec approval binding vulnerability in busybox and toybox applet execution that allows attackers to obscure which applet would actually… CWE-863
 Incorrect Authorization 		CVE-2026-43530 2026-05-8 00:57 2026-05-5 Show GitHub Exploit DB Packet Storm
3667 6.9 MEDIUM
Network 		- - Cross-Site Scripting (XSS) in V2Board thru 1.7.4. The custom_html field in theme configuration is rendered using Blade unescaped output in public/theme/v2board/dashboard.blade.php. An admin can injec… CWE-79
Cross-site Scripting 		CVE-2026-37503 2026-05-8 00:53 2026-05-2 Show GitHub Exploit DB Packet Storm
3668 5.3 MEDIUM
Network 		- - Sensitive server_token exposed via GET parameter in V2Board thru 1.7.4. In app/Http/Controllers/Server/UniProxyController.php, the server authentication token is accepted via GET parameter transmissi… CWE-598
Information Exposure Through Query Strings in GET Request  		CVE-2026-37504 2026-05-8 00:53 2026-05-2 Show GitHub Exploit DB Packet Storm
3669 4.9 MEDIUM
Network 		- - SQL Injection via ORDER BY clause in V2Board thru 1.7.4. In app/Http/Controllers/Admin/UserController.php, the sort parameter from user input is passed directly to User::orderBy($sort, $sortType) wit… CWE-89
SQL Injection 		CVE-2026-37505 2026-05-8 00:53 2026-05-2 Show GitHub Exploit DB Packet Storm
3670 8.4 HIGH
Local 		- - Unsafe deserialization vulnerability in MixPHP Framework 2.x thru 2.2.17. The sync-invoke TCP server (Server.php:87) receives data from a TCP socket, passes it directly to Opis\Closure\unserialize(),… CWE-502
 Deserialization of Untrusted Data 		CVE-2026-37552 2026-05-8 00:53 2026-05-2 Show GitHub Exploit DB Packet Storm