Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 15, 2026, 12:10 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2611	9.1	緊急 Network	dgraph	dgraph	dgraphにおけるデータクエリロジックの特殊要素の不適切な中立化に関する脆弱性	CWE-943 データクエリロジックの特殊要素の不適切な中立化	CVE-2026-41328	2026-04-30 11:01	2026-04-24	Show	GitHub Exploit DB Packet Storm

2612	3.7	低 Network	OpenClaw	OpenClaw	OpenClawにおけるインタラクション頻度の制御に関する脆弱性	CWE-799 インタラクション頻度の不適切な制御	CVE-2026-41333	2026-04-30 11:01	2026-04-23	Show	GitHub Exploit DB Packet Storm

2613	6.5	警告 Network	OpenClaw	OpenClaw	OpenClawにおける安全でない失敗処理に関する脆弱性	CWE-636 安全でない失敗処理	CVE-2026-41334	2026-04-30 11:01	2026-04-23	Show	GitHub Exploit DB Packet Storm

2614	5.3	警告 Network	OpenClaw	OpenClaw	OpenClawにおける認可されていない制御領域への重要情報の漏えいに関する脆弱性	CWE-497 認可されていない制御領域への重要情報の漏えい	CVE-2026-41335	2026-04-30 11:01	2026-04-23	Show	GitHub Exploit DB Packet Storm

2615	7.8	重要 Local	OpenClaw	OpenClaw	OpenClawにおける信頼できない制御領域からの機能の組み込みに関する脆弱性	CWE-829 信頼性のない制御領域からの機能の組み込み	CVE-2026-41336	2026-04-30 11:01	2026-04-23	Show	GitHub Exploit DB Packet Storm

2616	5.3	警告 Network	OpenClaw	OpenClaw	OpenClawにおけるTime-of-check Time-of-use (TOCTOU) 競合状態の脆弱性	CWE-367 Time-of-check Time-of-use (TOCTOU) 競合状態	CVE-2026-41337	2026-04-30 11:01	2026-04-23	Show	GitHub Exploit DB Packet Storm

2617	5	警告 Local	OpenClaw	OpenClaw	OpenClawにおけるTime-of-check Time-of-use (TOCTOU) 競合状態の脆弱性	CWE-367 Time-of-check Time-of-use (TOCTOU) 競合状態	CVE-2026-41338	2026-04-30 11:01	2026-04-23	Show	GitHub Exploit DB Packet Storm

2618	6.5	警告 Network	OpenClaw	OpenClaw	OpenClawにおける不完全な内部状態の区別に関する脆弱性	CWE-372 不完全な内部状態の区別	CVE-2026-41340	2026-04-30 11:01	2026-04-23	Show	GitHub Exploit DB Packet Storm

2619	5.4	警告 Network	OpenClaw	OpenClaw	OpenClawにおける不十分な型の区別に関する脆弱性	CWE-351 不十分な型の区別	CVE-2026-41341	2026-04-30 11:01	2026-04-23	Show	GitHub Exploit DB Packet Storm

2620	8.1	重要 Adjacent	OpenClaw	OpenClaw	OpenClawにおける同一生成元ポリシー違反に関する脆弱性	CWE-346 同一生成元ポリシー違反	CVE-2026-41342	2026-04-30 11:01	2026-04-23	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
316691	-	phpx	phpx	Cross-site request forgery (CSRF) vulnerability in PHPX 3.0 through 3.2.6 allows remote attackers to execute arbitrary commands via URLs that are automatically executed on behalf of the administrator…	NVD-CWE-Other	CVE-2004-2364	2024-02-14 10:17	2004-12-31	Show	GitHub Exploit DB Packet Storm

316692	-	-	-	PHP remote file inclusion vulnerability in header.php in Opt-X 0.7.2 allows remote attackers to execute arbitrary PHP code via the systempath parameter.	NVD-CWE-Other	CVE-2004-2368	2024-02-14 10:17	2004-12-31	Show	GitHub Exploit DB Packet Storm

316693	-	whitsoft_development	slimftpd	Buffer overflow in SlimFTPd 3.15 and earlier allows local users to execute arbitrary code via a long command, such as (1) CWD, (2) STOR, (3) MKD, and (4) STAT.	NVD-CWE-Other	CVE-2004-2418	2024-02-14 10:17	2004-12-31	Show	GitHub Exploit DB Packet Storm

316694	-	-	-	Directory traversal vulnerability in Nexgen FTP Server before 2.2.3.23 allows remote authenticated users to read or list arbitrary files via (1) "..", (2) "\..\" (backslash dot dot), or (3) "/../" se…	NVD-CWE-Other	CVE-2004-2487	2024-02-14 10:17	2004-12-31	Show	GitHub Exploit DB Packet Storm

316695	-	-	-	Directory traversal vulnerability in Nexgen FTP Server before 2.2.3.23 allows remote authenticated users to read or list arbitrary files via "C:" sequences in the (1) RETR (get), (2) NLST (ls), (3) L…	NVD-CWE-Other	CVE-2004-2488	2024-02-14 10:17	2004-12-31	Show	GitHub Exploit DB Packet Storm

316696	-	leigh_business_enterprises	web_helpdesk	SQL injection vulnerability in jobedit.asp in Leigh Business Enterprises (LBE) Web Helpdesk before 4.0.0.81 allows remote attackers to execute arbitrary SQL commands via the id parameter.	NVD-CWE-Other	CVE-2004-2562	2024-02-14 10:17	2004-12-31	Show	GitHub Exploit DB Packet Storm

316697	-	sco	openserver	Multiple buffer overflows in MMDF on OpenServer 5.0.6 and 5.0.7, and possibly other operating systems, may allow attackers to execute arbitrary code, as demonstrated via the execmail program.	NVD-CWE-Other	CVE-2004-0510	2024-02-14 10:17	2004-12-23	Show	GitHub Exploit DB Packet Storm

316698	-	ethereal_group conectiva sgi redhat suse debian altlinux	ethereal linux propack enterprise_linux suse_linux enterprise_linux_desktop debian_linux linux_advanced_workstation alt_linux	Unknown vulnerability in the DICOM dissector in Ethereal 0.10.4 through 0.10.7 allows remote attackers to cause a denial of service (application crash).	NVD-CWE-Other	CVE-2004-1139	2024-02-14 10:17	2004-12-15	Show	GitHub Exploit DB Packet Storm

316699	-	ethereal_group conectiva sgi redhat suse debian altlinux	ethereal linux propack enterprise_linux suse_linux enterprise_linux_desktop debian_linux linux_advanced_workstation alt_linux	Ethereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service (CPU consumption) via a certain malformed SMB packet.	NVD-CWE-Other	CVE-2004-1142	2024-02-14 10:17	2004-12-15	Show	GitHub Exploit DB Packet Storm

316700	-	linux redhat	linux_kernel fedora_core linux	Integer overflow in the vc_resize function in the Linux kernel 2.4 and 2.6 before 2.6.10 allows local users to cause a denial of service (kernel crash) via a short new screen value, which leads to a …	NVD-CWE-Other	CVE-2004-1333	2024-02-14 10:17	2004-12-15	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed