Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2621 5 警告
Local 		OpenClaw OpenClaw OpenClawにおけるTime-of-check Time-of-use (TOCTOU) 競合状態の脆弱性 CWE-367
Time-of-check Time-of-use (TOCTOU) 競合状態 		CVE-2026-41338 2026-04-30 11:01 2026-04-23 Show GitHub Exploit DB Packet Storm
2622 6.5 警告
Network 		OpenClaw OpenClaw OpenClawにおける不完全な内部状態の区別に関する脆弱性 CWE-372
不完全な内部状態の区別 		CVE-2026-41340 2026-04-30 11:01 2026-04-23 Show GitHub Exploit DB Packet Storm
2623 5.4 警告
Network 		OpenClaw OpenClaw OpenClawにおける不十分な型の区別に関する脆弱性 CWE-351
不十分な型の区別 		CVE-2026-41341 2026-04-30 11:01 2026-04-23 Show GitHub Exploit DB Packet Storm
2624 8.1 重要
Adjacent 		OpenClaw OpenClaw OpenClawにおける同一生成元ポリシー違反に関する脆弱性 CWE-346
同一生成元ポリシー違反 		CVE-2026-41342 2026-04-30 11:01 2026-04-23 Show GitHub Exploit DB Packet Storm
2625 5.3 警告
Network 		OpenClaw OpenClaw OpenClawにおけるインタラクション頻度の制御に関する脆弱性　 CWE-799
インタラクション頻度の不適切な制御 		CVE-2026-41343 2026-04-30 11:01 2026-04-23 Show GitHub Exploit DB Packet Storm
2626 8.8 重要
Network 		OpenClaw OpenClaw OpenClawにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-41344 2026-04-30 11:01 2026-04-23 Show GitHub Exploit DB Packet Storm
2627 5.3 警告
Network 		OpenClaw OpenClaw OpenClawにおける認証情報の不十分な保護に関する脆弱性 CWE-522
認証情報の不十分な保護 		CVE-2026-41345 2026-04-30 11:01 2026-04-23 Show GitHub Exploit DB Packet Storm
2628 7.5 重要
Network 		OpenClaw OpenClaw OpenClawにおけるインタラクション頻度の制御に関する脆弱性　 CWE-799
インタラクション頻度の不適切な制御 		CVE-2026-41346 2026-04-30 11:00 2026-04-23 Show GitHub Exploit DB Packet Storm
2629 7.1 重要
Network 		OpenClaw OpenClaw OpenClawにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2026-41347 2026-04-30 11:00 2026-04-23 Show GitHub Exploit DB Packet Storm
2630 5.4 警告
Network 		OpenClaw OpenClaw OpenClawにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-41348 2026-04-30 11:00 2026-04-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
347441 - yahoo messenger Buffer overflow in Yahoo! Messenger 5.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long (1) message or (2) IMvironment field. NVD-CWE-Other
CVE-2002-0320 2016-10-18 11:19 2002-06-25 Show GitHub Exploit DB Packet Storm
347442 - yahoo messenger Yahoo! Messenger 5.0 allows remote attackers to spoof other users by modifying the username and using the spoofed username for social engineering or denial of service (flooding) attacks. NVD-CWE-Other
CVE-2002-0321 2016-10-18 11:19 2002-06-25 Show GitHub Exploit DB Packet Storm
347443 - yahoo messenger Yahoo! Messenger 4.0 sends user passwords in cleartext, which could allow remote attackers to gain privileges of other users via sniffing. NVD-CWE-Other
CVE-2002-0322 2016-10-18 11:19 2002-06-25 Show GitHub Exploit DB Packet Storm
347444 - nombas scriptease_webserver comment2.jse in ScriptEase:WebServer allows remote attackers to read arbitrary files by specifying the target file as an argument in the URL. NVD-CWE-Other
CVE-2002-0323 2016-10-18 11:19 2002-06-25 Show GitHub Exploit DB Packet Storm
347445 - noah_gray graymatter Greymatter 1.21c and earlier with the Bookmarklet feature enabled allows remote attackers to read a cleartext password and gain administrative privileges by guessing the name of a gmrightclick-*.reg … NVD-CWE-Other
CVE-2002-0324 2016-10-18 11:19 2002-06-25 Show GitHub Exploit DB Packet Storm
347446 - working_resources_inc. badblue Directory traversal vulnerability in BadBlue before 1.6.1 allows remote attackers to read arbitrary files via a ... (modified dot dot) in the URL. NVD-CWE-Other
CVE-2002-0325 2016-10-18 11:19 2002-06-25 Show GitHub Exploit DB Packet Storm
347447 - working_resources_inc. badblue Cross-site scripting vulnerability in BadBlue before 1.6.1 beta allows remote attackers to execute arbitrary script and possibly additional commands via a URL that contains Javascript. NVD-CWE-Other
CVE-2002-0326 2016-10-18 11:19 2002-06-25 Show GitHub Exploit DB Packet Storm
347448 - century_software term Buffer overflow in Century Software TERM allows local users to gain root privileges via a long tty argument to the callin program. NVD-CWE-Other
CVE-2002-0327 2016-10-18 11:19 2002-06-25 Show GitHub Exploit DB Packet Storm
347449 - ikonboard.com ikonboard Cross-site scripting vulnerability in Ikonboard 3.0.1 allows remote attackers to execute arbitrary script as other Ikonboard users and steal cookies via Javascript in an IMG tag. NVD-CWE-Other
CVE-2002-0328 2016-10-18 11:19 2002-06-25 Show GitHub Exploit DB Packet Storm
347450 - snitz_communications snitz_forums_2000 Cross-site scripting vulnerability in Snitz Forums 2000 3.3.03 and earlier allows remote attackers to execute arbitrary script as other Forums 2000 users via Javascript in an IMG tag. NVD-CWE-Other
CVE-2002-0329 2016-10-18 11:19 2002-06-25 Show GitHub Exploit DB Packet Storm