Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 2:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
2631 8.8 重要
Network
OpenClaw OpenClaw OpenClawにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如
CVE-2026-41352 2026-04-30 11:00 2026-04-23 Show GitHub Exploit DB Packet Storm
2632 5.4 警告
Network
OpenClaw OpenClaw OpenClawにおけるセッション期限に関する脆弱性 CWE-613
不適切なセッション期限
CVE-2026-41356 2026-04-30 11:00 2026-04-23 Show GitHub Exploit DB Packet Storm
2633 3.3
Local
OpenClaw OpenClaw OpenClawにおける重要な情報を使用しているプロセスの呼び出しに関する脆弱性 CWE-214
重要な情報を使用しているプロセスの呼び出し
CVE-2026-41357 2026-04-30 11:00 2026-04-23 Show GitHub Exploit DB Packet Storm
2634 8.8 重要
Network
OpenClaw OpenClaw OpenClawにおける権限管理に関する脆弱性 CWE-269
不適切な権限管理
CVE-2026-41359 2026-04-30 11:00 2026-04-23 Show GitHub Exploit DB Packet Storm
2635 7.1 重要
Network
OpenClaw OpenClaw OpenClawにおける複数の脆弱性 CWE-184
CWE-918
CVE-2026-41361 2026-04-30 11:00 2026-04-23 Show GitHub Exploit DB Packet Storm
2636 4.3 警告
Network
OpenClaw OpenClaw OpenClawにおける誤った領域へのリソースの漏えいに関する脆弱性 CWE-668
誤った領域へのリソースの漏えい
CVE-2026-41362 2026-04-30 11:00 2026-04-28 Show GitHub Exploit DB Packet Storm
2637 6.5 警告
Network
OpenClaw OpenClaw OpenClawにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-41363 2026-04-30 11:00 2026-04-28 Show GitHub Exploit DB Packet Storm
2638 8.1 重要
Network
OpenClaw OpenClaw OpenClawにおけるリンク解釈に関する脆弱性 CWE-59
リンク解釈の問題
CVE-2026-41364 2026-04-30 11:00 2026-04-28 Show GitHub Exploit DB Packet Storm
2639 5.4 警告
Network
OpenClaw OpenClaw OpenClawにおけるフィルタリングの回避に関する脆弱性 CWE-441
フィルタリング回避
CVE-2026-41365 2026-04-30 11:00 2026-04-28 Show GitHub Exploit DB Packet Storm
2640 5.5 警告
Local
OpenClaw OpenClaw OpenClawにおける重要なリソースに対する不適切なパーミッションの割り当てに関する脆弱性 CWE-732
重要なリソースに対する不適切なパーミッションの割り当て
CVE-2026-41366 2026-04-30 11:00 2026-04-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
316661 - ethereal_group ethereal The IAPP dissector (packet-iapp.c) for Ethereal 0.9.1 to 0.10.9 does not properly use certain routines for formatting strings, which could leave it vulnerable to buffer overflows, as demonstrated usi… CWE-189
Numeric Errors
CVE-2005-0739 2024-02-14 10:17 2005-05-2 Show GitHub Exploit DB Packet Storm
316662 - ethereal_group ethereal Unknown vulnerability in the sFlow dissector in Ethereal 0.9.14 through 0.10.9 allows remote attackers to cause a denial of service (application crash). NVD-CWE-Other
CVE-2005-0766 2024-02-14 10:17 2005-05-2 Show GitHub Exploit DB Packet Storm
316663 - runcms
e-xoops
ciamos
runcms
e-xoops
ciamos
Viewcat.php in (1) RUNCMS 1.1A, (2) Ciamos 0.9.2 RC1, e-Xoops 1.05 Rev3, and possibly other products based on e-Xoops (exoops), allow remote attackers to obtain sensitive information via an invalid p… NVD-CWE-Other
CVE-2005-0827 2024-02-14 10:17 2005-05-2 Show GitHub Exploit DB Packet Storm
316664 - runcms
e-xoops
ciamos
runcms
e-xoops
ciamos
highlight.php in (1) RUNCMS 1.1A, (2) CIAMOS 0.9.2 RC1, (3) e-Xoops 1.05 Rev3, and possibly other products based on e-Xoops (exoops), allows remote attackers to read arbitrary PHP files by specifying… NVD-CWE-Other
CVE-2005-0828 2024-02-14 10:17 2005-05-2 Show GitHub Exploit DB Packet Storm
316665 - php-post php-post_web_forum Cross-site scripting (XSS) vulnerability in PHP-Post before 0.33 allows remote attackers to inject arbitrary web script or HTML via unknown vectors. NVD-CWE-Other
CVE-2005-0832 2024-02-14 10:17 2005-05-2 Show GitHub Exploit DB Packet Storm
316666 - yepyep mtftpd Format string vulnerability in the log_do function in log.c for YepYep mtftpd 0.0.3, when the statistics option is enabled, allows remote attackers to execute arbitrary code via the CWD command. NVD-CWE-Other
CVE-2005-0958 2024-02-14 10:17 2005-05-2 Show GitHub Exploit DB Packet Storm
316667 - oneworldstore oneworldstore Multiple SQL injection vulnerabilities in OneWorldStore allow remote attackers to execute arbitrary SQL commands via the idProduct parameter to (1) owAddItem.asp or (2) owProductDetail.asp, (3) idCat… NVD-CWE-Other
CVE-2005-1161 2024-02-14 10:17 2005-05-2 Show GitHub Exploit DB Packet Storm
316668 - oneworldstore oneworldstore Multiple cross-site scripting (XSS) vulnerabilities in OneWorldStore allow remote attackers to inject arbitrary web script or HTML via the (1) sEmail parameter to owContactUs.asp, (2) bSub parameter … NVD-CWE-Other
CVE-2005-1162 2024-02-14 10:17 2005-05-2 Show GitHub Exploit DB Packet Storm
316669 - x-ways_software_technology_ag winhex Heap-based buffer overflow in WinHex 12.05 SR-14, and possibly other versions, may allow attackers to execute arbitrary code via a long file name argument. NOTE: since this overflow is in the comman… NVD-CWE-Other
CVE-2005-1187 2024-02-14 10:17 2005-05-2 Show GitHub Exploit DB Packet Storm
316670 - ecommerce-carts ecommpro SQL injection vulnerability in login.asp for Ecommerce-Carts EcommPro 3.0 allows remote attackers to execute arbitrary SQL commands via the password field. NVD-CWE-Other
CVE-2005-1221 2024-02-14 10:17 2005-05-2 Show GitHub Exploit DB Packet Storm