Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 16, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2631 8.8 重要
Network 		OpenClaw OpenClaw OpenClawにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-41349 2026-04-30 11:00 2026-04-23 Show GitHub Exploit DB Packet Storm
2632 4.3 警告
Network 		OpenClaw OpenClaw OpenClawにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-41350 2026-04-30 11:00 2026-04-23 Show GitHub Exploit DB Packet Storm
2633 5.3 警告
Network 		OpenClaw OpenClaw OpenClawにおけるCapture-replay による認証回避に関する脆弱性 CWE-294
Capture-replayによる認証回避 		CVE-2026-41351 2026-04-30 11:00 2026-04-23 Show GitHub Exploit DB Packet Storm
2634 8.8 重要
Network 		OpenClaw OpenClaw OpenClawにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-41352 2026-04-30 11:00 2026-04-23 Show GitHub Exploit DB Packet Storm
2635 5.4 警告
Network 		OpenClaw OpenClaw OpenClawにおけるセッション期限に関する脆弱性 CWE-613
不適切なセッション期限 		CVE-2026-41356 2026-04-30 11:00 2026-04-23 Show GitHub Exploit DB Packet Storm
2636 3.3 低
Local 		OpenClaw OpenClaw OpenClawにおける重要な情報を使用しているプロセスの呼び出しに関する脆弱性 CWE-214
重要な情報を使用しているプロセスの呼び出し 		CVE-2026-41357 2026-04-30 11:00 2026-04-23 Show GitHub Exploit DB Packet Storm
2637 8.8 重要
Network 		OpenClaw OpenClaw OpenClawにおける権限管理に関する脆弱性 CWE-269
不適切な権限管理 		CVE-2026-41359 2026-04-30 11:00 2026-04-23 Show GitHub Exploit DB Packet Storm
2638 7.1 重要
Network 		OpenClaw OpenClaw OpenClawにおける複数の脆弱性 CWE-184
CWE-918
CVE-2026-41361 2026-04-30 11:00 2026-04-23 Show GitHub Exploit DB Packet Storm
2639 4.3 警告
Network 		OpenClaw OpenClaw OpenClawにおける誤った領域へのリソースの漏えいに関する脆弱性 CWE-668
誤った領域へのリソースの漏えい 		CVE-2026-41362 2026-04-30 11:00 2026-04-28 Show GitHub Exploit DB Packet Storm
2640 6.5 警告
Network 		OpenClaw OpenClaw OpenClawにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-41363 2026-04-30 11:00 2026-04-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
317051 - flatnuke flatnuke FlatNuke 2.5.3 allows remote attackers to cause a denial of service or obtain sensitive information via (1) a direct request to foot_news.php, which triggers an infinite loop, or (2) direct requests … CWE-425
 Direct Request ('Forced Browsing') 		CVE-2005-1892 2024-01-26 06:10 2005-06-9 Show GitHub Exploit DB Packet Storm
317052 7.8 HIGH
Local 		silvercity_project silvercity SilverCity before 0.9.5-r1 installs (1) cgi-styler-form.py, (2) cgi-styler.py, and (3) source2html.py with read and write world permissions, which allows local users to execute arbitrary code. CWE-276
Incorrect Default Permissions  		CVE-2005-1941 2024-01-26 06:09 2005-06-8 Show GitHub Exploit DB Packet Storm
317053 - dlink dsl-504t_firmware D-Link DSL-504T allows remote attackers to bypass authentication and gain privileges, such as upgrade firmware, restart the router or restore a saved configuration, via a direct request to firmwarecf… CWE-425
 Direct Request ('Forced Browsing') 		CVE-2005-1827 2024-01-26 06:08 2005-05-26 Show GitHub Exploit DB Packet Storm
317054 - postnuke postnuke PostNuke 0.750 and 0.760RC3 allows remote attackers to obtain sensitive information via a direct request to (1) theme.php or (2) Xanthia.php in the Xanthia module, (3) user.php, (4) thelang.php, (5) … CWE-425
 Direct Request ('Forced Browsing') 		CVE-2005-1698 2024-01-26 06:08 2005-05-24 Show GitHub Exploit DB Packet Storm
317055 - episodex episodex_guestbook episodex guestbook allows remote attackers to bypass authentication and edit scripts via a direct request to admin.asp. CWE-425
 Direct Request ('Forced Browsing') 		CVE-2005-1685 2024-01-26 06:07 2005-05-20 Show GitHub Exploit DB Packet Storm
317056 9.1 CRITICAL
Network 		midicart midicart_php
midicart_php_plus
midicart_php_maxi 		MidiCart PHP, PHP Plus, and PHP Maxi allows remote attackers to (1) upload arbitrary php files via a direct request to admin/upload.php or (2) access sensitive information via a direct request to adm… CWE-425
 Direct Request ('Forced Browsing') 		CVE-2002-1798 2024-01-26 06:04 2002-12-31 Show GitHub Exploit DB Packet Storm
317057 - hostingcontroller hosting_controller Hosting Controller 6.1 Hotfix 1.9 and earlier allows remote attackers to register arbitrary users via a direct request to addsubsite.asp with the loginname and password parameters set. CWE-425
 Direct Request ('Forced Browsing') 		CVE-2005-1654 2024-01-26 06:03 2005-05-18 Show GitHub Exploit DB Packet Storm
317058 - yusasp web_asset_manager YusASP Web Asset Manager 1.0 allows remote attackers to gain privileges via a direct request to assetmanager.asp. CWE-425
 Direct Request ('Forced Browsing') 		CVE-2005-1668 2024-01-26 06:03 2005-05-18 Show GitHub Exploit DB Packet Storm
317059 7.5 HIGH
Network 		iomega nas_a300u_firmware The Network Attached Storage (NAS) Administration Web Page for Iomega NAS A300U transmits passwords in cleartext, which allows remote attackers to sniff the administrative password. CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2002-1949 2024-01-26 06:00 2002-12-31 Show GitHub Exploit DB Packet Storm
317060 7.5 HIGH
Network 		procom netforce_800_firmware Procom NetFORCE 800 4.02 M10 Build 20 and possibly other versions sends the NIS password map (passwd.nis) as a file attachment in diagnostic e-mail messages, which allows remote attackers to obtain t… CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2005-3140 2024-01-26 05:58 2005-10-6 Show GitHub Exploit DB Packet Storm