Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2711 9.1 緊急
Network 		Froxlor Froxlor Froxlorにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2026-41229 2026-04-30 12:27 2026-04-23 Show GitHub Exploit DB Packet Storm
2712 8.5 重要
Network 		Froxlor Froxlor FroxlorにおけるCRLF インジェクションの脆弱性 CWE-93
CRLF インジェクション 		CVE-2026-41230 2026-04-30 12:27 2026-04-23 Show GitHub Exploit DB Packet Storm
2713 7.5 重要
Network 		Froxlor Froxlor Froxlorにおけるリンク解釈に関する脆弱性 CWE-59
リンク解釈の問題 		CVE-2026-41231 2026-04-30 12:27 2026-04-23 Show GitHub Exploit DB Packet Storm
2714 5 警告
Network 		Froxlor Froxlor Froxlorにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-41232 2026-04-30 12:27 2026-04-23 Show GitHub Exploit DB Packet Storm
2715 5.4 警告
Network 		Froxlor Froxlor Froxlorにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-41233 2026-04-30 12:27 2026-04-23 Show GitHub Exploit DB Packet Storm
2716 8.6 重要
Local 		OpenClaw OpenClaw OpenClawにおけるシステム構成または設定の外部制御に関する脆弱性 CWE-15
システム構成または設定の外部制御 		CVE-2026-41294 2026-04-30 12:26 2026-04-21 Show GitHub Exploit DB Packet Storm
2717 7.8 重要
Local 		OpenClaw OpenClaw OpenClawにおける信頼できない制御領域からの機能の組み込みに関する脆弱性 CWE-829
信頼性のない制御領域からの機能の組み込み 		CVE-2026-41295 2026-04-30 12:26 2026-04-21 Show GitHub Exploit DB Packet Storm
2718 8.2 重要
Network 		OpenClaw OpenClaw OpenClawにおけるTime-of-check Time-of-use (TOCTOU) 競合状態の脆弱性 CWE-367
Time-of-check Time-of-use (TOCTOU) 競合状態 		CVE-2026-41296 2026-04-30 12:26 2026-04-21 Show GitHub Exploit DB Packet Storm
2719 7.6 重要
Network 		OpenClaw OpenClaw OpenClawにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-41297 2026-04-30 12:26 2026-04-21 Show GitHub Exploit DB Packet Storm
2720 5.4 警告
Network 		OpenClaw OpenClaw OpenClawにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-41298 2026-04-30 12:26 2026-04-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
317221 - conectiva
ethereal_group
redhat
altlinux 		linux
ethereal
enterprise_linux
enterprise_linux_desktop
linux_advanced_workstation
alt_linux 		Multiple buffer overflows in the dissect_a11_radius function in the CDMA A11 (3G-A11) dissector (packet-3g-a11.c) for Ethereal 0.10.9 and earlier allow remote attackers to execute arbitrary code via … NVD-CWE-Other
CVE-2005-0699 2024-02-14 10:17 2005-03-8 Show GitHub Exploit DB Packet Storm
317222 - phpbb_group phpbb viewtopic.php in phpBB 2.0.12 and earlier allows remote attackers to obtain sensitive information via a highlight parameter containing invalid regular expression syntax, which reveals the path in a P… NVD-CWE-Other
CVE-2005-0603 2024-02-14 10:17 2005-02-28 Show GitHub Exploit DB Packet Storm
317223 - gallery_project
gentoo 		gallery
linux 		Cross-site scripting (XSS) vulnerability in Gallery 1.4.4-pl3 and earlier allows remote attackers to execute arbitrary web script or HTML via "specially formed URLs," possibly via the include paramet… NVD-CWE-Other
CVE-2004-1106 2024-02-14 10:17 2005-01-10 Show GitHub Exploit DB Packet Storm
317224 - ethereal_group ethereal Ethereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service (application hang) and possibly fill available disk space via an invalid RTP timestamp. NVD-CWE-Other
CVE-2004-1140 2024-02-14 10:17 2004-12-31 Show GitHub Exploit DB Packet Storm
317225 - ethereal_group ethereal The HTTP dissector in Ethereal 0.10.1 through 0.10.7 allows remote attackers to cause a denial of service (application crash) via a certain packet that causes the dissector to access previously-freed… NVD-CWE-Other
CVE-2004-1141 2024-02-14 10:17 2004-12-31 Show GitHub Exploit DB Packet Storm
317226 - psychostats psychostats Cross-site scripting (XSS) vulnerability in login.php in PsychoStats 2.2.4 Beta and earlier allows remote attackers to inject arbitrary web script or HTML via the login parameter. CWE-79
Cross-site Scripting 		CVE-2004-1417 2024-02-14 10:17 2004-12-31 Show GitHub Exploit DB Packet Storm
317227 - argosoft ftp_server ArGoSoft FTP before 1.4.2.1 generates an error message if the user name does not exist instead of prompting for a password, which allows remote attackers to determine valid usernames. CWE-203
 Information Exposure Through Discrepancy 		CVE-2004-1428 2024-02-14 10:17 2004-12-31 Show GitHub Exploit DB Packet Storm
317228 - ethereal_group ethereal Unknown vulnerability in Ethereal 0.8.13 to 0.10.2 allows attackers to cause a denial of service (segmentation fault) via a malformed color filter file. NVD-CWE-Other
CVE-2004-1761 2024-02-14 10:17 2004-12-31 Show GitHub Exploit DB Packet Storm
317229 - alan_ward a-cart SQL injection vulnerability in category.asp in A-CART Pro and A-CART 2.0 allows remote attackers to gain privileges via the catcode parameter. NVD-CWE-Other
CVE-2004-1873 2024-02-14 10:17 2004-12-31 Show GitHub Exploit DB Packet Storm
317230 - oscommerce oscommerce Directory traversal vulnerability in file_manager.php in osCommerce 2.2 allows remote attackers to view arbitrary files via a .. (dot dot) in the filename argument. NVD-CWE-Other
CVE-2004-2021 2024-02-14 10:17 2004-12-31 Show GitHub Exploit DB Packet Storm