Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 22, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2941	4.3	警告 Network	OpenClaw	OpenClaw	OpenClawにおける認可されていない制御領域への重要情報の漏えいに関する脆弱性	CWE-497 認可されていない制御領域への重要情報の漏えい	CVE-2026-41339	2026-05-1 10:47	2026-04-23	Show	GitHub Exploit DB Packet Storm

2942	5.3	警告 Network	OpenClaw	OpenClaw	OpenClawにおける不適切な動作順序（早期増幅）に関する脆弱性	CWE-408 不適切な動作順序（早期増幅）	CVE-2026-41374	2026-05-1 10:47	2026-04-28	Show	GitHub Exploit DB Packet Storm

2943	4.6	警告 Adjacent	OpenClaw	OpenClaw	OpenClawにおける同一生成元ポリシー違反に関する脆弱性	CWE-346 同一生成元ポリシー違反	CVE-2026-41398	2026-05-1 10:47	2026-04-28	Show	GitHub Exploit DB Packet Storm

2944	7.5	重要 Network	OpenClaw	OpenClaw	OpenClawにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-41399	2026-05-1 10:47	2026-04-28	Show	GitHub Exploit DB Packet Storm

2945	7.5	重要 Network	OpenClaw	OpenClaw	OpenClawにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-41400	2026-05-1 10:47	2026-04-28	Show	GitHub Exploit DB Packet Storm

2946	5.4	警告 Network	OpenClaw	OpenClaw	OpenClawにおける誤って解決された名前や参照の使用に関する脆弱性	CWE-706 誤って解決された名前や参照の使用	CVE-2026-41402	2026-05-1 10:46	2026-04-28	Show	GitHub Exploit DB Packet Storm

2947	9.8	緊急 Network	Apache Software Foundation	MINA	Apache Software FoundationのMINAにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-41409	2026-05-1 10:46	2026-04-27	Show	GitHub Exploit DB Packet Storm

2948	3.3	低 Local	wolfSSL Inc.	wolfSSL	wolfSSL Inc.のwolfSSLにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-4159	2026-05-1 10:46	2026-03-19	Show	GitHub Exploit DB Packet Storm

2949	9.8	緊急 Network	Apache Software Foundation	MINA	Apache Software FoundationのMINAにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-41635	2026-05-1 10:46	2026-04-27	Show	GitHub Exploit DB Packet Storm

2950	3.7	低 Network	OpenClaw	OpenClaw	OpenClawにおける競合状態に関する脆弱性	CWE-362 競合状態	CVE-2026-41913	2026-05-1 10:46	2026-04-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1001	9.8	CRITICAL Network	-	-	Crypt::OpenSSL::PKCS12 versions through 1.94 for Perl truncates passwords with embedded NULLs. Password parameters in PKCS12.xs are declared char *, which routes through Perl's default typemap to Sv…	CWE-170 Improper Null Termination	CVE-2026-8721	2026-05-19 02:40	2026-05-18	Show	GitHub Exploit DB Packet Storm

1002	7.8	HIGH Local	-	-	VX Search 13.5.28 contains an unquoted service path vulnerability in both VX Search Server and VX Search Enterprise services that allows local attackers to escalate privileges. Attackers can place ma…	CWE-428 Unquoted Search Path or Element	CVE-2021-47974	2026-05-19 02:38	2026-05-17	Show	GitHub Exploit DB Packet Storm

1003	8.4	HIGH Local	-	-	VX Search 10.6.18 contains a local buffer overflow vulnerability that allows attackers to overwrite the instruction pointer by supplying an oversized string in the directory field. Attackers can craf…	CWE-120 Classic Buffer Overflow	CVE-2018-25328	2026-05-19 02:38	2026-05-17	Show	GitHub Exploit DB Packet Storm

1004	6.5	MEDIUM Network	-	-	Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.6, in standard channels (i.e., channels whose channel.type is neither group nor dm), th…	CWE-862 Missing Authorization	CVE-2026-44571	2026-05-19 02:36	2026-05-16	Show	GitHub Exploit DB Packet Storm

1005	5.4	MEDIUM Network	-	-	Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.0, the profile_image_url field on the user profile update form accepted arbitrary data:…	CWE-79 Cross-site Scripting	CVE-2026-45299	2026-05-19 02:36	2026-05-16	Show	GitHub Exploit DB Packet Storm

1006	8.1	HIGH Network	-	-	Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.5, multiple endpoints accept a user-supplied file_id and attach the referenced file to …	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2026-45402	2026-05-19 02:36	2026-05-16	Show	GitHub Exploit DB Packet Storm

1007	8.3	HIGH Network	-	-	Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.6.19, authorization controls surrounding the memories API were inconsistent, resulting in…	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2026-44570	2026-05-19 02:36	2026-05-16	Show	GitHub Exploit DB Packet Storm

1008	8.1	HIGH Network	-	-	Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.3.16, a missing permission check in all files related API endpoints allows any authentica…	CWE-284 Improper Access Control	CVE-2026-45301	2026-05-19 02:36	2026-05-16	Show	GitHub Exploit DB Packet Storm

1009	-		-	-	Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.3, the channel webhook create/update flow accepts arbitrary profile_image_url values, i…	CWE-87 Improper Neutralization of Alternate XSS Syntax	CVE-2026-45314	2026-05-19 02:36	2026-05-16	Show	GitHub Exploit DB Packet Storm

1010	3.5	LOW Network	-	-	Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.3, the POST /api/v1/notes/{id}/pin endpoint performs a write operation (toggling the is…	CWE-863 Incorrect Authorization	CVE-2026-45316	2026-05-19 02:36	2026-05-16	Show	GitHub Exploit DB Packet Storm