Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 24, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2941	4.3	警告 Network	OpenClaw	OpenClaw	OpenClawにおける認可されていない制御領域への重要情報の漏えいに関する脆弱性	CWE-497 認可されていない制御領域への重要情報の漏えい	CVE-2026-41339	2026-05-1 10:47	2026-04-23	Show	GitHub Exploit DB Packet Storm

2942	5.3	警告 Network	OpenClaw	OpenClaw	OpenClawにおける不適切な動作順序（早期増幅）に関する脆弱性	CWE-408 不適切な動作順序（早期増幅）	CVE-2026-41374	2026-05-1 10:47	2026-04-28	Show	GitHub Exploit DB Packet Storm

2943	4.6	警告 Adjacent	OpenClaw	OpenClaw	OpenClawにおける同一生成元ポリシー違反に関する脆弱性	CWE-346 同一生成元ポリシー違反	CVE-2026-41398	2026-05-1 10:47	2026-04-28	Show	GitHub Exploit DB Packet Storm

2944	7.5	重要 Network	OpenClaw	OpenClaw	OpenClawにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-41399	2026-05-1 10:47	2026-04-28	Show	GitHub Exploit DB Packet Storm

2945	7.5	重要 Network	OpenClaw	OpenClaw	OpenClawにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-41400	2026-05-1 10:47	2026-04-28	Show	GitHub Exploit DB Packet Storm

2946	5.4	警告 Network	OpenClaw	OpenClaw	OpenClawにおける誤って解決された名前や参照の使用に関する脆弱性	CWE-706 誤って解決された名前や参照の使用	CVE-2026-41402	2026-05-1 10:46	2026-04-28	Show	GitHub Exploit DB Packet Storm

2947	9.8	緊急 Network	Apache Software Foundation	MINA	Apache Software FoundationのMINAにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-41409	2026-05-1 10:46	2026-04-27	Show	GitHub Exploit DB Packet Storm

2948	3.3	低 Local	wolfSSL Inc.	wolfSSL	wolfSSL Inc.のwolfSSLにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-4159	2026-05-1 10:46	2026-03-19	Show	GitHub Exploit DB Packet Storm

2949	9.8	緊急 Network	Apache Software Foundation	MINA	Apache Software FoundationのMINAにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-41635	2026-05-1 10:46	2026-04-27	Show	GitHub Exploit DB Packet Storm

2950	3.7	低 Network	OpenClaw	OpenClaw	OpenClawにおける競合状態に関する脆弱性	CWE-362 競合状態	CVE-2026-41913	2026-05-1 10:46	2026-04-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
316821	-		-	-	Improper access control in SamsungHealthService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background.	-	CVE-2024-34605	2024-08-7 11:15	2024-08-7	Show	GitHub Exploit DB Packet Storm

316822	-		-	-	Improper access control in LedCoverService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background.	-	CVE-2024-34604	2024-08-7 11:15	2024-08-7	Show	GitHub Exploit DB Packet Storm

316823	-		-	-	A static initialization vector (IV) in the encrypt function of netbird v0.28.4 allows attackers to obtain sensitive information.	-	CVE-2024-41260	2024-08-7 04:35	2024-08-2	Show	GitHub Exploit DB Packet Storm

316824	-		-	-	An issue in beego v.2.2.0 and before allows a remote attacker to escalate privileges via the sendMail function located in beego/core/logs/smtp.go file	-	CVE-2024-40464	2024-08-7 03:35	2024-08-1	Show	GitHub Exploit DB Packet Storm

316825	9.8	CRITICAL Network	vivotek	ib8367a_firmware	UNSUPPORTED WHEN ASSIGNED A vulnerability classified as critical has been found in Vivotek IB8367A VVTK-0100b. Affected is the function getenv of the file upload_file.cgi. The manipulation of t…	CWE-77 Command Injection	CVE-2024-7443	2024-08-7 02:47	2024-08-4	Show	GitHub Exploit DB Packet Storm

316826	9.8	CRITICAL Network	vivotek	cc8160_firmware	UNSUPPORTED WHEN ASSIGNED A vulnerability was found in Vivotek CC8160 VVTK-0100d and classified as critical. Affected by this issue is the function read of the component httpd. The manipulation…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2024-7439	2024-08-7 02:46	2024-08-4	Show	GitHub Exploit DB Packet Storm

316827	9.8	CRITICAL Network	vivotek	sd9364_firmware	UNSUPPORTED WHEN ASSIGNED A vulnerability was found in Vivotek SD9364 VVTK-0103f. It has been rated as critical. This issue affects the function getenv of the file upload_file.cgi. The manipula…	CWE-77 Command Injection	CVE-2024-7442	2024-08-7 02:45	2024-08-4	Show	GitHub Exploit DB Packet Storm

316828	9.8	CRITICAL Network	raisecom	msg2300_firmware msg2100e_firmware msg2200_firmware msg1200_firmware	A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200 and MSG2300 3.90. It has been rated as critical. This issue affects the function sslvpn_config_mod of the file /vpn/vpn_template_style…	CWE-78 OS Command	CVE-2024-7470	2024-08-7 02:37	2024-08-5	Show	GitHub Exploit DB Packet Storm

316829	9.8	CRITICAL Network	raisecom	msg2300_firmware msg2100e_firmware msg2200_firmware msg1200_firmware	A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200 and MSG2300 3.90. It has been declared as critical. This vulnerability affects the function sslvpn_config_mod of the file /vpn/list_vp…	CWE-78 OS Command	CVE-2024-7469	2024-08-7 02:36	2024-08-5	Show	GitHub Exploit DB Packet Storm

316830	9.8	CRITICAL Network	raisecom	msg2300_firmware msg2100e_firmware msg2200_firmware msg1200_firmware	A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200 and MSG2300 3.90. It has been classified as critical. This affects the function sslvpn_config_mod of the file /vpn/list_service_manage…	CWE-78 OS Command	CVE-2024-7468	2024-08-7 02:35	2024-08-5	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed