Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3121 6.5 警告
Network 		OpenClaw OpenClaw OpenClawにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-41375 2026-05-7 12:05 2026-04-28 Show GitHub Exploit DB Packet Storm
3122 6.5 警告
Network 		OpenClaw OpenClaw OpenClawにおける同一生成元ポリシー違反に関する脆弱性 CWE-346
同一生成元ポリシー違反 		CVE-2026-41376 2026-05-7 12:05 2026-04-28 Show GitHub Exploit DB Packet Storm
3123 4.6 警告
Network 		OpenClaw OpenClaw OpenClawにおける安全でない失敗処理に関する脆弱性 CWE-636
安全でない失敗処理 		CVE-2026-41377 2026-05-7 12:04 2026-04-28 Show GitHub Exploit DB Packet Storm
3124 8.8 重要
Network 		OpenClaw OpenClaw OpenClawにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-41378 2026-05-7 12:04 2026-04-28 Show GitHub Exploit DB Packet Storm
3125 7.1 重要
Network 		OpenClaw OpenClaw OpenClawにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-41379 2026-05-7 12:04 2026-04-28 Show GitHub Exploit DB Packet Storm
3126 7.3 重要
Local 		OpenClaw OpenClaw OpenClawにおけるセキュリティ決定の信頼できない入力への依存に関する脆弱性 CWE-807
セキュリティ決定の信頼できない入力への依存 		CVE-2026-41380 2026-05-7 12:04 2026-04-28 Show GitHub Exploit DB Packet Storm
3127 5.4 警告
Network 		OpenClaw OpenClaw OpenClawにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-41381 2026-05-7 12:04 2026-04-28 Show GitHub Exploit DB Packet Storm
3128 5.4 警告
Network 		OpenClaw OpenClaw OpenClawにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-41382 2026-05-7 12:04 2026-04-28 Show GitHub Exploit DB Packet Storm
3129 8.1 重要
Network 		OpenClaw OpenClaw OpenClawにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-41383 2026-05-7 12:04 2026-04-28 Show GitHub Exploit DB Packet Storm
3130 7.8 重要
Local 		OpenClaw OpenClaw OpenClawにおけるシステム構成または設定の外部制御に関する脆弱性 CWE-15
システム構成または設定の外部制御 		CVE-2026-41384 2026-05-7 12:04 2026-04-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313071 6.1 MEDIUM
Network 		steelthemes nioland The Nioland theme for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘s’ parameter in all versions up to, and including, 1.2.6 due to insufficient input sanitization and output esc… CWE-79
Cross-site Scripting 		CVE-2024-10250 2024-10-26 01:37 2024-10-23 Show GitHub Exploit DB Packet Storm
313072 - - - Incorrect access control in XIAO HE Smart 4.3.1 allows attackers to access sensitive information by analyzing the code and data within the APK file. - CVE-2024-48540 2024-10-26 01:35 2024-10-25 Show GitHub Exploit DB Packet Storm
313073 6.5 MEDIUM
Network 		metagauss download_plugin The Download Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability checks on the 'dpwap_handle_download_user' and 'dpwap_handle_download_comment' functi… CWE-862
 Missing Authorization 		CVE-2024-9829 2024-10-26 01:30 2024-10-23 Show GitHub Exploit DB Packet Storm
313074 4.8 MEDIUM
Network 		mitel micollab A vulnerability in the Suite Applications Services component of Mitel MiCollab through 9.7.1.110 could allow an authenticated attacker with administrative privileges to conduct a Stored Cross-Site Sc… CWE-79
Cross-site Scripting 		CVE-2024-30160 2024-10-26 01:30 2024-10-22 Show GitHub Exploit DB Packet Storm
313075 4.8 MEDIUM
Network 		mitel micollab A vulnerability in the web conferencing component of Mitel MiCollab through 9.7.1.110 could allow an authenticated attacker with administrative privileges to conduct a Stored Cross-Site Scripting (XS… CWE-79
Cross-site Scripting 		CVE-2024-30159 2024-10-26 01:30 2024-10-22 Show GitHub Exploit DB Packet Storm
313076 7.2 HIGH
Network 		mitel micollab A vulnerability in the web conferencing component of Mitel MiCollab through 9.7.1.110 could allow an authenticated attacker with administrative privileges to conduct a SQL Injection attack due to ins… CWE-89
SQL Injection 		CVE-2024-30158 2024-10-26 01:30 2024-10-22 Show GitHub Exploit DB Packet Storm
313077 7.2 HIGH
Network 		wpovernight woocommerce_order_proposal The WooCommerce Order Proposal plugin for WordPress is vulnerable to privilege escalation via order proposal in all versions up to and including 2.0.5. This is due to the improper implementation of a… CWE-287
Improper Authentication 		CVE-2024-9927 2024-10-26 01:29 2024-10-23 Show GitHub Exploit DB Packet Storm
313078 5.4 MEDIUM
Network 		rebelcode rss_aggregator The RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging plugin for WordPress is vulnerable to unauthorized use of functionality due to a missing capability check on the wprss_ajax… CWE-862
 Missing Authorization 		CVE-2024-9583 2024-10-26 01:28 2024-10-23 Show GitHub Exploit DB Packet Storm
313079 3.1 LOW
Network 		umbraco umbraco_cms Umbraco, a free and open source .NET content management system, has an insufficient session expiration issue in versions on the 13.x branch prior to 13.5.2, 10.x prior to 10.8.7, and 8.x prior to 8.1… CWE-613
 Insufficient Session Expiration 		CVE-2024-48926 2024-10-26 01:19 2024-10-23 Show GitHub Exploit DB Packet Storm
313080 4.6 MEDIUM
Network 		umbraco umbraco_cms Umbraco, a free and open source .NET content management system, has a remote code execution issue in versions on the 13.x branch prior to 13.5.2, 10.x prior to 10.8.7, and 8.x prior to 8.18.15. There… CWE-79
Cross-site Scripting 		CVE-2024-48927 2024-10-26 01:15 2024-10-23 Show GitHub Exploit DB Packet Storm