Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 20, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3121	7.1	重要 Network	OpenClaw	OpenClaw	OpenClawにおける複数の脆弱性	CWE-184 CWE-918	CVE-2026-41361	2026-04-30 11:00	2026-04-23	Show	GitHub Exploit DB Packet Storm

3122	4.3	警告 Network	OpenClaw	OpenClaw	OpenClawにおける誤った領域へのリソースの漏えいに関する脆弱性	CWE-668 誤った領域へのリソースの漏えい	CVE-2026-41362	2026-04-30 11:00	2026-04-28	Show	GitHub Exploit DB Packet Storm

3123	6.5	警告 Network	OpenClaw	OpenClaw	OpenClawにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-41363	2026-04-30 11:00	2026-04-28	Show	GitHub Exploit DB Packet Storm

3124	8.1	重要 Network	OpenClaw	OpenClaw	OpenClawにおけるリンク解釈に関する脆弱性	CWE-59 リンク解釈の問題	CVE-2026-41364	2026-04-30 11:00	2026-04-28	Show	GitHub Exploit DB Packet Storm

3125	5.4	警告 Network	OpenClaw	OpenClaw	OpenClawにおけるフィルタリングの回避に関する脆弱性	CWE-441 フィルタリング回避	CVE-2026-41365	2026-04-30 11:00	2026-04-28	Show	GitHub Exploit DB Packet Storm

3126	5.5	警告 Local	OpenClaw	OpenClaw	OpenClawにおける重要なリソースに対する不適切なパーミッションの割り当てに関する脆弱性	CWE-732 重要なリソースに対する不適切なパーミッションの割り当て	CVE-2026-41366	2026-04-30 11:00	2026-04-28	Show	GitHub Exploit DB Packet Storm

3127	5	警告 Network	OpenClaw	OpenClaw	OpenClawにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-41367	2026-04-30 11:00	2026-04-28	Show	GitHub Exploit DB Packet Storm

3128	6.5	警告 Network	OpenClaw	OpenClaw	OpenClawにおける誤った領域へのリソースの漏えいに関する脆弱性	CWE-668 誤った領域へのリソースの漏えい	CVE-2026-41368	2026-04-30 11:00	2026-04-28	Show	GitHub Exploit DB Packet Storm

3129	6.5	警告 Network	OpenClaw	OpenClaw	OpenClawにおける誤った領域へのリソースの漏えいに関する脆弱性	CWE-668 誤った領域へのリソースの漏えい	CVE-2026-41369	2026-04-30 11:00	2026-04-28	Show	GitHub Exploit DB Packet Storm

3130	6.5	警告 Network	OpenClaw	OpenClaw	OpenClawにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-41370	2026-04-30 11:00	2026-04-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
521	3.1	LOW Network	-	-	Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13 fail to check if {{team_id}} was being changed when updating playbooks, allowing users with only {{Manage Playbook Configurations}} permissio… New	CWE-863 Incorrect Authorization	CVE-2026-4286	2026-05-19 02:32	2026-05-18	Show	GitHub Exploit DB Packet Storm

522	3.5	LOW Network	-	-	Mattermost Desktop App versions <=6.1 6.0.1 5.4.13.0 fail to prevent server-rendered content from closing an underlying application view in the Mattermost Desktop App which allows a malicious server … New	CWE-754 Improper Check for Unusual or Exceptional Conditions	CVE-2026-4643	2026-05-19 02:32	2026-05-18	Show	GitHub Exploit DB Packet Storm

523	6.5	MEDIUM Network	-	-	Mattermost versions 11.5.x <= 11.5.1 fail to verify channel membership when processing AI-assisted message rewrites which allows an authenticated attacker to read the content of threads in private ch… New	CWE-862 Missing Authorization	CVE-2026-5163	2026-05-19 02:32	2026-05-18	Show	GitHub Exploit DB Packet Storm

524	4.3	MEDIUM Network	-	-	Mattermost versions 11.5.x <= 11.5.1, 11.4.x <= 11.4.3 fail to validate the X-Requested-With header on the burn-on-read reveal endpoint which allows an authenticated channel member to force the revea… New	CWE-346 Origin Validation Error	CVE-2026-6339	2026-05-19 02:32	2026-05-18	Show	GitHub Exploit DB Packet Storm

525	4.3	MEDIUM Network	-	-	Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13, 11.4.x <= 11.4.3 fail to check public/private permissions which allows members without these permissions to access public playbooks via /get… New	CWE-863 Incorrect Authorization	CVE-2026-6343	2026-05-19 02:32	2026-05-18	Show	GitHub Exploit DB Packet Storm

526	6.5	MEDIUM Network	-	-	Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13, 11.4.x <= 11.4.3 fail prevent disclosure of created user password which allows a malicious attacker to impersonate a user via the use of som… New	CWE-522 Insufficiently Protected Credentials	CVE-2026-6345	2026-05-19 02:32	2026-05-18	Show	GitHub Exploit DB Packet Storm

527	6.4	MEDIUM Network	-	-	Savsoft Quiz 5.0 contains a persistent cross-site scripting vulnerability in the user account settings page that allows authenticated attackers to inject malicious HTML and JavaScript code. Attackers… Update	CWE-79 Cross-site Scripting	CVE-2021-47962	2026-05-19 02:32	2026-05-16	Show	GitHub Exploit DB Packet Storm

528	7.2	HIGH Network	-	-	Anote 1.0 contains a persistent cross-site scripting vulnerability that allows attackers to execute arbitrary code by injecting malicious payloads into markdown files stored within the application. A… Update	CWE-79 Cross-site Scripting	CVE-2021-47963	2026-05-19 02:32	2026-05-16	Show	GitHub Exploit DB Packet Storm

529	6.4	MEDIUM Network	-	-	Podcast Generator 3.1 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting unfiltered JavaScript code in the long_des… Update	CWE-79 Cross-site Scripting	CVE-2021-47968	2026-05-19 02:32	2026-05-16	Show	GitHub Exploit DB Packet Storm

530	8.8	HIGH Network	-	-	HS Brand Logo Slider 2.1 contains an unrestricted file upload vulnerability that allows authenticated users to bypass client-side file extension validation by uploading arbitrary files. Attackers can… Update	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-37227	2026-05-19 02:32	2026-05-17	Show	GitHub Exploit DB Packet Storm