Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
3131 9.8 緊急
Network
Apache Software Foundation MINA Apache Software FoundationのMINAにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション
CVE-2026-41635 2026-05-1 10:46 2026-04-27 Show GitHub Exploit DB Packet Storm
3132 3.7
Network
OpenClaw OpenClaw OpenClawにおける競合状態に関する脆弱性 CWE-362
競合状態
CVE-2026-41913 2026-05-1 10:46 2026-04-28 Show GitHub Exploit DB Packet Storm
3133 8.5 重要
Network
OpenClaw OpenClaw OpenClawにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ
CVE-2026-41914 2026-05-1 10:46 2026-04-28 Show GitHub Exploit DB Packet Storm
3134 6.1 警告
Local
OpenClaw OpenClaw OpenClawにおける不完全なブラックリストに関する脆弱性 CWE-184
不完全なブラックリスト
CVE-2026-41915 2026-05-1 10:46 2026-04-28 Show GitHub Exploit DB Packet Storm
3135 5.4 警告
Network
OpenClaw OpenClaw OpenClawにおけるセッション期限に関する脆弱性 CWE-613
不適切なセッション期限
CVE-2026-41916 2026-05-1 10:46 2026-04-28 Show GitHub Exploit DB Packet Storm
3136 6.5 警告
Network
Technitium DNS Server TechnitiumのDNS Serverにおける指定された機能の不適切な提供に関する脆弱性 CWE-684
指定された機能の不適切な提供
CVE-2026-42255 2026-05-1 10:46 2026-04-26 Show GitHub Exploit DB Packet Storm
3137 6.5 警告
Network
OpenClaw OpenClaw OpenClawにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て
CVE-2026-42420 2026-05-1 10:46 2026-04-28 Show GitHub Exploit DB Packet Storm
3138 5.4 警告
Network
OpenClaw OpenClaw OpenClawにおけるセッション期限に関する脆弱性 CWE-613
不適切なセッション期限
CVE-2026-42421 2026-05-1 10:46 2026-04-28 Show GitHub Exploit DB Packet Storm
3139 8.8 重要
Network
OpenClaw OpenClaw OpenClawにおける不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2026-42422 2026-05-1 10:46 2026-04-28 Show GitHub Exploit DB Packet Storm
3140 7.5 重要
Network
OpenClaw OpenClaw OpenClawにおける安全でない失敗処理に関する脆弱性 CWE-636
安全でない失敗処理
CVE-2026-42423 2026-05-1 10:46 2026-04-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1241 5.5 MEDIUM
Local
- - BentoML is a Python library for building online serving systems optimized for AI apps and model inference. In versions 1.4.38 and prior, the build packaging workflow follows attacker-controlled symli… New CWE-59
Link Following
CVE-2026-40610 2026-05-27 01:16 2026-05-23 Show GitHub Exploit DB Packet Storm
1242 7.8 HIGH
Local
- - gix-submodule before 0.82.0 incorrectly validates the update field in .gitmodules, allowing attackers to bypass the CommandForbiddenInModulesConfiguration guard when a submodule has been initialized … New CWE-77
Command Injection
CVE-2026-40034 2026-05-27 01:16 2026-05-27 Show GitHub Exploit DB Packet Storm
1243 - - - An Insecure Direct Object Reference (IDOR) vulnerability was discovered in ONLYOFFICE DocSpace before 3.2.1. The flaw exists in multiple REST API endpoints. This allows authenticated users with low-l… New - CVE-2026-38587 2026-05-27 01:16 2026-05-27 Show GitHub Exploit DB Packet Storm
1244 7.0 HIGH
Local
samba rsync Rsync versions before 3.4.3 contain a time-of-check to time-of-use (TOCTOU) race condition in daemon file handling that allows attackers to redirect file writes outside intended directories by replac… Update CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-29518 2026-05-27 01:16 2026-05-20 Show GitHub Exploit DB Packet Storm
1245 7.8 HIGH
Local
- - A high-severity vulnerability in the deployment of Genetec RabbitMQ that allows a privilege escalation attack. New CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2026-25112 2026-05-27 01:16 2026-05-27 Show GitHub Exploit DB Packet Storm
1246 7.8 HIGH
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve shared-frag marker during coalescing skb_try_coalesce() can attach paged frags from @from to @to. If @from… New CWE-787
 Out-of-bounds Write
CVE-2026-46300 2026-05-27 00:46 2026-05-23 Show GitHub Exploit DB Packet Storm
1247 7.3 HIGH
Network
- - A security flaw has been discovered in Das Parking Management System 停车场管理系统 6.2.0. This vulnerability affects unknown code of the component Search API Endpoint. The manipulation of the argument Valu… New CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-9552 2026-05-27 00:17 2026-05-27 Show GitHub Exploit DB Packet Storm
1248 7.3 HIGH
Network
- - A vulnerability was identified in Das Parking Management System 停车场管理系统 6.2.0. This affects the function xp_cmdshell of the file ParkingRecord/ExportParkingRecords of the component API Endpoint. The … New CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-9551 2026-05-27 00:17 2026-05-27 Show GitHub Exploit DB Packet Storm
1249 7.3 HIGH
Network
- - A vulnerability was determined in Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform 1.3.0. Affected by this issue is some unknown functionality of the file /SubstationWE… New CWE-22
Path Traversal
CVE-2026-9550 2026-05-27 00:16 2026-05-27 Show GitHub Exploit DB Packet Storm
1250 8.5 HIGH
Network
- - A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the "print command" setting via the "%J" substitution charac… New CWE-78
OS Command 
CVE-2026-4480 2026-05-27 00:16 2026-05-27 Show GitHub Exploit DB Packet Storm