Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 22, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3301	7.6	重要 Network	OpenClaw	OpenClaw	OpenClawにおけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-41297	2026-04-30 12:26	2026-04-21	Show	GitHub Exploit DB Packet Storm

3302	5.4	警告 Network	OpenClaw	OpenClaw	OpenClawにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-41298	2026-04-30 12:26	2026-04-21	Show	GitHub Exploit DB Packet Storm

3303	7.1	重要 Network	OpenClaw	OpenClaw	OpenClawにおけるセキュリティ決定の信頼できない入力への依存に関する脆弱性	CWE-807 セキュリティ決定の信頼できない入力への依存	CVE-2026-41299	2026-04-30 12:26	2026-04-21	Show	GitHub Exploit DB Packet Storm

3304	6.5	警告 Network	OpenClaw	OpenClaw	OpenClawにおける不完全な内部状態の区別に関する脆弱性	CWE-372 不完全な内部状態の区別	CVE-2026-41300	2026-04-30 12:26	2026-04-21	Show	GitHub Exploit DB Packet Storm

3305	5.3	警告 Network	OpenClaw	OpenClaw	OpenClawにおけるデジタル署名の検証に関する脆弱性	CWE-347 デジタル署名の不適切な検証	CVE-2026-41301	2026-04-30 12:26	2026-04-21	Show	GitHub Exploit DB Packet Storm

3306	6.3	警告 Network	OpenClaw	OpenClaw	OpenClawにおけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-41302	2026-04-30 12:26	2026-04-21	Show	GitHub Exploit DB Packet Storm

3307	8.8	重要 Network	OpenClaw	OpenClaw	OpenClawにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-41303	2026-04-30 12:26	2026-04-21	Show	GitHub Exploit DB Packet Storm

3308	6.5	警告 Network	pypdf project	pypdf	pypdf projectのpypdfにおける過剰なサイズ値のメモリ割り当てに関する脆弱性	CWE-789 過剰なサイズ値のメモリ割り当て	CVE-2026-41312	2026-04-30 12:26	2026-04-22	Show	GitHub Exploit DB Packet Storm

3309	6.5	警告 Network	pypdf project	pypdf	pypdf projectのpypdfにおける過度な反復の脆弱性	CWE-834 過度なイテレーション	CVE-2026-41313	2026-04-30 12:26	2026-04-22	Show	GitHub Exploit DB Packet Storm

3310	6.5	警告 Network	pypdf project	pypdf	pypdf projectのpypdfにおける過剰なサイズ値のメモリ割り当てに関する脆弱性	CWE-789 過剰なサイズ値のメモリ割り当て	CVE-2026-41314	2026-04-30 12:26	2026-04-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
551	4.3	MEDIUM Network	-	-	The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to and including 4.2.0. This is due to insuffic…	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2026-6566	2026-05-20 22:54	2026-05-20	Show	GitHub Exploit DB Packet Storm

552	8.8	HIGH Network	-	-	The AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 10.8.2. Th…	CWE-862 Missing Authorization	CVE-2026-5200	2026-05-20 22:54	2026-05-20	Show	GitHub Exploit DB Packet Storm

553	4.3	MEDIUM Network	-	-	The Anomify AI – Anomaly Detection and Alerting plugin for WordPress is vulnerable to Cross-Site Request Forgery (CSRF) leading to Stored Cross-Site Scripting (XSS) in versions up to and including 0.…	CWE-352 Origin Validation Error	CVE-2026-6405	2026-05-20 22:54	2026-05-20	Show	GitHub Exploit DB Packet Storm

554	5.3	MEDIUM Network	-	-	The Slider Revolution plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 7.0.9 via the 'get_stream_data()' function. This makes it possible for una…	CWE-200 Information Exposure	CVE-2026-6728	2026-05-20 22:54	2026-05-20	Show	GitHub Exploit DB Packet Storm

555	6.5	MEDIUM Network	-	-	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeisle Visualizer allows Stored XSS. This issue affects Visualizer: from n/a before 4.0.0.	CWE-79 Cross-site Scripting	CVE-2026-24573	2026-05-20 22:54	2026-05-20	Show	GitHub Exploit DB Packet Storm

556	6.5	MEDIUM Network	-	-	Missing Authorization vulnerability in Magepeople inc. WpBookingly allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WpBookingly: from n/a through 1.2.9.	CWE-862 Missing Authorization	CVE-2026-27405	2026-05-20 22:54	2026-05-20	Show	GitHub Exploit DB Packet Storm

557	4.3	MEDIUM Network	-	-	Missing Authorization vulnerability in WP Chill Image Photo Gallery Final Tiles Grid allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Image Photo Gallery F…	CWE-862 Missing Authorization	CVE-2026-27424	2026-05-20 22:54	2026-05-20	Show	GitHub Exploit DB Packet Storm

558	7.6	HIGH Network	-	-	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in YITH YITH WooCommerce Product Add-Ons allows Blind SQL Injection. This issue affects YITH WooCom…	CWE-89 SQL Injection	CVE-2026-42383	2026-05-20 22:54	2026-05-20	Show	GitHub Exploit DB Packet Storm

559	5.0	MEDIUM Network	-	-	Missing Authorization vulnerability in ADD-ONS.ORG PDF for Elementor Forms + Drag And Drop Template Builder allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affect…	CWE-862 Missing Authorization	CVE-2026-45443	2026-05-20 22:54	2026-05-20	Show	GitHub Exploit DB Packet Storm

560	8.1	HIGH Network	-	-	Windmill prior to 1.703.2 contains an incorrect default permissions vulnerability in nsjail sandbox configuration files where /etc is bind-mounted without read-write restrictions, allowing authentica…	CWE-276 Incorrect Default Permissions	CVE-2026-47107	2026-05-20 22:16	2026-05-20	Show	GitHub Exploit DB Packet Storm