Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3351 5.5 警告
Local 		OpenClaw OpenClaw OpenClawにおける重要なリソースに対する不適切なパーミッションの割り当てに関する脆弱性 CWE-732
重要なリソースに対する不適切なパーミッションの割り当て 		CVE-2026-41366 2026-04-30 11:00 2026-04-28 Show GitHub Exploit DB Packet Storm
3352 5 警告
Network 		OpenClaw OpenClaw OpenClawにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-41367 2026-04-30 11:00 2026-04-28 Show GitHub Exploit DB Packet Storm
3353 6.5 警告
Network 		OpenClaw OpenClaw OpenClawにおける誤った領域へのリソースの漏えいに関する脆弱性 CWE-668
誤った領域へのリソースの漏えい 		CVE-2026-41368 2026-04-30 11:00 2026-04-28 Show GitHub Exploit DB Packet Storm
3354 6.5 警告
Network 		OpenClaw OpenClaw OpenClawにおける誤った領域へのリソースの漏えいに関する脆弱性 CWE-668
誤った領域へのリソースの漏えい 		CVE-2026-41369 2026-04-30 11:00 2026-04-28 Show GitHub Exploit DB Packet Storm
3355 6.5 警告
Network 		OpenClaw OpenClaw OpenClawにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-41370 2026-04-30 11:00 2026-04-28 Show GitHub Exploit DB Packet Storm
3356 8.5 重要
Network 		OpenClaw OpenClaw OpenClawにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-41371 2026-04-30 11:00 2026-04-28 Show GitHub Exploit DB Packet Storm
3357 5.8 警告
Network 		OpenClaw OpenClaw OpenClawにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-41372 2026-04-30 10:59 2026-04-28 Show GitHub Exploit DB Packet Storm
3358 5.8 警告
Network 		OpenClaw OpenClaw OpenClawにおけるファイル名やパス名の外部制御に関する脆弱性 CWE-73
ファイル名やパス名の外部制御 		CVE-2026-41389 2026-04-30 10:59 2026-04-20 Show GitHub Exploit DB Packet Storm
3359 9.1 緊急
Network 		Teluu Ltd. PJSIP Teluu Ltd.のPJSIPにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-41415 2026-04-30 10:59 2026-04-24 Show GitHub Exploit DB Packet Storm
3360 7.5 重要
Network 		Teluu Ltd. PJSIP Teluu Ltd.のPJSIPにおける整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2026-41416 2026-04-30 10:59 2026-04-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
261 4.3 MEDIUM
Network 		- - A flaw was found in Keycloak. An authenticated user can bypass configured WebAuthn policies during credential registration by manipulating client-side JavaScript. This occurs because the server-side … New CWE-603
 Use of Client-Side Authentication 		CVE-2026-8830 2026-05-19 23:25 2026-05-19 Show GitHub Exploit DB Packet Storm
262 5.5 MEDIUM
Local 		- - Release of invalid pointer or reference vulnerability in Samsung Open Source Escargot allows Buffer Manipulation. This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3. New CWE-763
 Release of Invalid Pointer or Reference 		CVE-2026-47312 2026-05-19 23:25 2026-05-19 Show GitHub Exploit DB Packet Storm
263 5.5 MEDIUM
Local 		- - Memory allocation with excessive size value vulnerability in Samsung Open Source Escargot allows Excessive Allocation. This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3. New CWE-789
 Memory Allocation with Excessive Size Value 		CVE-2026-47313 2026-05-19 23:25 2026-05-19 Show GitHub Exploit DB Packet Storm
264 7.8 HIGH
Local 		- - Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflow Buffers. This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3. New CWE-787
 Out-of-bounds Write 		CVE-2026-47314 2026-05-19 23:25 2026-05-19 Show GitHub Exploit DB Packet Storm
265 5.5 MEDIUM
Local 		- - Improper Check for Unusual or Exceptional Conditions vulnerability in Samsung Open Source Escargot allows Input Data Manipulation. This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2… New CWE-754
 Improper Check for Unusual or Exceptional Conditions 		CVE-2026-47315 2026-05-19 23:25 2026-05-19 Show GitHub Exploit DB Packet Storm
266 5.5 MEDIUM
Local 		- - Improper Check or Handling of Exceptional Conditions vulnerability in Samsung Open Source Escargot allows Input Data Manipulation. This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2… New CWE-703
 Improper Check or Handling of Exceptional Conditions 		CVE-2026-47316 2026-05-19 23:25 2026-05-19 Show GitHub Exploit DB Packet Storm
267 5.5 MEDIUM
Local 		- - Uncontrolled Recursion vulnerability in Samsung Open Source Escargot allows Excessive Allocation. This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3. New CWE-674
 Uncontrolled Recursion 		CVE-2026-47317 2026-05-19 23:25 2026-05-19 Show GitHub Exploit DB Packet Storm
268 5.4 MEDIUM
Network 		- - A flaw was found in Keycloak. When both realm-level and client-level `notBefore` revocation policies are configured, Keycloak's OpenID Connect (OIDC) Introspection feature fails to properly honor the… New CWE-303
 Incorrect Implementation of Authentication Algorithm 		CVE-2026-8922 2026-05-19 23:25 2026-05-19 Show GitHub Exploit DB Packet Storm
269 4.9 MEDIUM
Network 		- - A flaw was found in Keycloak. A low-privilege administrator with the 'view-clients' role can exploit this by invoking the 'evaluate-scopes' Admin API endpoints with an arbitrary user ID (userId) para… New CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2026-37978 2026-05-19 23:25 2026-05-19 Show GitHub Exploit DB Packet Storm
270 4.3 MEDIUM
Network 		- - A flaw was found in Keycloak. A broken access control vulnerability in the Account Resources user lookup endpoint allows a remote authenticated user, who owns at least one User-Managed Access (UMA) r… New CWE-1220
 Insufficient Granularity of Access Control 		CVE-2026-37981 2026-05-19 23:25 2026-05-19 Show GitHub Exploit DB Packet Storm