Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
3481 7.8 重要
Local
OpenClaw OpenClaw OpenClawにおける信頼できない制御領域からの機能の組み込みに関する脆弱性 CWE-829
信頼性のない制御領域からの機能の組み込み
CVE-2026-41396 2026-05-7 12:29 2026-04-28 Show GitHub Exploit DB Packet Storm
3482 9.6 緊急
Network
OpenClaw OpenClaw OpenClawにおけるリンク解釈に関する脆弱性 CWE-59
リンク解釈の問題
CVE-2026-41397 2026-05-7 12:29 2026-04-28 Show GitHub Exploit DB Packet Storm
3483 4 警告
Local
OpenClaw OpenClaw OpenClawにおけるセキュリティ決定の信頼できない入力への依存に関する脆弱性 CWE-807
セキュリティ決定の信頼できない入力への依存
CVE-2026-41403 2026-05-7 12:29 2026-04-28 Show GitHub Exploit DB Packet Storm
3484 8.8 重要
Network
OpenClaw OpenClaw OpenClawにおける不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2026-41404 2026-05-7 12:29 2026-04-28 Show GitHub Exploit DB Packet Storm
3485 7.5 重要
Network
OpenClaw OpenClaw OpenClawにおける不適切な動作順序(早期増幅)に関する脆弱性 CWE-408
不適切な動作順序(早期増幅)
CVE-2026-41405 2026-05-7 12:29 2026-04-28 Show GitHub Exploit DB Packet Storm
3486 5.4 警告
Network
OpenClaw OpenClaw OpenClawにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避
CVE-2026-41406 2026-05-7 12:29 2026-04-28 Show GitHub Exploit DB Packet Storm
3487 5.3 警告
Network
OpenClaw OpenClaw OpenClawにおけるタイミングの違いに起因する情報漏えいに関する脆弱性 CWE-208
タイミングの違いに起因する情報漏えい
CVE-2026-41407 2026-05-7 12:29 2026-04-28 Show GitHub Exploit DB Packet Storm
3488 6.5 警告
Network
OpenClaw OpenClaw OpenClawにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て
CVE-2026-41408 2026-05-7 12:29 2026-04-28 Show GitHub Exploit DB Packet Storm
3489 4.3 警告
Network
OpenClaw OpenClaw OpenClawにおける不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2026-41910 2026-05-7 12:29 2026-04-28 Show GitHub Exploit DB Packet Storm
3490 6.5 警告
Network
OpenClaw OpenClaw OpenClawにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-41911 2026-05-7 12:29 2026-04-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
317691 7.8 HIGH
Local
intel nuc_x15_laptop_kit_lapac71h
nuc_x15_laptop_kit_lapac71g
nuc_x15_laptop_kit_lapkc71f
nuc_x15_laptop_kit_lapkc71e
nuc_x15_laptop_kit_lapkc51e
nuc_m15_laptop_kit_lapbc710
nuc_m15_lapto…
Insecure inherited permissions in some Intel(R) HID Event Filter software installers before version 2.2.2.1 may allow an authenticated user to potentially enable escalation of privilege via local acc… CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2024-25561 2024-09-13 03:50 2024-08-14 Show GitHub Exploit DB Packet Storm
317692 7.8 HIGH
Local
intel license_manager_for_flexim Uncontrolled search path for some Intel(R) License Manager for FLEXlm product software before version 11.19.5.0 may allow an authenticated user to potentially enable escalation of privilege via local… CWE-427
 Uncontrolled Search Path Element
CVE-2024-24977 2024-09-13 03:45 2024-08-14 Show GitHub Exploit DB Packet Storm
317693 7.8 HIGH
Local
intel flexlm_license_daemons_for_intel_fpga Insecure inherited permissions in some Flexlm License Daemons for Intel(R) FPGA software before version v11.19.5.0 may allow an authenticated user to potentially enable escalation of privilege via lo… CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2024-23908 2024-09-13 03:43 2024-08-14 Show GitHub Exploit DB Packet Storm
317694 9.8 CRITICAL
Network
openedx openedx This openedx-translations repository contains translation files from Open edX repositories to be kept in sync with Transifex. Before moving to pulling translations from the openedx-translations repos… CWE-74
Injection
CVE-2024-43782 2024-09-13 03:29 2024-08-24 Show GitHub Exploit DB Packet Storm
317695 7.8 HIGH
Local
steveklabnik request_store RequestStore provides per-request global storage for Rack. The files published as part of request_store 1.3.2 have 0666 permissions, meaning that they are world-writable, which allows local users to … CWE-276
Incorrect Default Permissions 
CVE-2024-43791 2024-09-13 03:26 2024-08-24 Show GitHub Exploit DB Packet Storm
317696 8.8 HIGH
Local
intel ethernet_800_series_controllers_driver Out-of-bounds write in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters before version 28.3 may allow an authenticated user to potentially enable escalation of pri… CWE-787
 Out-of-bounds Write
CVE-2024-23497 2024-09-13 03:26 2024-08-14 Show GitHub Exploit DB Packet Storm
317697 6.1 MEDIUM
Network
jeesite jeesite A vulnerability was found in thinkgem JeeSite 5.3. It has been rated as problematic. This issue affects some unknown processing of the file /js/a/login of the component Cookie Handler. The manipulati… CWE-79
Cross-site Scripting
CVE-2024-8112 2024-09-13 03:23 2024-08-24 Show GitHub Exploit DB Packet Storm
317698 5.4 MEDIUM
Network
pretix pretix Stored XSS in organizer and event settings of pretix up to 2024.7.0 allows malicious event organizers to inject HTML tags into e-mail previews on settings page. The default Content Security Policy of… CWE-79
Cross-site Scripting
CVE-2024-8113 2024-09-13 03:21 2024-08-24 Show GitHub Exploit DB Packet Storm
317699 6.5 MEDIUM
Network
gethomepage homepage Homepage is a highly customizable homepage with Docker and service API integrations. The default setup of homepage 0.9.1 is vulnerable to DNS rebinding. Homepage is setup without certificate and auth… CWE-290
 Authentication Bypass by Spoofing
CVE-2024-42364 2024-09-13 03:20 2024-08-24 Show GitHub Exploit DB Packet Storm
317700 - - - In the Linux kernel, the following vulnerability has been resolved: nfs: pass explicit offset/count to trace events nfs_folio_length is unsafe to use without having the folio locked and a check for… - CVE-2024-43826 2024-09-13 03:15 2024-08-17 Show GitHub Exploit DB Packet Storm