Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
351 7.7 重要
Network 		OpenClaw OpenClaw OpenClawにおける認証の欠如に関する脆弱性 New CWE-862
認証の欠如 		CVE-2026-43580 2026-05-11 10:56 2026-05-6 Show GitHub Exploit DB Packet Storm
352 9.6 緊急
Adjacent 		OpenClaw OpenClaw OpenClawにおけるリソースの安全ではないデフォルト値への初期化に関する脆弱性 New CWE-1188
リソースの安全ではないデフォルト値への初期化 		CVE-2026-43581 2026-05-11 10:56 2026-05-6 Show GitHub Exploit DB Packet Storm
353 6.3 警告
Network 		OpenClaw OpenClaw OpenClawにおけるTime-of-check Time-of-use (TOCTOU) 競合状態の脆弱性 New CWE-367
Time-of-check Time-of-use (TOCTOU) 競合状態 		CVE-2026-43582 2026-05-11 10:55 2026-05-6 Show GitHub Exploit DB Packet Storm
354 6.5 警告
Network 		OpenClaw OpenClaw OpenClawにおける認証の欠如に関する脆弱性 New CWE-862
認証の欠如 		CVE-2026-43583 2026-05-11 10:55 2026-05-6 Show GitHub Exploit DB Packet Storm
355 8.8 重要
Network 		OpenClaw OpenClaw OpenClawにおける不完全なブラックリストに関する脆弱性 New CWE-184
不完全なブラックリスト 		CVE-2026-43584 2026-05-11 10:55 2026-05-6 Show GitHub Exploit DB Packet Storm
356 9.8 緊急
Network 		OpenClaw OpenClaw OpenClawにおける有効期限後または解放後のリソースの操作に関する脆弱性 New CWE-672
有効期限後または解放後のリソースの操作 		CVE-2026-43585 2026-05-11 10:55 2026-05-6 Show GitHub Exploit DB Packet Storm
357 9.8 緊急
Network 		OpenClaw OpenClaw OpenClawにおけるリソースの安全ではないデフォルト値への初期化に関する脆弱性 New CWE-1188
リソースの安全ではないデフォルト値への初期化 		CVE-2026-44109 2026-05-11 10:55 2026-05-6 Show GitHub Exploit DB Packet Storm
358 8.8 重要
Network 		OpenClaw OpenClaw OpenClawにおける不正な認証に関する脆弱性 New CWE-863
不正な認証 		CVE-2026-44110 2026-05-11 10:55 2026-05-6 Show GitHub Exploit DB Packet Storm
359 4.3 警告
Network 		OpenClaw OpenClaw OpenClawにおける許容された入力値の許可リストに関する脆弱性 New CWE-183
許容された入力値の許可リスト 		CVE-2026-44111 2026-05-11 10:55 2026-05-6 Show GitHub Exploit DB Packet Storm
360 6.3 警告
Network 		OpenClaw OpenClaw OpenClawにおけるTime-of-check Time-of-use (TOCTOU) 競合状態の脆弱性 New CWE-367
Time-of-check Time-of-use (TOCTOU) 競合状態 		CVE-2026-44112 2026-05-11 10:55 2026-05-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312461 4.3 MEDIUM
Network 		discourse discourse_calendar discourse-calendar is a discourse plugin which adds the ability to create a dynamic calendar in the first post of a topic. The limit on region value length is too generous. This allows a malicious ac… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2024-21658 2024-09-5 23:39 2024-08-31 Show GitHub Exploit DB Packet Storm
312462 5.4 MEDIUM
Network 		azurecurve toggle_show\/hide Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in azurecurve azurecurve Toggle Show/Hide allows Stored XSS.This issue affects azurecurve Tog… CWE-79
Cross-site Scripting 		CVE-2024-43961 2024-09-5 23:39 2024-08-30 Show GitHub Exploit DB Packet Storm
312463 9.8 CRITICAL
Network 		semtekyazilim semtek_sempos Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Semtek Informatics Software Consulting Inc. Semtek Sempos allows SQL Injection.This issue affects… CWE-89
SQL Injection 		CVE-2024-7078 2024-09-5 23:38 2024-09-5 Show GitHub Exploit DB Packet Storm
312464 7.2 HIGH
Network 		zyxel zld_firmware A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V5.00 through V5.38, USG FLEX series firmware versions from V5.00 through V5.38, USG FLEX 50(W) series… CWE-78
OS Command  		CVE-2024-42059 2024-09-5 23:38 2024-09-3 Show GitHub Exploit DB Packet Storm
312465 7.2 HIGH
Network 		zyxel zld_firmware A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38, USG FLEX 50(W) series… CWE-78
OS Command  		CVE-2024-42060 2024-09-5 23:37 2024-09-3 Show GitHub Exploit DB Packet Storm
312466 - - - Webmin before 2.202 and Virtualmin before 7.20.2 allow a network traffic loop via spoofed UDP packets on port 10000. - CVE-2024-45692 2024-09-5 23:35 2024-09-5 Show GitHub Exploit DB Packet Storm
312467 4.9 MEDIUM
Network 		zyxel zld_firmware A buffer overflow vulnerability in the CGI program of Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38, USG FLEX 50(W) series fi… CWE-120
Classic Buffer Overflow 		CVE-2024-6343 2024-09-5 23:35 2024-09-3 Show GitHub Exploit DB Packet Storm
312468 7.2 HIGH
Network 		zyxel zld_firmware A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.60 through V5.38 and USG FLEX series firmware versions from V4.60 through V5.38 could allow an auth… CWE-78
OS Command  		CVE-2024-7203 2024-09-5 23:33 2024-09-3 Show GitHub Exploit DB Packet Storm
312469 6.1 MEDIUM
Network 		zyxel zld_firmware A reflected cross-site scripting (XSS) vulnerability in the CGI program "dynamic_script.cgi" of Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.… CWE-79
Cross-site Scripting 		CVE-2024-42061 2024-09-5 23:32 2024-09-3 Show GitHub Exploit DB Packet Storm
312470 9.8 CRITICAL
Network 		linen linen Linen before cd37c3e does not verify that the domain is linen.dev or www.linen.dev when resetting a password. This occurs in create in apps/web/pages/api/forgot-password/index.ts. NVD-CWE-Other
CVE-2024-45522 2024-09-5 23:29 2024-09-2 Show GitHub Exploit DB Packet Storm