Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 17, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
351 7.1 重要
Local 		OpenClaw OpenClaw OpenClawにおけるスプーフィングによる認証回避に関する脆弱性 New CWE-290
スプーフィングによる認証回避 		CVE-2026-53832 2026-06-16 13:35 2026-06-12 Show GitHub Exploit DB Packet Storm
352 6.5 警告
Network 		OpenClaw OpenClaw OpenClawにおけるスプーフィングによる認証回避に関する脆弱性 New CWE-290
スプーフィングによる認証回避 		CVE-2026-53833 2026-06-16 13:35 2026-06-12 Show GitHub Exploit DB Packet Storm
353 6.5 警告
Network 		OpenClaw OpenClaw OpenClawにおける不正な認証に関する脆弱性 New CWE-863
不正な認証 		CVE-2026-53834 2026-06-16 13:35 2026-06-12 Show GitHub Exploit DB Packet Storm
354 4.3 警告
Network 		OpenClaw OpenClaw OpenClawにおける不正な認証に関する脆弱性 New CWE-863
不正な認証 		CVE-2026-53835 2026-06-16 13:35 2026-06-12 Show GitHub Exploit DB Packet Storm
355 8.8 重要
Network 		OpenClaw OpenClaw OpenClawにおける不完全なブラックリストに関する脆弱性 New CWE-184
不完全なブラックリスト 		CVE-2026-53836 2026-06-16 13:35 2026-06-12 Show GitHub Exploit DB Packet Storm
356 5.3 警告
Network 		OpenClaw OpenClaw OpenClawにおける安全でない失敗処理に関する脆弱性 New CWE-636
安全でない失敗処理 		CVE-2026-53837 2026-06-16 13:35 2026-06-12 Show GitHub Exploit DB Packet Storm
357 8.5 重要
Network 		LiteSpeed Technologies LiteSpeed WHM Plugin (previously cPanel/WHM Plugin)
LiteSpeed cPanel Plugin 		LiteSpeed TechnologiesのLiteSpeed cPanel Plugin等の複数製品におけるUNIX Symbolic Link のフォローに関する脆弱性 New CWE-61
UNIX Symbolic Link のフォロー 		CVE-2026-54420 2026-06-16 13:35 2026-06-14 Show GitHub Exploit DB Packet Storm
358 7.5 重要
Network 		vLLM vLLM vLLMにおけるリソースの枯渇に関する脆弱性 New CWE-400
リソースの枯渇 		CVE-2026-5497 2026-06-16 13:35 2026-06-11 Show GitHub Exploit DB Packet Storm
359 5.5 警告
Local 		MongoDB Inc. MongoDB MongoDB Inc.のMongoDBにおけるログファイルからの情報漏えいに関する脆弱性 New CWE-532
ログファイルからの情報漏えい 		CVE-2026-9735 2026-06-16 13:35 2026-06-9 Show GitHub Exploit DB Packet Storm
360 7.5 重要
Network 		MongoDB Inc. MongoDB MongoDB Inc.のMongoDBにおける再帰制御に関する脆弱性 New CWE-674
不適切な再帰制御 		CVE-2026-9740 2026-06-16 13:35 2026-06-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
320001 - - - There exists a use after free vulnerability in Reverb. Reverb supports the VARIANT datatype, which is supposed to represent an arbitrary object in C++. When a tensor proto of type VARIANT is unpacked… - CVE-2024-8375 2024-09-20 21:30 2024-09-20 Show GitHub Exploit DB Packet Storm
320002 - - - Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Ece Software Electronic Ticket System allows Reflected XSS, Cross-Site Scripting (XSS).Thi… CWE-79
Cross-site Scripting 		CVE-2024-7785 2024-09-20 21:30 2024-09-19 Show GitHub Exploit DB Packet Storm
320003 - - - The grafana plugin SDK bundles build metadata into the binaries it compiles; this metadata includes the repository URI for the plugin being built, as retrieved by running `git remote get-url origin`.… - CVE-2024-8986 2024-09-20 21:30 2024-09-19 Show GitHub Exploit DB Packet Storm
320004 - - - langchain_experimental (aka LangChain Experimental) 0.1.17 through 0.3.0 for LangChain allows attackers to execute arbitrary code through sympy.sympify (which uses eval) in LLMSymbolicMathChain. LLMS… - CVE-2024-46946 2024-09-20 21:30 2024-09-19 Show GitHub Exploit DB Packet Storm
320005 - - - Any project that parses untrusted Protocol Buffers data containing an arbitrary number of nested groups / series of SGROUP tags can corrupted by exceeding the stack limit i.e. StackOverflow. Parsing … - CVE-2024-7254 2024-09-20 21:30 2024-09-19 Show GitHub Exploit DB Packet Storm
320006 - - - In Brave Android prior to v1.67.116, domains in the Brave Shields popup are elided from the right instead of the left, which may lead to domain confusion. - CVE-2024-37406 2024-09-20 21:30 2024-09-19 Show GitHub Exploit DB Packet Storm
320007 - - - Best House Rental Management System 1.0 contains an arbitrary file upload vulnerability in the save_settings() function of the file rental/admin_class.php. - CVE-2024-46377 2024-09-20 21:30 2024-09-19 Show GitHub Exploit DB Packet Storm
320008 - - - Best House Rental Management System 1.0 contains an arbitrary file upload vulnerability in the update_account() function of the file rental/admin_class.php. - CVE-2024-46376 2024-09-20 21:30 2024-09-19 Show GitHub Exploit DB Packet Storm
320009 - - - Best House Rental Management System 1.0 contains an arbitrary file upload vulnerability in the signup() function of the file rental/admin_class.php. - CVE-2024-46375 2024-09-20 21:30 2024-09-19 Show GitHub Exploit DB Packet Storm
320010 - - - Best House Rental Management System 1.0 contains a SQL injection vulnerability in the delete_category() function of the file rental/admin_class.php. - CVE-2024-46374 2024-09-20 21:30 2024-09-19 Show GitHub Exploit DB Packet Storm