Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 9, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3851	7.7	重要 Network	OpenClaw	OpenClaw	OpenClawにおける複数の脆弱性	CWE-1188 CWE-918	CVE-2026-43527	2026-05-8 12:21	2026-05-5	Show	GitHub Exploit DB Packet Storm

3852	6.5	警告 Network	OpenClaw	OpenClaw	OpenClawにおける保存または転送前の重要な情報の削除に関する脆弱性	CWE-212 保存または転送前の重要な情報の不適切な削除	CVE-2026-43528	2026-05-8 12:21	2026-05-5	Show	GitHub Exploit DB Packet Storm

3853	2.5	低 Local	OpenClaw	OpenClaw	OpenClawにおけるTime-of-check Time-of-use (TOCTOU) 競合状態の脆弱性	CWE-367 Time-of-check Time-of-use (TOCTOU) 競合状態	CVE-2026-43529	2026-05-8 12:21	2026-05-5	Show	GitHub Exploit DB Packet Storm

3854	7.7	重要 Network	OpenClaw	OpenClaw	OpenClawにおける不完全なブラックリストに関する脆弱性	CWE-184 不完全なブラックリスト	CVE-2026-43532	2026-05-8 12:21	2026-05-5	Show	GitHub Exploit DB Packet Storm

3855	8.6	重要 Network	OpenClaw	OpenClaw	OpenClawにおける相対パストラバーサルの脆弱性	CWE-23 相対的パストラバーサル	CVE-2026-43533	2026-05-8 12:21	2026-05-5	Show	GitHub Exploit DB Packet Storm

3856	9.8	緊急 Network	OpenClaw	OpenClaw	OpenClawにおけるデータの信頼性についての不十分な検証に関する脆弱性	CWE-345 データの信頼性についての不十分な検証	CVE-2026-43534	2026-05-8 12:21	2026-05-5	Show	GitHub Exploit DB Packet Storm

3857	9.8	緊急 Network	OpenClaw	OpenClaw	OpenClawにおける不完全なブラックリストに関する脆弱性	CWE-184 不完全なブラックリスト	CVE-2026-43566	2026-05-8 12:21	2026-05-5	Show	GitHub Exploit DB Packet Storm

3858	6.5	警告 Network	OpenClaw	OpenClaw	OpenClawにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-43567	2026-05-8 12:21	2026-05-5	Show	GitHub Exploit DB Packet Storm

3859	6.5	警告 Network	OpenClaw	OpenClaw	OpenClawにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-43568	2026-05-8 12:21	2026-05-5	Show	GitHub Exploit DB Packet Storm

3860	8.8	重要 Network	OpenClaw	OpenClaw	OpenClawにおける信頼できない制御領域からの機能の組み込みに関する脆弱性	CWE-829 信頼性のない制御領域からの機能の組み込み	CVE-2026-43569	2026-05-8 12:21	2026-05-5	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1291	9.8	CRITICAL Network	-	-	WordPress Hybrid Composer 1.4.6 contains an unauthenticated settings change vulnerability that allows unauthenticated attackers to modify WordPress options by exploiting the hc_ajax_save_option actio…	CWE-306 Missing Authentication for Critical Function	CVE-2019-25738	2026-06-5 00:00	2026-06-4	Show	GitHub Exploit DB Packet Storm

1292	6.4	MEDIUM Network	-	-	GigToDo 1.3 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject malicious JavaScript and HTML code through the proposal description field. Attackers…	CWE-79 Cross-site Scripting	CVE-2019-25739	2026-06-5 00:00	2026-06-4	Show	GitHub Exploit DB Packet Storm

1293	6.5	MEDIUM Network	-	-	Joomla com_jsjobs 1.2.6 contains an arbitrary file deletion vulnerability that allows authenticated attackers to delete files by manipulating custom userfield parameters. Attackers can send POST requ…	CWE-22 Path Traversal	CVE-2019-25740	2026-06-5 00:00	2026-06-4	Show	GitHub Exploit DB Packet Storm

1294	9.8	CRITICAL Network	-	-	Mobatek MobaXterm 12.1 contains a structured exception handling (SEH) based buffer overflow vulnerability in the username field of session files that allows remote attackers to execute arbitrary code…	CWE-120 Classic Buffer Overflow	CVE-2019-25741	2026-06-5 00:00	2026-06-4	Show	GitHub Exploit DB Packet Storm

1295	6.4	MEDIUM Network	-	-	WordPress Theme Zoner Real Estate 4.1.1 contains a persistent cross-site scripting vulnerability that allows authenticated agents to inject malicious scripts through the Address input field when crea…	CWE-79 Cross-site Scripting	CVE-2019-25742	2026-06-5 00:00	2026-06-4	Show	GitHub Exploit DB Packet Storm

1296	6.4	MEDIUM Network	-	-	WordPress Soliloquy Lite 2.5.6 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by inserting script tags in the post title fiel…	CWE-79 Cross-site Scripting	CVE-2019-25743	2026-06-5 00:00	2026-06-4	Show	GitHub Exploit DB Packet Storm

1297	6.4	MEDIUM Network	-	-	WordPress Popup Builder 3.49 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by breaking out of option tags in the post_title …	CWE-79 Cross-site Scripting	CVE-2019-25744	2026-06-5 00:00	2026-06-4	Show	GitHub Exploit DB Packet Storm

1298	8.2	HIGH Network	-	-	WordPress Plugin Google Review Slider 6.1 contains a time-based blind SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through th…	CWE-89 SQL Injection	CVE-2019-25745	2026-06-5 00:00	2026-06-4	Show	GitHub Exploit DB Packet Storm

1299	7.3	HIGH Network	-	-	A vulnerability was detected in SourceCodester Pizzafy E-Commerce System 1.0. Affected by this vulnerability is the function Login of the file /admin/admin_class_novo.php of the component Administrat…	CWE-74 CWE-89 Injection SQL Injection	CVE-2026-10704	2026-06-4 23:58	2026-06-3	Show	GitHub Exploit DB Packet Storm

1300	7.3	HIGH Network	-	-	A vulnerability was identified in DedeCMS 5.7.88. The impacted element is the function dede_htmlspecialchars of the file /plus/flink.php. The manipulation of the argument msg leads to sql injection. …	CWE-74 CWE-89 Injection SQL Injection	CVE-2026-10607	2026-06-4 23:56	2026-06-3	Show	GitHub Exploit DB Packet Storm