Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3861 9.1 緊急
Network 		dgraph dgraph dgraphにおけるデータクエリロジックの特殊要素の不適切な中立化に関する脆弱性 CWE-943
データクエリロジックの特殊要素の不適切な中立化 		CVE-2026-41327 2026-04-30 11:01 2026-04-24 Show GitHub Exploit DB Packet Storm
3862 9.1 緊急
Network 		dgraph dgraph dgraphにおけるデータクエリロジックの特殊要素の不適切な中立化に関する脆弱性 CWE-943
データクエリロジックの特殊要素の不適切な中立化 		CVE-2026-41328 2026-04-30 11:01 2026-04-24 Show GitHub Exploit DB Packet Storm
3863 3.7 低
Network 		OpenClaw OpenClaw OpenClawにおけるインタラクション頻度の制御に関する脆弱性　 CWE-799
インタラクション頻度の不適切な制御 		CVE-2026-41333 2026-04-30 11:01 2026-04-23 Show GitHub Exploit DB Packet Storm
3864 6.5 警告
Network 		OpenClaw OpenClaw OpenClawにおける安全でない失敗処理に関する脆弱性 CWE-636
安全でない失敗処理 		CVE-2026-41334 2026-04-30 11:01 2026-04-23 Show GitHub Exploit DB Packet Storm
3865 5.3 警告
Network 		OpenClaw OpenClaw OpenClawにおける認可されていない制御領域への重要情報の漏えいに関する脆弱性 CWE-497
認可されていない制御領域への重要情報の漏えい 		CVE-2026-41335 2026-04-30 11:01 2026-04-23 Show GitHub Exploit DB Packet Storm
3866 7.8 重要
Local 		OpenClaw OpenClaw OpenClawにおける信頼できない制御領域からの機能の組み込みに関する脆弱性 CWE-829
信頼性のない制御領域からの機能の組み込み 		CVE-2026-41336 2026-04-30 11:01 2026-04-23 Show GitHub Exploit DB Packet Storm
3867 5.3 警告
Network 		OpenClaw OpenClaw OpenClawにおけるTime-of-check Time-of-use (TOCTOU) 競合状態の脆弱性 CWE-367
Time-of-check Time-of-use (TOCTOU) 競合状態 		CVE-2026-41337 2026-04-30 11:01 2026-04-23 Show GitHub Exploit DB Packet Storm
3868 5 警告
Local 		OpenClaw OpenClaw OpenClawにおけるTime-of-check Time-of-use (TOCTOU) 競合状態の脆弱性 CWE-367
Time-of-check Time-of-use (TOCTOU) 競合状態 		CVE-2026-41338 2026-04-30 11:01 2026-04-23 Show GitHub Exploit DB Packet Storm
3869 6.5 警告
Network 		OpenClaw OpenClaw OpenClawにおける不完全な内部状態の区別に関する脆弱性 CWE-372
不完全な内部状態の区別 		CVE-2026-41340 2026-04-30 11:01 2026-04-23 Show GitHub Exploit DB Packet Storm
3870 5.4 警告
Network 		OpenClaw OpenClaw OpenClawにおける不十分な型の区別に関する脆弱性 CWE-351
不十分な型の区別 		CVE-2026-41341 2026-04-30 11:01 2026-04-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
348841 - jgs-xa jgs-portal Multiple SQL injection vulnerabilities in JGS-XA JGS-Portal 3.0.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) anzahl_beitraege parameter to jgs_portal.php, 2) yea… NVD-CWE-Other
CVE-2005-1633 2016-10-18 12:21 2005-05-17 Show GitHub Exploit DB Packet Storm
348842 - jgs-xa jgs-portal Multiple cross-site scripting (XSS) vulnerabilities in JGS-XA JGS-Portal 3.0.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) anzahl_beitraege parameter to jgs_… NVD-CWE-Other
CVE-2005-1634 2016-10-18 12:21 2005-05-17 Show GitHub Exploit DB Packet Storm
348843 - jgs-xa jgs-portal JGS-XA JGS-Portal 3.0.2 and earlier allows remote attackers to obtain the full server path via direct requests to (1) jgs_portal_ref.php, (2) jgs_portal_land.php, (3) jgs_portal_log.php, (4) jgs_port… NVD-CWE-Other
CVE-2005-1635 2016-10-18 12:21 2005-05-17 Show GitHub Exploit DB Packet Storm
348844 - yahoo messenger The Logfile feature in Yahoo! Messenger 5.x through 6.0 can be activated by a YMSGR: URL and writes all output to a single ypager.log file, even when there are multiple users, and does not properly w… NVD-CWE-Other
CVE-2005-1671 2016-10-18 12:21 2005-05-19 Show GitHub Exploit DB Packet Storm
348845 - timo_rossi picasm Stack-based buffer overflow in the error directive in picasm 1.12b and earlier allows attackers to execute arbitrary code via a long error message. NVD-CWE-Other
CVE-2005-1679 2016-10-18 12:21 2005-05-20 Show GitHub Exploit DB Packet Storm
348846 - d-link dsl-502t
dsl-504t
dsl-562t
dsl-g604t 		D-Link DSL-502T, DSL-504T, DSL-562T, and DSL-G604T, when /cgi-bin/firmwarecfg is executed, allows remote attackers to bypass authentication (1) if their IP address already exists in /var/tmp/fw_ip or… NVD-CWE-Other
CVE-2005-1680 2016-10-18 12:21 2005-05-20 Show GitHub Exploit DB Packet Storm
348847 - bugada_andrea php_advanced_transfer_manager PHP remote file inclusion vulnerability in common.php in phpATM 1.21, and possibly earlier versions, allows remote attackers to execute arbitrary PHP code via a URL in the include_location parameter … NVD-CWE-Other
CVE-2005-1681 2016-10-18 12:21 2005-05-20 Show GitHub Exploit DB Packet Storm
348848 - microsoft word Buffer overflow in winword.exe 10.2627.6714 and earlier in Microsoft Word for the Macintosh, before SP3 for Word 2002, allows remote attackers to cause a denial of service and possibly execute arbitr… NVD-CWE-Other
CVE-2005-1683 2016-10-18 12:21 2005-05-20 Show GitHub Exploit DB Packet Storm
348849 - episodex episodex_guestbook Cross-site scripting (XSS) vulnerability in default.asp for episodex guestbook allows remote attackers to inject arbitrary web script or HTML via the Name field and other fields. NVD-CWE-Other
CVE-2005-1684 2016-10-18 12:21 2005-05-20 Show GitHub Exploit DB Packet Storm
348850 - wordpress wordpress SQL injection vulnerability in wp-trackback.php in Wordpress 1.5 and earlier allows remote attackers to execute arbitrary SQL commands via the tb_id parameter. NVD-CWE-Other
CVE-2005-1687 2016-10-18 12:21 2005-05-20 Show GitHub Exploit DB Packet Storm