Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3871 8.1 重要
Adjacent 		OpenClaw OpenClaw OpenClawにおける同一生成元ポリシー違反に関する脆弱性 CWE-346
同一生成元ポリシー違反 		CVE-2026-41342 2026-04-30 11:01 2026-04-23 Show GitHub Exploit DB Packet Storm
3872 5.3 警告
Network 		OpenClaw OpenClaw OpenClawにおけるインタラクション頻度の制御に関する脆弱性　 CWE-799
インタラクション頻度の不適切な制御 		CVE-2026-41343 2026-04-30 11:01 2026-04-23 Show GitHub Exploit DB Packet Storm
3873 8.8 重要
Network 		OpenClaw OpenClaw OpenClawにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-41344 2026-04-30 11:01 2026-04-23 Show GitHub Exploit DB Packet Storm
3874 5.3 警告
Network 		OpenClaw OpenClaw OpenClawにおける認証情報の不十分な保護に関する脆弱性 CWE-522
認証情報の不十分な保護 		CVE-2026-41345 2026-04-30 11:01 2026-04-23 Show GitHub Exploit DB Packet Storm
3875 7.5 重要
Network 		OpenClaw OpenClaw OpenClawにおけるインタラクション頻度の制御に関する脆弱性　 CWE-799
インタラクション頻度の不適切な制御 		CVE-2026-41346 2026-04-30 11:00 2026-04-23 Show GitHub Exploit DB Packet Storm
3876 7.1 重要
Network 		OpenClaw OpenClaw OpenClawにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2026-41347 2026-04-30 11:00 2026-04-23 Show GitHub Exploit DB Packet Storm
3877 5.4 警告
Network 		OpenClaw OpenClaw OpenClawにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-41348 2026-04-30 11:00 2026-04-23 Show GitHub Exploit DB Packet Storm
3878 8.8 重要
Network 		OpenClaw OpenClaw OpenClawにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-41349 2026-04-30 11:00 2026-04-23 Show GitHub Exploit DB Packet Storm
3879 4.3 警告
Network 		OpenClaw OpenClaw OpenClawにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-41350 2026-04-30 11:00 2026-04-23 Show GitHub Exploit DB Packet Storm
3880 5.3 警告
Network 		OpenClaw OpenClaw OpenClawにおけるCapture-replay による認証回避に関する脆弱性 CWE-294
Capture-replayによる認証回避 		CVE-2026-41351 2026-04-30 11:00 2026-04-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
349001 - php_fusion php_fusion Cross-site scripting (XSS) vulnerability in setuser.php of the Digitanium addon to PHP-Fusion 5.01 allows remote attackers to inject arbitrary web script or HTML via the (1) user_name or (2) user_pas… NVD-CWE-Other
CVE-2005-0829 2016-10-18 12:14 2005-05-2 Show GitHub Exploit DB Packet Storm
349002 - gfi languard_network_security_scanner lnss.exe in GFI Languard Network Security Scanner 5.0 stores the username and password in memory in plaintext, which could allow local administrators to obtain domain administrator credentials. NVD-CWE-Other
CVE-2005-0604 2016-10-18 12:13 2005-05-2 Show GitHub Exploit DB Packet Storm
349003 - phpbb_group phpbb sessions.php in phpBB 2.0.12 and earlier allows remote attackers to gain administrator privileges via the autologinid value in a cookie. NVD-CWE-Other
CVE-2005-0614 2016-10-18 12:13 2005-05-2 Show GitHub Exploit DB Packet Storm
349004 - postnuke_software_foundation postnuke Multiple SQL injection vulnerabilities in (1) index.php, (2) modules.php, or (3) admin.php in PostNuke 0.760-RC2 allow remote attackers to execute arbitrary SQL code via the catid parameter. NVD-CWE-Other
CVE-2005-0615 2016-10-18 12:13 2005-05-2 Show GitHub Exploit DB Packet Storm
349005 - - - Multiple cross-site scripting (XSS) vulnerabilities in the Download module for PostNuke 0.750 and 0.760-RC2 allow remote attackers to inject arbitrary web script or HTML via the (1) Program name, (2)… NVD-CWE-Other
CVE-2005-0616 2016-10-18 12:13 2005-02-28 Show GitHub Exploit DB Packet Storm
349006 - postnuke_software_foundation postnuke SQL injection vulnerability in dl-search.php in PostNuke 0.750 and 0.760-RC2 allows remote attackers to execute arbitrary SQL commands via the show parameter. NVD-CWE-Other
CVE-2005-0617 2016-10-18 12:13 2005-05-2 Show GitHub Exploit DB Packet Storm
349007 - enlight_software scrapland Scrapland 1.0 and earlier allows remote attackers to cause a denial of service (server termination) by triggering an error, which is treated as a fatal error by the server, as demonstrated using (1) … NVD-CWE-Other
CVE-2005-0621 2016-10-18 12:13 2005-05-2 Show GitHub Exploit DB Packet Storm
349008 - raidenhttpd raidenhttpd RaidenHTTPD 1.1.32, and possibly other versions before 1.1.34, allows remote attackers to view the PHP source code via an HTTP GET request for a filename with a trailing (1) . (dot) or (2) space. NVD-CWE-Other
CVE-2005-0622 2016-10-18 12:13 2005-03-1 Show GitHub Exploit DB Packet Storm
349009 - raidenhttpd raidenhttpd Buffer overflow in RaidenHTTPD 1.1.32, and possibly other versions before 1.1.34, allows remote attackers to execute arbitrary code via a long URL. NVD-CWE-Other
CVE-2005-0623 2016-10-18 12:13 2005-03-1 Show GitHub Exploit DB Packet Storm
349010 - demof forumwa Multiple cross-site scripting (XSS) vulnerabilities in Forumwa 1.0 allow remote attackers to inject arbitrary web script or HTML via (1) the keyword parameter in search.php or the (2) body or (3) sub… NVD-CWE-Other
CVE-2005-0628 2016-10-18 12:13 2005-03-1 Show GitHub Exploit DB Packet Storm