Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 9, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
4011	5.4	警告 Network	OpenClaw	OpenClaw	OpenClawにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-41381	2026-05-7 12:04	2026-04-28	Show	GitHub Exploit DB Packet Storm

4012	5.4	警告 Network	OpenClaw	OpenClaw	OpenClawにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-41382	2026-05-7 12:04	2026-04-28	Show	GitHub Exploit DB Packet Storm

4013	8.1	重要 Network	OpenClaw	OpenClaw	OpenClawにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-41383	2026-05-7 12:04	2026-04-28	Show	GitHub Exploit DB Packet Storm

4014	7.8	重要 Local	OpenClaw	OpenClaw	OpenClawにおけるシステム構成または設定の外部制御に関する脆弱性	CWE-15 システム構成または設定の外部制御	CVE-2026-41384	2026-05-7 12:04	2026-04-28	Show	GitHub Exploit DB Packet Storm

4015	6.5	警告 Network	OpenClaw	OpenClaw	OpenClawにおける重要な情報の平文保存に関する脆弱性	CWE-312 重要な情報の平文保存	CVE-2026-41385	2026-05-7 12:04	2026-04-28	Show	GitHub Exploit DB Packet Storm

4016	9.8	緊急 Network	OpenClaw	OpenClaw	OpenClawにおける特権 API の不適切な使用に関する脆弱性	CWE-648 特権 API の不適切な使用	CVE-2026-41386	2026-05-7 12:04	2026-04-28	Show	GitHub Exploit DB Packet Storm

4017	6.5	警告 Network	Wazuh Inc.	Wazuh	Wazuh Inc.のWazuhにおける複数の脆弱性	CWE-124 CWE-191	CVE-2026-41499	2026-05-7 12:04	2026-04-29	Show	GitHub Exploit DB Packet Storm

4018	7.7	重要 Network	getoutline	outline	getoutlineのoutlineにおけるユーザ制御の鍵による認証回避に関する脆弱性	CWE-639 ユーザ制御の鍵による認証回避	CVE-2026-41649	2026-05-7 12:04	2026-04-28	Show	GitHub Exploit DB Packet Storm

4019	7.5	重要 Network	PostgreSQL.org	PostgreSQL JDBC ドライバ	PostgreSQL.orgのPostgreSQL JDBC ドライバにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-42198	2026-05-7 12:04	2026-04-29	Show	GitHub Exploit DB Packet Storm

4020	8.1	重要 Network	FreeBSD	FreeBSD	FreeBSDにおける引用構文の無害化に関する脆弱性	CWE-149 引用構文の不適切な無害化	CVE-2026-42511	2026-05-7 12:04	2026-04-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
313791	7.5	HIGH Network	chimurai	http-proxy-middleware	Versions of the package http-proxy-middleware before 2.0.7, from 3.0.0 and before 3.0.3 are vulnerable to Denial of Service (DoS) due to an UnhandledPromiseRejection error thrown by micromatch. An at…	NVD-CWE-noinfo	CVE-2024-21536	2024-11-2 03:03	2024-10-19	Show	GitHub Exploit DB Packet Storm

313792	6.5	MEDIUM Network	cisco	firepower_management_center	A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an authenticated, remote at…	CWE-22 Path Traversal	CVE-2024-20379	2024-11-2 03:02	2024-10-24	Show	GitHub Exploit DB Packet Storm

313793	6.5	MEDIUM Network	cisco	secure_firewall_management_center	A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an authenticated, remote at…	CWE-89 SQL Injection	CVE-2024-20340	2024-11-2 02:40	2024-10-24	Show	GitHub Exploit DB Packet Storm

313794	-		-	-	Phpgurukul Teachers Record Management System v2.1 is vulnerable to SQL Injection in add-teacher.php via the mobile number or email parameter.	-	CVE-2024-51063	2024-11-2 02:35	2024-11-1	Show	GitHub Exploit DB Packet Storm

313795	-		-	-	Projectworlds Online Admission System v1 is vulnerable to SQL Injection in index.php via the 'a_id' parameter.	-	CVE-2024-51060	2024-11-2 02:35	2024-11-1	Show	GitHub Exploit DB Packet Storm

313796	5.9	MEDIUM Network	cisco	adaptive_security_appliance_software firepower_threat_defense_software	A vulnerability in the session authentication functionality of the Remote Access SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software …	CWE-331 Insufficient Entropy	CVE-2024-20331	2024-11-2 02:32	2024-10-24	Show	GitHub Exploit DB Packet Storm

313797	5.4	MEDIUM Network	cisco	firepower_management_center	A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack ag…	CWE-79 Cross-site Scripting	CVE-2024-20377	2024-11-2 02:30	2024-10-24	Show	GitHub Exploit DB Packet Storm

313798	6.1	MEDIUM Network	maxfoundry	social_share_buttons	The WordPress Social Share Buttons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, …	CWE-79 Cross-site Scripting	CVE-2024-9219	2024-11-2 02:30	2024-10-19	Show	GitHub Exploit DB Packet Storm

313799	6.1	MEDIUM Network	cisco	adaptive_security_appliance_software firepower_threat_defense_software	A vulnerability in the VPN web client services feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote att…	CWE-79 Cross-site Scripting	CVE-2024-20341	2024-11-2 02:22	2024-10-24	Show	GitHub Exploit DB Packet Storm

313800	-		-	-	Zusam is a free and open-source way to self-host private forums. Prior to version 0.5.6, specially crafted SVG files uploaded to the service as images allow for unrestricted script execution on (raw)…	CWE-79 Cross-site Scripting	CVE-2024-51492	2024-11-2 02:15	2024-11-2	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed