Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 9, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
4271 6.5 警告
Network
OpenClaw OpenClaw OpenClawにおける重要な情報の平文保存に関する脆弱性 CWE-312
重要な情報の平文保存
CVE-2026-41385 2026-05-7 12:04 2026-04-28 Show GitHub Exploit DB Packet Storm
4272 9.8 緊急
Network
OpenClaw OpenClaw OpenClawにおける特権 API の不適切な使用に関する脆弱性 CWE-648
特権 API の不適切な使用
CVE-2026-41386 2026-05-7 12:04 2026-04-28 Show GitHub Exploit DB Packet Storm
4273 6.5 警告
Network
Wazuh Inc. Wazuh Wazuh Inc.のWazuhにおける複数の脆弱性 CWE-124
CWE-191
CVE-2026-41499 2026-05-7 12:04 2026-04-29 Show GitHub Exploit DB Packet Storm
4274 7.7 重要
Network
getoutline outline getoutlineのoutlineにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避
CVE-2026-41649 2026-05-7 12:04 2026-04-28 Show GitHub Exploit DB Packet Storm
4275 7.5 重要
Network
PostgreSQL.org PostgreSQL JDBC ドライバ PostgreSQL.orgのPostgreSQL JDBC ドライバにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て
CVE-2026-42198 2026-05-7 12:04 2026-04-29 Show GitHub Exploit DB Packet Storm
4276 8.1 重要
Network
FreeBSD FreeBSD FreeBSDにおける引用構文の無害化に関する脆弱性 CWE-149
引用構文の不適切な無害化
CVE-2026-42511 2026-05-7 12:04 2026-04-30 Show GitHub Exploit DB Packet Storm
4277 8.1 重要
Network
FreeBSD FreeBSD FreeBSDにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー
CVE-2026-42512 2026-05-7 12:04 2026-04-30 Show GitHub Exploit DB Packet Storm
4278 9.8 緊急
Network
Apache Software Foundation MINA Apache Software FoundationのMINAにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション
CVE-2026-42778 2026-05-7 12:04 2026-05-1 Show GitHub Exploit DB Packet Storm
4279 9.8 緊急
Network
Apache Software Foundation MINA Apache Software FoundationのMINAにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション
CVE-2026-42779 2026-05-7 12:04 2026-05-1 Show GitHub Exploit DB Packet Storm
4280 7.5 重要
Network
レッドハット
GNOME Project
gdk-pixbuf
Red Hat Enterprise Linux Server TUS
Red Hat Enterprise Linux Server AUS
Red Hat Enterprise Linux
GNOME Project等の複数ベンダの製品におけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー
CVE-2026-5201 2026-05-7 12:04 2026-03-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
571 8.2 HIGH
Network
- - Wow Viral Signups 2.1 WordPress plugin contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by exploiting the unescaped 'idsignup' POST parame… New CWE-89
SQL Injection
CVE-2017-20245 2026-06-9 22:51 2026-06-9 Show GitHub Exploit DB Packet Storm
572 8.2 HIGH
Network
- - KittyCatfish 2.2 plugin for WordPress contains an SQL injection vulnerability that allows unauthenticated attackers to read database contents by exploiting an unescaped GET parameter. Attackers can i… New CWE-89
SQL Injection
CVE-2017-20246 2026-06-9 22:51 2026-06-9 Show GitHub Exploit DB Packet Storm
573 8.2 HIGH
Network
- - WordPress Plugin PICA Photo Gallery 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the aid para… New CWE-89
SQL Injection
CVE-2017-20247 2026-06-9 22:51 2026-06-9 Show GitHub Exploit DB Packet Storm
574 7.5 HIGH
Network
- - Apptha Slider Gallery 1.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files by manipulating the imgname parameter. Attackers can send requests … New CWE-22
Path Traversal
CVE-2017-20248 2026-06-9 22:51 2026-06-9 Show GitHub Exploit DB Packet Storm
575 8.2 HIGH
Network
- - Apptha Slider Gallery 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the albid parameter. Attac… New CWE-89
SQL Injection
CVE-2017-20249 2026-06-9 22:51 2026-06-9 Show GitHub Exploit DB Packet Storm
576 7.5 HIGH
Network
- - Mac Photo Gallery 3.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files by manipulating the albid parameter. Attackers can send requests to mac… New CWE-22
Path Traversal
CVE-2017-20250 2026-06-9 22:51 2026-06-9 Show GitHub Exploit DB Packet Storm
577 9.8 CRITICAL
Network
- - WordPress Insert PHP plugin versions before 3.3.1 contain a PHP code injection vulnerability that allows unauthenticated attackers to execute arbitrary PHP code by injecting malicious shortcodes thro… New CWE-94
Code Injection
CVE-2017-20251 2026-06-9 22:51 2026-06-9 Show GitHub Exploit DB Packet Storm
578 - - - bz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught the resulting OSError and retried with the same decompressor, crafted input could cause the decompres… New CWE-121
Stack-based Buffer Overflow
CVE-2026-9669 2026-06-9 22:49 2026-06-9 Show GitHub Exploit DB Packet Storm
579 7.8 HIGH
Local
- - A YAML injection vulnerability exists in the Windows.Collectors.Remapping artifact of Rapid7 Velociraptor before version 0.76.6. The hostname field in client_info.json inside a collection ZIP is inse… New CWE-74
CWE-94
CWE-116
Injection
Code Injection
 Improper Encoding or Escaping of Output
CVE-2026-8795 2026-06-9 22:49 2026-06-9 Show GitHub Exploit DB Packet Storm
580 - - - A missing authorization vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to access unauthorized data or perform unauthorized actions. We hav… New CWE-862
 Missing Authorization
CVE-2026-26236 2026-06-9 22:49 2026-06-9 Show GitHub Exploit DB Packet Storm