Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 13, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
4531	6.5	警告 Network	OpenClaw	OpenClaw	OpenClawにおける保存または転送前の重要な情報の削除に関する脆弱性	CWE-212 保存または転送前の重要な情報の不適切な削除	CVE-2026-43528	2026-05-8 12:21	2026-05-5	Show	GitHub Exploit DB Packet Storm

4532	2.5	低 Local	OpenClaw	OpenClaw	OpenClawにおけるTime-of-check Time-of-use (TOCTOU) 競合状態の脆弱性	CWE-367 Time-of-check Time-of-use (TOCTOU) 競合状態	CVE-2026-43529	2026-05-8 12:21	2026-05-5	Show	GitHub Exploit DB Packet Storm

4533	7.7	重要 Network	OpenClaw	OpenClaw	OpenClawにおける不完全なブラックリストに関する脆弱性	CWE-184 不完全なブラックリスト	CVE-2026-43532	2026-05-8 12:21	2026-05-5	Show	GitHub Exploit DB Packet Storm

4534	8.6	重要 Network	OpenClaw	OpenClaw	OpenClawにおける相対パストラバーサルの脆弱性	CWE-23 相対的パストラバーサル	CVE-2026-43533	2026-05-8 12:21	2026-05-5	Show	GitHub Exploit DB Packet Storm

4535	9.8	緊急 Network	OpenClaw	OpenClaw	OpenClawにおけるデータの信頼性についての不十分な検証に関する脆弱性	CWE-345 データの信頼性についての不十分な検証	CVE-2026-43534	2026-05-8 12:21	2026-05-5	Show	GitHub Exploit DB Packet Storm

4536	9.8	緊急 Network	OpenClaw	OpenClaw	OpenClawにおける不完全なブラックリストに関する脆弱性	CWE-184 不完全なブラックリスト	CVE-2026-43566	2026-05-8 12:21	2026-05-5	Show	GitHub Exploit DB Packet Storm

4537	6.5	警告 Network	OpenClaw	OpenClaw	OpenClawにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-43567	2026-05-8 12:21	2026-05-5	Show	GitHub Exploit DB Packet Storm

4538	6.5	警告 Network	OpenClaw	OpenClaw	OpenClawにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-43568	2026-05-8 12:21	2026-05-5	Show	GitHub Exploit DB Packet Storm

4539	8.8	重要 Network	OpenClaw	OpenClaw	OpenClawにおける信頼できない制御領域からの機能の組み込みに関する脆弱性	CWE-829 信頼性のない制御領域からの機能の組み込み	CVE-2026-43569	2026-05-8 12:21	2026-05-5	Show	GitHub Exploit DB Packet Storm

4540	7.5	重要 Network	Apache Software Foundation	Apache Wicket	Apache Software FoundationのApache Wicketにおける情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2026-43646	2026-05-8 12:21	2026-05-6	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
314851	5.5	MEDIUM Local	huawei	harmonyos	Vulnerability of input parameters not being verified in the HDC module Impact: Successful exploitation of this vulnerability may affect availability.	NVD-CWE-noinfo	CVE-2024-51519	2024-11-7 08:15	2024-11-5	Show	GitHub Exploit DB Packet Storm

314852	7.5	HIGH Network	huawei	harmonyos	Vulnerability of message types not being verified in the advanced messaging modul Impact: Successful exploitation of this vulnerability may affect availability.	NVD-CWE-noinfo	CVE-2024-51518	2024-11-7 08:15	2024-11-5	Show	GitHub Exploit DB Packet Storm

314853	5.5	MEDIUM Local	huawei	harmonyos	Vulnerability of improper memory access in the phone service module Impact: Successful exploitation of this vulnerability may affect availability.	CWE-129 Improper Validation of Array Index	CVE-2024-51517	2024-11-7 08:15	2024-11-5	Show	GitHub Exploit DB Packet Storm

314854	8.8	HIGH Network	darkmysite	darkmysite	Cross-Site Request Forgery (CSRF) vulnerability in DarkMySite DarkMySite – Advanced Dark Mode Plugin for WordPress darkmysite allows Cross Site Request Forgery.This issue affects DarkMySite – Advance…	CWE-352 Origin Validation Error	CVE-2024-50466	2024-11-7 08:13	2024-10-30	Show	GitHub Exploit DB Packet Storm

314855	5.3	MEDIUM Network	openjsf	express	A vulnerability has been identified in the Express response.links function, allowing for arbitrary resource injection in the Link header when unsanitized data is used. The issue arises from improper…	NVD-CWE-noinfo	CVE-2024-10491	2024-11-7 08:08	2024-10-30	Show	GitHub Exploit DB Packet Storm

314856	5.4	MEDIUM Network	joshlobe	ultimate_tinymce	The Ultimate TinyMCE plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'field' shortcode in all versions up to, and including, 5.7 due to insufficient input sanitization and o…	CWE-79 Cross-site Scripting	CVE-2024-8627	2024-11-7 08:06	2024-10-30	Show	GitHub Exploit DB Packet Storm

314857	5.5	MEDIUM Network	ibm	websphere_application_server	IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A privileged user could exploit this vulnerability to expose sens…	CWE-611 XXE	CVE-2024-45086	2024-11-7 08:04	2024-11-5	Show	GitHub Exploit DB Packet Storm

314858	5.4	MEDIUM Network	oracle	peoplesoft_enterprise_cost_center_common_application_objects	Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: Activity Guide Composer). The supported version that is affected is 9.2. Easily exp…	NVD-CWE-noinfo	CVE-2024-21264	2024-11-7 07:56	2024-10-16	Show	GitHub Exploit DB Packet Storm

314859	5.3	MEDIUM Network	oracle	installed_base	Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability a…	NVD-CWE-noinfo	CVE-2024-21258	2024-11-7 07:56	2024-10-16	Show	GitHub Exploit DB Packet Storm

314860	3.0	LOW Adjacent	oracle	hyperion_bi\+	Vulnerability in the Oracle Hyperion BI+ product of Oracle Hyperion (component: UI and Visualization). The supported version that is affected is 11.2.18.0.000. Easily exploitable vulnerability allo…	NVD-CWE-noinfo	CVE-2024-21257	2024-11-7 07:55	2024-10-16	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed