Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
4691 2.5
Local
OpenClaw OpenClaw OpenClawにおけるTime-of-check Time-of-use (TOCTOU) 競合状態の脆弱性 CWE-367
Time-of-check Time-of-use (TOCTOU) 競合状態
CVE-2026-43529 2026-05-8 12:21 2026-05-5 Show GitHub Exploit DB Packet Storm
4692 7.7 重要
Network
OpenClaw OpenClaw OpenClawにおける不完全なブラックリストに関する脆弱性 CWE-184
不完全なブラックリスト
CVE-2026-43532 2026-05-8 12:21 2026-05-5 Show GitHub Exploit DB Packet Storm
4693 8.6 重要
Network
OpenClaw OpenClaw OpenClawにおける相対パストラバーサルの脆弱性 CWE-23
相対的パストラバーサル
CVE-2026-43533 2026-05-8 12:21 2026-05-5 Show GitHub Exploit DB Packet Storm
4694 9.8 緊急
Network
OpenClaw OpenClaw OpenClawにおけるデータの信頼性についての不十分な検証に関する脆弱性 CWE-345
データの信頼性についての不十分な検証
CVE-2026-43534 2026-05-8 12:21 2026-05-5 Show GitHub Exploit DB Packet Storm
4695 9.8 緊急
Network
OpenClaw OpenClaw OpenClawにおける不完全なブラックリストに関する脆弱性 CWE-184
不完全なブラックリスト
CVE-2026-43566 2026-05-8 12:21 2026-05-5 Show GitHub Exploit DB Packet Storm
4696 6.5 警告
Network
OpenClaw OpenClaw OpenClawにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如
CVE-2026-43567 2026-05-8 12:21 2026-05-5 Show GitHub Exploit DB Packet Storm
4697 6.5 警告
Network
OpenClaw OpenClaw OpenClawにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如
CVE-2026-43568 2026-05-8 12:21 2026-05-5 Show GitHub Exploit DB Packet Storm
4698 8.8 重要
Network
OpenClaw OpenClaw OpenClawにおける信頼できない制御領域からの機能の組み込みに関する脆弱性 CWE-829
信頼性のない制御領域からの機能の組み込み
CVE-2026-43569 2026-05-8 12:21 2026-05-5 Show GitHub Exploit DB Packet Storm
4699 7.5 重要
Network
Apache Software Foundation Apache Wicket Apache Software FoundationのApache Wicketにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい
CVE-2026-43646 2026-05-8 12:21 2026-05-6 Show GitHub Exploit DB Packet Storm
4700 5.3 警告
Network
Apache Software Foundation Apache Thrift Apache Software FoundationのApache Thriftにおける過剰なサイズ値のメモリ割り当てに関する脆弱性 CWE-789
過剰なサイズ値のメモリ割り当て
CVE-2026-43868 2026-05-8 12:21 2026-05-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314301 9.8 CRITICAL
Network
cozythemes hello_agency Missing Authorization vulnerability in CozyThemes Hello Agency allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Hello Agency: from n/a through 1.0.5. CWE-862
 Missing Authorization
CVE-2024-43341 2024-11-13 10:24 2024-11-2 Show GitHub Exploit DB Packet Storm
314302 8.8 HIGH
Network
enviragallery envira_gallery Missing Authorization vulnerability in Envira Gallery Team Envira Photo Gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Envira Photo Gallery: from n… CWE-862
 Missing Authorization
CVE-2024-43925 2024-11-13 10:23 2024-11-2 Show GitHub Exploit DB Packet Storm
314303 8.8 HIGH
Network
backupbliss clone Missing Authorization vulnerability in Migrate Clone allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Clone: from n/a through 2.4.5. CWE-862
 Missing Authorization
CVE-2024-43298 2024-11-13 10:19 2024-11-2 Show GitHub Exploit DB Packet Storm
314304 8.8 HIGH
Network
backupbliss clone Missing Authorization vulnerability in Migrate Clone allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Clone: from n/a through 2.4.5. CWE-862
 Missing Authorization
CVE-2024-43297 2024-11-13 10:19 2024-11-2 Show GitHub Exploit DB Packet Storm
314305 8.8 HIGH
Network
bplugins html5_video_player Missing Authorization vulnerability in bPlugins LLC Flash & HTML5 Video allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flash & HTML5 Video: from n/a throug… CWE-862
 Missing Authorization
CVE-2024-43296 2024-11-13 10:19 2024-11-2 Show GitHub Exploit DB Packet Storm
314306 8.8 HIGH
Network
wpzoom recipe_card_blocks_for_gutenberg_\&_elementor Missing Authorization vulnerability in WPZOOM Recipe Card Blocks for Gutenberg & Elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Recipe Card Block… CWE-862
 Missing Authorization
CVE-2024-43293 2024-11-13 10:19 2024-11-2 Show GitHub Exploit DB Packet Storm
314307 8.8 HIGH
Network
fontsplugin fonts Missing Authorization vulnerability in Fonts Plugin Fonts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fonts: from n/a through 3.7.7. CWE-862
 Missing Authorization
CVE-2024-43302 2024-11-13 10:18 2024-11-2 Show GitHub Exploit DB Packet Storm
314308 8.8 HIGH
Network
ukrsolution print_labels_with_barcodes Missing Authorization vulnerability in UkrSolution Print Barcode Labels for your WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Print Barcode L… CWE-862
 Missing Authorization
CVE-2024-43310 2024-11-13 10:15 2024-11-2 Show GitHub Exploit DB Packet Storm
314309 8.8 HIGH
Network
wpclever wpc_frequently_bought_together_for_woocommerce Missing Authorization vulnerability in WPClever WPC Frequently Bought Together for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPC Frequentl… CWE-862
 Missing Authorization
CVE-2024-43312 2024-11-13 10:13 2024-11-2 Show GitHub Exploit DB Packet Storm
314310 5.8 MEDIUM
Network
combodo itop Combodo iTop is a simple, web based IT Service Management tool. Server, OS, DBMS, PHP, and iTop info (name, version and parameters) can be read by anyone having access to iTop URI. This issue has bee… NVD-CWE-noinfo
CVE-2024-32870 2024-11-13 10:07 2024-11-5 Show GitHub Exploit DB Packet Storm