Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
471 8.1 重要
Network
OpenClaw OpenClaw OpenClawにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-41383 2026-05-7 12:04 2026-04-28 Show GitHub Exploit DB Packet Storm
472 7.8 重要
Local
OpenClaw OpenClaw OpenClawにおけるシステム構成または設定の外部制御に関する脆弱性 CWE-15
システム構成または設定の外部制御
CVE-2026-41384 2026-05-7 12:04 2026-04-28 Show GitHub Exploit DB Packet Storm
473 6.5 警告
Network
OpenClaw OpenClaw OpenClawにおける重要な情報の平文保存に関する脆弱性 CWE-312
重要な情報の平文保存
CVE-2026-41385 2026-05-7 12:04 2026-04-28 Show GitHub Exploit DB Packet Storm
474 9.8 緊急
Network
OpenClaw OpenClaw OpenClawにおける特権 API の不適切な使用に関する脆弱性 CWE-648
特権 API の不適切な使用
CVE-2026-41386 2026-05-7 12:04 2026-04-28 Show GitHub Exploit DB Packet Storm
475 6.5 警告
Network
Wazuh Inc. Wazuh Wazuh Inc.のWazuhにおける複数の脆弱性 CWE-124
CWE-191
CVE-2026-41499 2026-05-7 12:04 2026-04-29 Show GitHub Exploit DB Packet Storm
476 7.7 重要
Network
getoutline outline getoutlineのoutlineにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避
CVE-2026-41649 2026-05-7 12:04 2026-04-28 Show GitHub Exploit DB Packet Storm
477 7.5 重要
Network
PostgreSQL.org PostgreSQL JDBC ドライバ PostgreSQL.orgのPostgreSQL JDBC ドライバにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て
CVE-2026-42198 2026-05-7 12:04 2026-04-29 Show GitHub Exploit DB Packet Storm
478 8.1 重要
Network
FreeBSD FreeBSD FreeBSDにおける引用構文の無害化に関する脆弱性 CWE-149
引用構文の不適切な無害化
CVE-2026-42511 2026-05-7 12:04 2026-04-30 Show GitHub Exploit DB Packet Storm
479 8.1 重要
Network
FreeBSD FreeBSD FreeBSDにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー
CVE-2026-42512 2026-05-7 12:04 2026-04-30 Show GitHub Exploit DB Packet Storm
480 9.8 緊急
Network
Apache Software Foundation MINA Apache Software FoundationのMINAにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション
CVE-2026-42778 2026-05-7 12:04 2026-05-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
347061 - transmissionbt transmission Multiple stack-based buffer overflows in the tr_magnetParse function in libtransmission/magnet.c in Transmission 1.91 allow remote attackers to cause a denial of service (crash) or possibly execute a… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2010-1853 2010-05-11 13:00 2010-05-8 Show GitHub Exploit DB Packet Storm
347062 - php php The (1) sqlite_single_query and (2) sqlite_array_query functions in ext/sqlite/sqlite.c in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to execute arbitrary code by … CWE-94
Code Injection
CVE-2010-1868 2010-05-11 13:00 2010-05-8 Show GitHub Exploit DB Packet Storm
347063 - mega-nerd libsndfile The (1) htk_read_header, (2) alaw_init, (3) ulaw_init, (4) pcm_init, (5) float32_init, and (6) sds_read_header functions in libsndfile 1.0.20 allow context-dependent attackers to cause a denial of se… CWE-189
Numeric Errors
CVE-2009-4835 2010-05-11 13:00 2010-05-6 Show GitHub Exploit DB Packet Storm
347064 - phpscripte24 pay_per_watch_\&_bid_auktions_system Cross-site scripting (XSS) vulnerability in auktion.php in Pay Per Watch & Bid Auktions System allows remote attackers to inject arbitrary web script or HTML via the id_auk parameter, which is not pr… CWE-79
Cross-site Scripting
CVE-2010-1854 2010-05-10 13:00 2010-05-8 Show GitHub Exploit DB Packet Storm
347065 - realitymedias repairshop2 Cross-site scripting (XSS) vulnerability in index.php in RepairShop2 1.9.023 Trial, when magic_quotes_gpc is disabled, allows remote attackers to inject arbitrary web script or HTML via the prod para… CWE-79
Cross-site Scripting
CVE-2010-1856 2010-05-10 13:00 2010-05-8 Show GitHub Exploit DB Packet Storm
347066 - deluxebb deluxebb SQL injection vulnerability in newpost.php in DeluxeBB 1.3 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the membercookie cookie when a… CWE-89
SQL Injection
CVE-2010-1859 2010-05-10 13:00 2010-05-8 Show GitHub Exploit DB Packet Storm
347067 - php php The sysvshm extension for PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to write to arbitrary memory addresses by using an object's __sleep function to interrupt an … CWE-399
 Resource Management Errors
CVE-2010-1861 2010-05-10 13:00 2010-05-8 Show GitHub Exploit DB Packet Storm
347068 - clantiger clantiger SQL injection vulnerability in the shoutbox module (modules/shoutbox.php) in ClanTiger 1.1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the s_email parameter. CWE-89
SQL Injection
CVE-2010-1863 2010-05-10 13:00 2010-05-8 Show GitHub Exploit DB Packet Storm
347069 - festic semanticscuttle Multiple cross-site scripting (XSS) vulnerabilities in SemanticScuttle before 0.94.1 allow remote attackers to inject arbitrary web script or HTML via the sort parameter to index.php, and other unspe… CWE-79
Cross-site Scripting
CVE-2009-4852 2010-05-10 13:00 2010-05-8 Show GitHub Exploit DB Packet Storm
347070 - roshan_singh open_direct_connect_hub Stack-based buffer overflow in Open Direct Connect Hub (aka Open DC Hub or OpenDCHub) 0.8.1 allows remote authenticated users to execute arbitrary code via a long MyINFO message. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2010-1147 2010-05-8 14:57 2010-04-7 Show GitHub Exploit DB Packet Storm