Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 23, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4961 10 緊急
Network 		Peerigon angular-expressions Peerigonのangular-expressionsにおけるEval インジェクションに関する脆弱性 CWE-95
Evalインジェクション 		CVE-2026-44643 2026-05-15 10:57 2026-05-11 Show GitHub Exploit DB Packet Storm
4962 7.7 重要
Network 		Grav CMS grav Grav CMSのgravにおける情報漏えいに関する脆弱性 CWE-200
CWE-noinfo
CVE-2026-44738 2026-05-15 10:57 2026-05-11 Show GitHub Exploit DB Packet Storm
4963 5.5 警告
Local 		jqlang jq jqlangのjqにおける再帰制御に関する脆弱性 CWE-674
不適切な再帰制御 		CVE-2026-44777 2026-05-15 10:57 2026-05-11 Show GitHub Exploit DB Packet Storm
4964 4.2 警告
Network 		OpenClaw OpenClaw OpenClawにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-44991 2026-05-15 10:57 2026-05-11 Show GitHub Exploit DB Packet Storm
4965 5 警告
Local 		OpenClaw OpenClaw OpenClawにおけるフィルタリングの回避に関する脆弱性 CWE-441
フィルタリング回避 		CVE-2026-44992 2026-05-15 10:57 2026-05-11 Show GitHub Exploit DB Packet Storm
4966 5.4 警告
Network 		OpenClaw OpenClaw OpenClawにおける不完全なブラックリストに関する脆弱性 CWE-184
不完全なブラックリスト 		CVE-2026-44993 2026-05-15 10:57 2026-05-11 Show GitHub Exploit DB Packet Storm
4967 5.3 警告
Network 		OpenClaw OpenClaw OpenClawにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-44994 2026-05-15 10:57 2026-05-11 Show GitHub Exploit DB Packet Storm
4968 7.3 重要
Local 		OpenClaw OpenClaw OpenClawにおける信頼できない制御領域からの機能の組み込みに関する脆弱性 CWE-829
信頼性のない制御領域からの機能の組み込み 		CVE-2026-44995 2026-05-15 10:57 2026-05-11 Show GitHub Exploit DB Packet Storm
4969 3.7 低
Network 		OpenClaw OpenClaw OpenClawにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-44996 2026-05-15 10:57 2026-05-11 Show GitHub Exploit DB Packet Storm
4970 4.3 警告
Network 		OpenClaw OpenClaw OpenClawにおける不適切な権限設定に関する脆弱性 CWE-266
不適切な権限設定 		CVE-2026-44997 2026-05-15 10:56 2026-05-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 23, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313601 - - - Statmatic is a Laravel and Git powered content management system (CMS). Prior to version 5.17.0, assets uploaded with appropriately crafted filenames may result in them being placed in a location dif… CWE-22
Path Traversal 		CVE-2024-52600 2024-11-20 02:15 2024-11-20 Show GitHub Exploit DB Packet Storm
313602 4.3 MEDIUM
Network 		janeczku calibre-web A vulnerability in janeczku/calibre-web allows unauthorized users to view the names of private shelves belonging to other users. This issue occurs in the file shelf.py at line 221, where the name of … CWE-209
Information Exposure Through an Error Message 		CVE-2021-3986 2024-11-20 02:12 2024-11-15 Show GitHub Exploit DB Packet Storm
313603 9.8 CRITICAL
Network 		dompdf_project dompdf An improper restriction of external entities (XXE) vulnerability in dompdf/dompdf's SVG parser allows for Server-Side Request Forgery (SSRF) and deserialization attacks. This issue affects all versio… CWE-611
XXE 		CVE-2021-3902 2024-11-20 02:12 2024-11-15 Show GitHub Exploit DB Packet Storm
313604 5.4 MEDIUM
Network 		sylius sylius sylius/sylius versions prior to 1.9.10, 1.10.11, and 1.11.2 are vulnerable to stored cross-site scripting (XSS) through SVG files. This vulnerability allows attackers to inject malicious scripts that… CWE-79
Cross-site Scripting 		CVE-2021-3841 2024-11-20 02:11 2024-11-15 Show GitHub Exploit DB Packet Storm
313605 9.8 CRITICAL
Network 		dompdf_project dompdf DomPDF before version 2.0.0 is vulnerable to PHAR deserialization due to a lack of checking on the protocol before passing it into the file_get_contents() function. An attacker who can upload files o… CWE-502
 Deserialization of Untrusted Data 		CVE-2021-3838 2024-11-20 02:11 2024-11-15 Show GitHub Exploit DB Packet Storm
313606 8.8 HIGH
Network 		chatwoot chatwoot A Server-Side Request Forgery (SSRF) vulnerability was discovered in chatwoot/chatwoot, affecting all versions prior to 2.5.0. The vulnerability allows an attacker to upload an SVG file containing a … CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2021-3742 2024-11-20 02:10 2024-11-15 Show GitHub Exploit DB Packet Storm
313607 8.8 HIGH
Network 		vanquish user_extra_fields The WordPress User Extra Fields plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the ajax_save_fields() function in all versions up to, and including, 1… CWE-862
 Missing Authorization 		CVE-2024-10800 2024-11-20 02:08 2024-11-13 Show GitHub Exploit DB Packet Storm
313608 5.4 MEDIUM
Network 		chatwoot chatwoot A stored cross-site scripting (XSS) vulnerability was discovered in chatwoot/chatwoot, affecting all versions prior to 2.6. The vulnerability occurs when a user uploads an SVG file containing a malic… CWE-79
Cross-site Scripting 		CVE-2021-3741 2024-11-20 02:07 2024-11-15 Show GitHub Exploit DB Packet Storm
313609 5.7 MEDIUM
Network 		wpdeveloper essential_addons_for_elementor The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, … NVD-CWE-noinfo
CVE-2024-8979 2024-11-20 02:05 2024-11-15 Show GitHub Exploit DB Packet Storm
313610 5.7 MEDIUM
Network 		wpdeveloper essential_addons_for_elementor The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, … NVD-CWE-noinfo
CVE-2024-8978 2024-11-20 02:04 2024-11-15 Show GitHub Exploit DB Packet Storm