Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 20, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
4971	8.8	重要 Network	OpenClaw	OpenClaw	OpenClawにおけるシステム構成または設定の外部制御に関する脆弱性	CWE-15 システム構成または設定の外部制御	CVE-2026-43531	2026-05-11 10:56	2026-05-5	Show	GitHub Exploit DB Packet Storm

4972	8.1	重要 Network	OpenClaw	OpenClaw	OpenClawにおける不適切な権限設定に関する脆弱性	CWE-266 不適切な権限設定	CVE-2026-43535	2026-05-11 10:56	2026-05-5	Show	GitHub Exploit DB Packet Storm

4973	6.5	警告 Network	OpenClaw	OpenClaw	OpenClawにおけるUNIX Symbolic Link のフォローに関する脆弱性	CWE-61 UNIX Symbolic Link のフォロー	CVE-2026-43570	2026-05-11 10:56	2026-05-5	Show	GitHub Exploit DB Packet Storm

4974	8.8	重要 Network	OpenClaw	OpenClaw	OpenClawにおける信頼できない制御領域からの機能の組み込みに関する脆弱性	CWE-829 信頼性のない制御領域からの機能の組み込み	CVE-2026-43571	2026-05-11 10:56	2026-05-5	Show	GitHub Exploit DB Packet Storm

4975	5.3	警告 Network	OpenClaw	OpenClaw	OpenClawにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-43572	2026-05-11 10:56	2026-05-5	Show	GitHub Exploit DB Packet Storm

4976	7.7	重要 Network	OpenClaw	OpenClaw	OpenClawにおける複数の脆弱性	CWE-862 CWE-918 CWE-918	CVE-2026-43573	2026-05-11 10:56	2026-05-5	Show	GitHub Exploit DB Packet Storm

4977	6.5	警告 Network	OpenClaw	OpenClaw	OpenClawにおける許容された入力値の許可リストに関する脆弱性	CWE-183 許容された入力値の許可リスト	CVE-2026-43574	2026-05-11 10:56	2026-05-5	Show	GitHub Exploit DB Packet Storm

4978	9.8	緊急 Network	OpenClaw	OpenClaw	OpenClawにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-43575	2026-05-11 10:56	2026-05-6	Show	GitHub Exploit DB Packet Storm

4979	7.7	重要 Network	OpenClaw	OpenClaw	OpenClawにおける複数の脆弱性	CWE-601 CWE-918	CVE-2026-43576	2026-05-11 10:56	2026-05-6	Show	GitHub Exploit DB Packet Storm

4980	6.5	警告 Network	OpenClaw	OpenClaw	OpenClawにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-43577	2026-05-11 10:56	2026-05-6	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
355061	-	vmware	workstation player ace server fusion esxi esx	VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x before 2.5.4 build 246459; VMware ACE 2.5.x before 2.5.4 build 246459; VMware Server 2.x before 2.0.2 build 203…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2010-1142	2013-05-15 12:07	2010-04-13	Show	GitHub Exploit DB Packet Storm

355062	-	apple	cups	The _cupsGetlang function, as used by lppasswd.c in lppasswd in CUPS 1.2.2, 1.3.7, 1.3.9, and 1.4.1, relies on an environment variable to determine the file that provides localized message strings, w…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2010-0393	2013-05-15 12:06	2010-03-6	Show	GitHub Exploit DB Packet Storm

355063	-	oracle	sun_products_suite	Unspecified vulnerability in the Sun Java System Communications Express component in Oracle Sun Product Suite 6 2005Q4 (6.2) and and 6.3 allows remote authenticated users to affect confidentiality vi…	NVD-CWE-noinfo	CVE-2010-0885	2013-02-8 14:00	2010-04-14	Show	GitHub Exploit DB Packet Storm

355064	-	ibm symantec	lotus_notes brightmail_gateway data_loss_prevention_detection_servers data_loss_prevention_endpoint_agents im_manager_2007 mail_security	Integer overflow in kvolefio.dll 8.5.0.8339 and 10.5.0.0 in the Autonomy KeyView Filter SDK, as used in IBM Lotus Notes 8.5, Symantec Mail Security for Microsoft Exchange 5.0.10 through 5.0.13, and o…	CWE-189 Numeric Errors	CVE-2009-3032	2013-02-7 13:21	2010-03-6	Show	GitHub Exploit DB Packet Storm

355065	-	symantec	im_manager	Cross-site scripting (XSS) vulnerability in the console in Symantec IM Manager 8.3 and 8.4 before 8.4.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2009-3036	2013-02-7 13:21	2010-02-24	Show	GitHub Exploit DB Packet Storm

355066	-	oracle	mojarra	Oracle Mojarra 1.2_14 and 2.0.2, as used in IBM WebSphere Application Server, Caucho Resin, and other applications, does not properly handle an unencrypted view state, which allows remote attackers t…	CWE-79 Cross-site Scripting	CVE-2010-2087	2013-01-28 14:00	2010-05-28	Show	GitHub Exploit DB Packet Storm

355067	-	mybb	mybb	Multiple unspecified vulnerabilities in MyBulletinBoard (MyBB) before 1.0.2 have unspecified impact and attack vectors, related to (1) admin/moderate.php, (2) admin/themes.php, (3) inc/functions.php,…	NVD-CWE-noinfo	CVE-2006-0218	2013-01-3 14:00	2006-01-17	Show	GitHub Exploit DB Packet Storm

355068	-	invisionpower	invision_power_board	The make_password function in ipsclass.php in Invision Power Board (IPB) 2.1.4 uses random data generated from partially predictable seeds to create the authentication code that is sent by e-mail to …	CWE-287 Improper Authentication	CVE-2006-0633	2013-01-3 14:00	2006-02-10	Show	GitHub Exploit DB Packet Storm

355069	-	zen-cart	zen_cart	Zen Cart before 1.2.7 does not protect the admin/includes directory, which allows remote attackers to cause unknown impact via unspecified vectors, probably direct requests.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2006-0697	2013-01-3 14:00	2006-02-15	Show	GitHub Exploit DB Packet Storm

355070	-	e107	e107	Incomplete blacklist vulnerability in usersettings.php in e107 0.7.20 and earlier allows remote attackers to conduct SQL injection attacks via the loginname parameter.	NVD-CWE-Other	CVE-2010-2098	2012-12-13 13:00	2010-05-28	Show	GitHub Exploit DB Packet Storm