Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
5261 5.4 警告
Network 		OpenClaw OpenClaw OpenClawにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-44998 2026-05-15 10:56 2026-05-11 Show GitHub Exploit DB Packet Storm
5262 5.3 警告
Network 		OpenClaw OpenClaw OpenClawにおけるデータの信頼性についての不十分な検証に関する脆弱性 CWE-345
データの信頼性についての不十分な検証 		CVE-2026-44999 2026-05-15 10:56 2026-05-11 Show GitHub Exploit DB Packet Storm
5263 5 警告
Network 		OpenClaw OpenClaw OpenClawにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-45000 2026-05-15 10:56 2026-05-11 Show GitHub Exploit DB Packet Storm
5264 7.1 重要
Network 		OpenClaw OpenClaw OpenClawにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-45001 2026-05-15 10:56 2026-05-11 Show GitHub Exploit DB Packet Storm
5265 5.3 警告
Network 		OpenClaw OpenClaw OpenClawにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-45002 2026-05-15 10:56 2026-05-11 Show GitHub Exploit DB Packet Storm
5266 5 警告
Local 		OpenClaw OpenClaw OpenClawにおけるフィルタリングの回避に関する脆弱性 CWE-441
フィルタリング回避 		CVE-2026-45003 2026-05-15 10:56 2026-05-11 Show GitHub Exploit DB Packet Storm
5267 7.8 重要
Local 		OpenClaw OpenClaw OpenClawにおける制御されていない検索パスの要素に関する脆弱性 CWE-427
制御されていない検索パスの要素 		CVE-2026-45004 2026-05-15 10:56 2026-05-11 Show GitHub Exploit DB Packet Storm
5268 6 警告
Network 		OpenClaw OpenClaw OpenClawにおける有効期限後または解放後のリソースの操作に関する脆弱性 CWE-672
有効期限後または解放後のリソースの操作 		CVE-2026-45005 2026-05-15 10:56 2026-05-11 Show GitHub Exploit DB Packet Storm
5269 8.8 重要
Network 		OpenClaw OpenClaw OpenClawにおける不完全なブラックリストに関する脆弱性 CWE-184
不完全なブラックリスト 		CVE-2026-45006 2026-05-15 10:56 2026-05-11 Show GitHub Exploit DB Packet Storm
5270 7.5 重要
Network 		protobufjs project protobufjs protobufjs projectのprotobufjsにおける再帰制御に関する脆弱性 CWE-674
不適切な再帰制御 		CVE-2026-45740 2026-05-15 10:56 2026-05-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1481 4.7 MEDIUM
Local 		- - dhcpcd through 10.3.2, fixed in commit 78ea09e, contains a heap use-after-free vulnerability in the control socket handling within src/control.c that allows local unprivileged attackers to trigger me… New CWE-416
 Use After Free 		CVE-2026-56117 2026-06-25 00:16 2026-06-24 Show GitHub Exploit DB Packet Storm
1482 5.3 MEDIUM
Adjacent 		- - dhcpcd through 10.3.2, fixed in commit 2f00c7b, contains a one-byte stack out-of-bounds write vulnerability in dhcp6_makemessage() in src/dhcp6.c that allows unauthenticated same-link attackers to wr… New CWE-787
 Out-of-bounds Write 		CVE-2026-56114 2026-06-25 00:16 2026-06-24 Show GitHub Exploit DB Packet Storm
1483 5.2 MEDIUM
Local 		- - Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to 2.8.1, when fetch() was called, Deno checked the destination hostname against --deny-net rules but did not re-check the IP addresse… New CWE-693
CWE-918
 Protection Mechanism Failure
Server-Side Request Forgery (SSRF)  		CVE-2026-49859 2026-06-25 00:16 2026-06-24 Show GitHub Exploit DB Packet Storm
1484 9.9 CRITICAL
Network 		n8n n8n n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an authenticated user with permission to create or modify workflows could achieve global prototype pollution… New CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') 		CVE-2026-44789 2026-06-25 00:16 2026-06-24 Show GitHub Exploit DB Packet Storm
1485 3.3 LOW
Local 		imagemagick imagemagick ImageMagick before 7.1.2-15 and 6.9.13-40 contains a heap use-after-free in the meta coder: when memory allocation fails, a single byte is written to a stale pointer. Remote attackers can trigger it … CWE-416
 Use After Free 		CVE-2026-56376 2026-06-24 23:41 2026-06-23 Show GitHub Exploit DB Packet Storm
1486 5.5 MEDIUM
Local 		imagemagick imagemagick ImageMagick before 7.1.2-15 and 6.9.13-40 contains a command injection vulnerability in the SVG decoder that allows attackers to inject arbitrary MVG drawing commands. Attackers can craft malicious S… CWE-116
 Improper Encoding or Escaping of Output 		CVE-2026-56379 2026-06-24 23:37 2026-06-23 Show GitHub Exploit DB Packet Storm
1487 4.2 MEDIUM
Network 		- - Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. Prior to 0.186, a sandbox volume reference (volumeId, which may also be a volume name) was … CWE-22
CWE-250
CWE-269
Path Traversal
 Execution with Unnecessary Privileges
 Improper Privilege Management 		CVE-2026-54319 2026-06-24 23:17 2026-06-24 Show GitHub Exploit DB Packet Storm
1488 7.1 HIGH
Local 		- - Home Assistant is open source home automation software that puts local control and privacy first. Prior to 2026.5.3, the LocationSensorManager BroadcastReceiver is exported with no permission. Any in… CWE-926
 Improper Export of Android Application Components 		CVE-2026-54318 2026-06-24 23:17 2026-06-24 Show GitHub Exploit DB Packet Storm
1489 - - - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. - CVE-2026-29034 2026-06-24 23:17 2026-06-24 Show GitHub Exploit DB Packet Storm
1490 9.9 CRITICAL
Network 		n8n n8n n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an authenticated user with permission to create or modify workflows could bypass the patch for CVE-2026-4223… CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') 		CVE-2026-44791 2026-06-24 22:57 2026-06-24 Show GitHub Exploit DB Packet Storm