Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 24, 2026, 4:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
521	7.1	重要 Network	OpenClaw	OpenClaw	OpenClawにおける認証情報の不十分な保護に関する脆弱性 New	CWE-522 認証情報の不十分な保護	CVE-2026-53840	2026-06-22 11:48	2026-06-16	Show	GitHub Exploit DB Packet Storm

522	6.1	警告 Network	OpenClaw	OpenClaw	OpenClawにおけるWeb ページの属性に対するスクリプトの不適切な無害化に関する脆弱性 New	CWE-83 Web ページの属性に対するスクリプトの不適切な無害化	CVE-2026-53841	2026-06-22 11:48	2026-06-16	Show	GitHub Exploit DB Packet Storm

523	7.1	重要 Local	OpenClaw	OpenClaw	OpenClawにおける信頼できない検索パスに関する脆弱性 New	CWE-426 信頼性のない検索パス	CVE-2026-53842	2026-06-22 11:48	2026-06-16	Show	GitHub Exploit DB Packet Storm

524	8.8	重要 Network	OpenClaw	OpenClaw	OpenClawにおけるセッション期限に関する脆弱性 New	CWE-613 不適切なセッション期限	CVE-2026-53843	2026-06-22 11:48	2026-06-16	Show	GitHub Exploit DB Packet Storm

525	6.5	警告 Network	OpenClaw	OpenClaw	OpenClawにおける認証の欠如に関する脆弱性 New	CWE-862 認証の欠如	CVE-2026-53844	2026-06-22 11:48	2026-06-16	Show	GitHub Exploit DB Packet Storm

526	4.3	警告 Network	OpenClaw	OpenClaw	OpenClawにおける保護メカニズムの不具合に関する脆弱性 New	CWE-693 保護メカニズムの不具合	CVE-2026-53845	2026-06-22 11:48	2026-06-16	Show	GitHub Exploit DB Packet Storm

527	7.1	重要 Local	OpenClaw	OpenClaw	OpenClawにおける信頼できない検索パスに関する脆弱性 New	CWE-426 信頼性のない検索パス	CVE-2026-53846	2026-06-22 11:48	2026-06-16	Show	GitHub Exploit DB Packet Storm

528	5.4	警告 Network	OpenClaw	OpenClaw	OpenClawにおける不適切な権限設定に関する脆弱性 New	CWE-266 不適切な権限設定	CVE-2026-53847	2026-06-22 11:48	2026-06-16	Show	GitHub Exploit DB Packet Storm

529	4.3	警告 Network	OpenClaw	OpenClaw	OpenClawにおける不完全なブラックリストに関する脆弱性 New	CWE-184 不完全なブラックリスト	CVE-2026-53848	2026-06-22 11:48	2026-06-16	Show	GitHub Exploit DB Packet Storm

530	8.1	重要 Network	OpenClaw	OpenClaw	OpenClawにおけるスプーフィングによる認証回避に関する脆弱性 New	CWE-290 スプーフィングによる認証回避	CVE-2026-53849	2026-06-22 11:48	2026-06-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 24, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
256421	7.5	HIGH Network	php	php	The _zval_get_long_func_ex in Zend/zend_operators.c in PHP 7.1.2 allows attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted use of "declare(ticks=" in …	CWE-476 NULL Pointer Dereference	CVE-2017-6441	2024-11-21 12:29	2017-04-3	Show	GitHub Exploit DB Packet Storm

256422	7.8	HIGH Local	radare	radare2	The relocs function in libr/bin/p/bin_bflt.c in radare2 1.2.1 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified othe…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-6194	2024-11-21 12:29	2017-04-3	Show	GitHub Exploit DB Packet Storm

256423	7.5	HIGH Network	ruby-lang	ruby	The parse_char_class function in regparse.c in the Onigmo (aka Oniguruma-mod) regular expression library, as used in Ruby 2.4.0, allows remote attackers to cause a denial of service (deep recursion a…	CWE-20 Improper Input Validation	CVE-2017-6181	2024-11-21 12:29	2017-04-3	Show	GitHub Exploit DB Packet Storm

256424	8.1	HIGH Network	sophos	web_appliance	In Sophos Web Appliance (SWA) before 4.3.1.2, Session Fixation could occur, aka NSWA-1310.	CWE-384 Session Fixation	CVE-2017-6412	2024-11-21 12:29	2017-03-31	Show	GitHub Exploit DB Packet Storm

256425	4.7	MEDIUM Network	sophos	web_appliance	In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's interface responsible for generating reports was vulnerable to remote command injection via the token parameter, aka NSWA-1303.	CWE-77 Command Injection	CVE-2017-6184	2024-11-21 12:29	2017-03-31	Show	GitHub Exploit DB Packet Storm

256426	7.2	HIGH Network	sophos	web_appliance	In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's configuration utilities for adding (and detecting) Active Directory servers was vulnerable to remote command injection, aka NS…	CWE-77 Command Injection	CVE-2017-6183	2024-11-21 12:29	2017-03-31	Show	GitHub Exploit DB Packet Storm

256427	9.8	CRITICAL Network	sophos	web_appliance	In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's interface responsible for generating reports was vulnerable to remote command injection via functions, aka NSWA-1304.	CWE-78 OS Command	CVE-2017-6182	2024-11-21 12:29	2017-03-31	Show	GitHub Exploit DB Packet Storm

256428	9.8	CRITICAL Network	putty opensuse_project opensuse	putty leap	The ssh_agent_channel_data function in PuTTY before 0.68 allows remote attackers to have unspecified impact via a large length value in an agent protocol message and leveraging the ability to connect…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-6542	2024-11-21 12:29	2017-03-28	Show	GitHub Exploit DB Packet Storm

256429	6.5	MEDIUM Network	ntp	ntp	NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote attackers to cause a denial of service (ntpd crash) via a malformed mode configuration directive.	CWE-20 Improper Input Validation	CVE-2017-6464	2024-11-21 12:29	2017-03-28	Show	GitHub Exploit DB Packet Storm

256430	6.5	MEDIUM Network	ntp	ntp	NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote authenticated users to cause a denial of service (daemon crash) via an invalid setting in a :config directive, related to the unpeer option.	CWE-20 Improper Input Validation	CVE-2017-6463	2024-11-21 12:29	2017-03-28	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed