Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 24, 2026, 4:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
541 5.4 警告
Network
OpenClaw OpenClaw OpenClawにおける複数の脆弱性 New CWE-807
CWE-863
CVE-2026-53860 2026-06-22 11:47 2026-06-16 Show GitHub Exploit DB Packet Storm
542 9.8 緊急
Network
OpenClaw OpenClaw OpenClawにおける不完全なブラックリストに関する脆弱性 New CWE-184
不完全なブラックリスト
CVE-2026-53861 2026-06-22 11:47 2026-06-16 Show GitHub Exploit DB Packet Storm
543 5.4 警告
Network
OpenClaw OpenClaw OpenClawにおける複数の脆弱性 New CWE-266
CWE-345
CVE-2026-53862 2026-06-22 11:47 2026-06-16 Show GitHub Exploit DB Packet Storm
544 6.5 警告
Network
OpenClaw OpenClaw OpenClawにおけるユーザ制御の鍵による認証回避に関する脆弱性 New CWE-639
ユーザ制御の鍵による認証回避
CVE-2026-53863 2026-06-22 11:47 2026-06-16 Show GitHub Exploit DB Packet Storm
545 8.1 重要
Network
OpenClaw OpenClaw OpenClawにおける不完全なブラックリストに関する脆弱性 New CWE-184
不完全なブラックリスト
CVE-2026-53864 2026-06-22 11:47 2026-06-16 Show GitHub Exploit DB Packet Storm
546 7.1 重要
Local
OpenClaw OpenClaw OpenClawにおける信頼できない検索パスに関する脆弱性 New CWE-426
信頼性のない検索パス
CVE-2026-53865 2026-06-22 11:47 2026-06-16 Show GitHub Exploit DB Packet Storm
547 8.1 重要
Network
OpenClaw OpenClaw OpenClawにおける認証の欠如に関する脆弱性 New CWE-862
認証の欠如
CVE-2026-53866 2026-06-22 11:47 2026-06-16 Show GitHub Exploit DB Packet Storm
548 6.5 警告
Network
Mozilla Foundation Mozilla Firefox Mobile Mozilla FoundationのMozilla Firefox Mobileにおけるデータの信頼性についての不十分な検証に関する脆弱性 New CWE-345
データの信頼性についての不十分な検証
CVE-2026-53899 2026-06-22 11:47 2026-06-16 Show GitHub Exploit DB Packet Storm
549 4.3 警告
Network
Mozilla Foundation Mozilla Firefox Mobile Mozilla FoundationのMozilla Firefox Mobileにおける複数の脆弱性 New CWE-345
CWE-384
CVE-2026-53900 2026-06-22 11:47 2026-06-16 Show GitHub Exploit DB Packet Storm
550 5.3 警告
Network
Mattermost, Inc. Mattermost Server Mattermost, Inc.のMattermost Serverにおける情報漏えいに関する脆弱性 New CWE-200
情報漏えい
CVE-2026-6046 2026-06-22 11:47 2026-06-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 24, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
256261 7.2 HIGH
Network
mail-masta_project mail-masta A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects ./inc/lists/edit-list.php with the GET Parameter: id. CWE-89
SQL Injection
CVE-2017-6573 2024-11-21 12:30 2017-03-9 Show GitHub Exploit DB Packet Storm
256262 7.2 HIGH
Network
mail-masta_project mail-masta A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects ./inc/lists/add_member.php with the GET Parameter: filter_… CWE-89
SQL Injection
CVE-2017-6572 2024-11-21 12:30 2017-03-9 Show GitHub Exploit DB Packet Storm
256263 7.2 HIGH
Network
mail-masta_project mail-masta A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects ./inc/campaign/view-campaign.php with the GET Parameter: i… CWE-89
SQL Injection
CVE-2017-6571 2024-11-21 12:30 2017-03-9 Show GitHub Exploit DB Packet Storm
256264 7.2 HIGH
Network
mail-masta_project mail-masta A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects ./inc/campaign/view-campaign-list.php with the GET Paramet… CWE-89
SQL Injection
CVE-2017-6570 2024-11-21 12:30 2017-03-9 Show GitHub Exploit DB Packet Storm
256265 6.1 MEDIUM
Network
agora-project agora-project XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=file&targetObjId=fileFolder-2&targetObjIdChild=[XSS] attack. CWE-79
Cross-site Scripting
CVE-2017-6562 2024-11-21 12:30 2017-03-9 Show GitHub Exploit DB Packet Storm
256266 6.1 MEDIUM
Network
agora-project agora-project XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=object&action=[XSS] attack. CWE-79
Cross-site Scripting
CVE-2017-6561 2024-11-21 12:30 2017-03-9 Show GitHub Exploit DB Packet Storm
256267 6.1 MEDIUM
Network
agora-project agora-project XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=misc&action=[XSS]&editObjId=[XSS] attack. CWE-79
Cross-site Scripting
CVE-2017-6560 2024-11-21 12:30 2017-03-9 Show GitHub Exploit DB Packet Storm
256268 6.1 MEDIUM
Network
agora-project agora-project XSS in Agora-Project 3.2.2 exists with an index.php?disconnect=1&msgNotif[]=[XSS] attack. CWE-79
Cross-site Scripting
CVE-2017-6559 2024-11-21 12:30 2017-03-9 Show GitHub Exploit DB Packet Storm
256269 9.8 CRITICAL
Network
iball ib-wra150n_firmware iball Baton 150M iB-WRA150N v1 00000001 1.2.6 build 110401 Rel.47776n devices are prone to an authentication bypass vulnerability that allows remote attackers to view and modify administrative router… CWE-798
 Use of Hard-coded Credentials
CVE-2017-6558 2024-11-21 12:30 2017-03-9 Show GitHub Exploit DB Packet Storm
256270 5.4 MEDIUM
Network
cmsmadesimple cms_made_simple Cross-site scripting (XSS) vulnerability in CMS Made Simple (CMSMS) 2.1.6 allows remote authenticated users to inject arbitrary web script or HTML via the "adminpage > sitesetting > General Settings … CWE-79
Cross-site Scripting
CVE-2017-6556 2024-11-21 12:30 2017-03-9 Show GitHub Exploit DB Packet Storm