Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 3, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
801	5.3	警告 Network	OpenClaw	OpenClaw	OpenClawにおけるインタラクション頻度の制御に関する脆弱性	CWE-799 インタラクション頻度の不適切な制御	CVE-2026-41343	2026-04-30 11:01	2026-04-23	Show	GitHub Exploit DB Packet Storm

802	8.8	重要 Network	OpenClaw	OpenClaw	OpenClawにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-41344	2026-04-30 11:01	2026-04-23	Show	GitHub Exploit DB Packet Storm

803	5.3	警告 Network	OpenClaw	OpenClaw	OpenClawにおける認証情報の不十分な保護に関する脆弱性	CWE-522 認証情報の不十分な保護	CVE-2026-41345	2026-04-30 11:01	2026-04-23	Show	GitHub Exploit DB Packet Storm

804	7.5	重要 Network	OpenClaw	OpenClaw	OpenClawにおけるインタラクション頻度の制御に関する脆弱性	CWE-799 インタラクション頻度の不適切な制御	CVE-2026-41346	2026-04-30 11:00	2026-04-23	Show	GitHub Exploit DB Packet Storm

805	7.1	重要 Network	OpenClaw	OpenClaw	OpenClawにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2026-41347	2026-04-30 11:00	2026-04-23	Show	GitHub Exploit DB Packet Storm

806	5.4	警告 Network	OpenClaw	OpenClaw	OpenClawにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-41348	2026-04-30 11:00	2026-04-23	Show	GitHub Exploit DB Packet Storm

807	8.8	重要 Network	OpenClaw	OpenClaw	OpenClawにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-41349	2026-04-30 11:00	2026-04-23	Show	GitHub Exploit DB Packet Storm

808	4.3	警告 Network	OpenClaw	OpenClaw	OpenClawにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-41350	2026-04-30 11:00	2026-04-23	Show	GitHub Exploit DB Packet Storm

809	5.3	警告 Network	OpenClaw	OpenClaw	OpenClawにおけるCapture-replay による認証回避に関する脆弱性	CWE-294 Capture-replayによる認証回避	CVE-2026-41351	2026-04-30 11:00	2026-04-23	Show	GitHub Exploit DB Packet Storm

810	8.8	重要 Network	OpenClaw	OpenClaw	OpenClawにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-41352	2026-04-30 11:00	2026-04-23	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 3, 2026, 4:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
313911	-		episodex	episodex_guestbook	episodex guestbook allows remote attackers to bypass authentication and edit scripts via a direct request to admin.asp.	CWE-425 Direct Request ('Forced Browsing')	CVE-2005-1685	2024-01-26 06:07	2005-05-20	Show	GitHub Exploit DB Packet Storm

313912	9.1	CRITICAL Network	midicart	midicart_php midicart_php_plus midicart_php_maxi	MidiCart PHP, PHP Plus, and PHP Maxi allows remote attackers to (1) upload arbitrary php files via a direct request to admin/upload.php or (2) access sensitive information via a direct request to adm…	CWE-425 Direct Request ('Forced Browsing')	CVE-2002-1798	2024-01-26 06:04	2002-12-31	Show	GitHub Exploit DB Packet Storm

313913	-		hostingcontroller	hosting_controller	Hosting Controller 6.1 Hotfix 1.9 and earlier allows remote attackers to register arbitrary users via a direct request to addsubsite.asp with the loginname and password parameters set.	CWE-425 Direct Request ('Forced Browsing')	CVE-2005-1654	2024-01-26 06:03	2005-05-18	Show	GitHub Exploit DB Packet Storm

313914	-		yusasp	web_asset_manager	YusASP Web Asset Manager 1.0 allows remote attackers to gain privileges via a direct request to assetmanager.asp.	CWE-425 Direct Request ('Forced Browsing')	CVE-2005-1668	2024-01-26 06:03	2005-05-18	Show	GitHub Exploit DB Packet Storm

313915	7.5	HIGH Network	iomega	nas_a300u_firmware	The Network Attached Storage (NAS) Administration Web Page for Iomega NAS A300U transmits passwords in cleartext, which allows remote attackers to sniff the administrative password.	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2002-1949	2024-01-26 06:00	2002-12-31	Show	GitHub Exploit DB Packet Storm

313916	7.5	HIGH Network	procom	netforce_800_firmware	Procom NetFORCE 800 4.02 M10 Build 20 and possibly other versions sends the NIS password map (passwd.nis) as a file attachment in diagnostic e-mail messages, which allows remote attackers to obtain t…	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2005-3140	2024-01-26 05:58	2005-10-6	Show	GitHub Exploit DB Packet Storm

313917	-		solarwinds	dameware_mini_remote_control	DameWare Mini Remote Control 3.x before 3.74 and 4.x before 4.2 transmits the Blowfish encryption key in plaintext, which allows remote attackers to gain sensitive information.	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2004-1852	2024-01-26 05:57	2004-03-23	Show	GitHub Exploit DB Packet Storm

313918	5.5	MEDIUM Local	macromedia	coldfusion	ColdFusion MX 6.1 and 6.1 J2EE allows local users to bypass sandbox security restrictions and obtain sensitive information by using Java reflection methods to access trusted Java objects without usin…	CWE-470 Unsafe Reflection	CVE-2004-2331	2024-01-25 11:16	2004-12-31	Show	GitHub Exploit DB Packet Storm

313919	9.8	CRITICAL Network	mozilla sco	mozilla openserver	The Script.prototype.freeze/thaw functionality in Mozilla 1.4 and earlier allows attackers to execute native methods by modifying the string used as input to the script.thaw JavaScript function, whic…	CWE-502 Deserialization of Untrusted Data	CVE-2003-0791	2024-01-25 11:14	2003-10-7	Show	GitHub Exploit DB Packet Storm

313920	-		-	-	Rejected reason: REJECT DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-5533. Reason: This record is a reservation duplicate of CVE-2023-5533. Notes: All CVE users should reference CVE-2023-55…	-	CVE-2023-5656	2024-01-24 08:15	2023-10-20	Show	GitHub Exploit DB Packet Storm