Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1231 8.1 重要
Network 		- OpenC3のOpenC3 COSMOSにおける未検証のパスワード変更に関する脆弱性 CWE-620
未検証のパスワード変更 		CVE-2026-42084 2026-05-11 11:09 2026-05-4 Show GitHub Exploit DB Packet Storm
1232 4.3 警告
Network 		- OpenC3のOpenC3 COSMOSにおける相対パストラバーサルの脆弱性 CWE-23
相対的パストラバーサル 		CVE-2026-42085 2026-05-11 11:09 2026-05-4 Show GitHub Exploit DB Packet Storm
1233 4.6 警告
Network 		- OpenC3のOpenC3 COSMOSにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-42086 2026-05-11 11:09 2026-05-4 Show GitHub Exploit DB Packet Storm
1234 9.6 緊急
Network 		- OpenC3のOpenC3 COSMOSにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2026-42087 2026-05-11 11:09 2026-05-4 Show GitHub Exploit DB Packet Storm
1235 9.8 緊急
Network 		litellm litellm LiteLLMにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2026-42208 2026-05-11 11:09 2026-05-8 Show GitHub Exploit DB Packet Storm
1236 9.1 緊急
Network 		OpenEXR OpenEXR OpenEXRにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-42216 2026-05-11 11:09 2026-05-7 Show GitHub Exploit DB Packet Storm
1237 9.8 緊急
Network 		OpenEXR OpenEXR OpenEXRにおける整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2026-42217 2026-05-11 11:09 2026-05-7 Show GitHub Exploit DB Packet Storm
1238 8.8 重要
Network 		litellm litellm LiteLLMにおける複数の脆弱性 CWE-77
CWE-78
CVE-2026-42271 2026-05-11 11:09 2026-05-8 Show GitHub Exploit DB Packet Storm
1239 8.7 重要
Network 		NetFoundry zrok NetFoundryのzrokにおける複数の脆弱性 CWE-22
CWE-61
CVE-2026-42275 2026-05-11 11:09 2026-05-8 Show GitHub Exploit DB Packet Storm
1240 5.8 警告
Network 		solidtime solidtime solidtimeにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-42279 2026-05-11 11:09 2026-05-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312161 6.1 MEDIUM
Network 		ckeditor ckeditor5 CKEditor 5 is a JavaScript rich-text editor. Starting in version 40.0.0 and prior to version 43.1.1, a Cross-Site Scripting (XSS) vulnerability is present in the CKEditor 5 clipboard package. This vu… CWE-79
Cross-site Scripting 		CVE-2024-45613 2024-10-2 07:15 2024-09-25 Show GitHub Exploit DB Packet Storm
312162 6.5 MEDIUM
Network 		apache druid Apache Druid allows users with certain permissions to read data from other database systems using JDBC. This functionality allows trusted users to set up Druid lookups or run ingestion tasks. Druid a… NVD-CWE-noinfo
CVE-2024-45537 2024-10-2 05:41 2024-09-18 Show GitHub Exploit DB Packet Storm
312163 7.8 HIGH
Local 		restsharp restsharp RestSharp is a Simple REST and HTTP API Client for .NET. The second argument to `RestRequest.AddHeader` (the header value) is vulnerable to CRLF injection. The same applies to `RestRequest.AddOrUpdat… CWE-74
Injection 		CVE-2024-45302 2024-10-2 05:05 2024-08-30 Show GitHub Exploit DB Packet Storm
312164 8.0 HIGH
Network 		strawberryrocks strawberry Strawberry GraphQL is a library for creating GraphQL APIs. Prior to version 0.243.0, multipart file upload support as defined in the GraphQL multipart request specification was enabled by default in … CWE-352
 Origin Validation Error 		CVE-2024-47082 2024-10-2 05:01 2024-09-26 Show GitHub Exploit DB Packet Storm
312165 7.5 HIGH
Network 		watchguard single_sign-on_client Improper Handling of Exceptional Conditions vulnerability in the WatchGuard Single Sign-On Client on Windows causes the client to crash while handling malformed commands. An attacker with network acc… CWE-755
 Improper Handling of Exceptional Conditions 		CVE-2024-6594 2024-10-2 04:41 2024-09-25 Show GitHub Exploit DB Packet Storm
312166 9.1 CRITICAL
Network 		watchguard authentication_gateway Incorrect Authorization vulnerability in WatchGuard Authentication Gateway (aka Single Sign-On Agent) on Windows allows an attacker with network access to execute restricted management commands. This… CWE-863
 Incorrect Authorization 		CVE-2024-6593 2024-10-2 04:37 2024-09-25 Show GitHub Exploit DB Packet Storm
312167 7.5 HIGH
Network 		circutor q-smt_firmware An attacker with access to the network where CIRCUTOR Q-SMT is located in its firmware version 1.0.4, could steal the tokens used on the web, since these have no expiration date to access the web app… CWE-613
 Insufficient Session Expiration 		CVE-2024-8888 2024-10-2 04:30 2024-09-18 Show GitHub Exploit DB Packet Storm
312168 7.8 HIGH
Local 		grafana alloy Unquoted Search Path or Element vulnerability in Grafana Alloy on Windows allows Privilege Escalation from Local User to SYSTEM This issue affects Alloy: before 1.3.3, from 1.4.0-rc.0 through 1.4.0-r… CWE-428
 Unquoted Search Path or Element 		CVE-2024-8975 2024-10-2 04:20 2024-09-26 Show GitHub Exploit DB Packet Storm
312169 7.8 HIGH
Local 		grafana agent Unquoted Search Path or Element vulnerability in Grafana Agent (Flow mode) on Windows allows Privilege Escalation from Local User to SYSTEM This issue affects Agent Flow: before 0.43.2 CWE-428
 Unquoted Search Path or Element 		CVE-2024-8996 2024-10-2 04:16 2024-09-26 Show GitHub Exploit DB Packet Storm
312170 7.5 HIGH
Network 		openslides openslides OpenSlides 4.0.15 was discovered to be using a weak hashing algorithm to store passwords. CWE-326
Inadequate Encryption Strength 		CVE-2024-22892 2024-10-2 04:10 2024-09-26 Show GitHub Exploit DB Packet Storm