Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1811	5.3	警告 Network	projectdiscovery	Nuclei	ProjectDiscovery, Inc.のNucleiにおけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2026-41645	2026-05-11 11:09	2026-05-8	Show	GitHub Exploit DB Packet Storm

1812	5.5	警告 Local	projectdiscovery	Nuclei	ProjectDiscovery, Inc.のNucleiにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-41646	2026-05-11 11:09	2026-05-8	Show	GitHub Exploit DB Packet Storm

1813	8.1	重要 Network		-	OpenC3のOpenC3 COSMOSにおける未検証のパスワード変更に関する脆弱性	CWE-620 未検証のパスワード変更	CVE-2026-42084	2026-05-11 11:09	2026-05-4	Show	GitHub Exploit DB Packet Storm

1814	4.3	警告 Network		-	OpenC3のOpenC3 COSMOSにおける相対パストラバーサルの脆弱性	CWE-23 相対的パストラバーサル	CVE-2026-42085	2026-05-11 11:09	2026-05-4	Show	GitHub Exploit DB Packet Storm

1815	4.6	警告 Network		-	OpenC3のOpenC3 COSMOSにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-42086	2026-05-11 11:09	2026-05-4	Show	GitHub Exploit DB Packet Storm

1816	9.6	緊急 Network		-	OpenC3のOpenC3 COSMOSにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2026-42087	2026-05-11 11:09	2026-05-4	Show	GitHub Exploit DB Packet Storm

1817	9.8	緊急 Network	litellm	litellm	LiteLLMにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2026-42208	2026-05-11 11:09	2026-05-8	Show	GitHub Exploit DB Packet Storm

1818	9.1	緊急 Network	OpenEXR	OpenEXR	OpenEXRにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-42216	2026-05-11 11:09	2026-05-7	Show	GitHub Exploit DB Packet Storm

1819	9.8	緊急 Network	OpenEXR	OpenEXR	OpenEXRにおける整数オーバーフローの脆弱性	CWE-190 整数オーバーフローまたはラップアラウンド	CVE-2026-42217	2026-05-11 11:09	2026-05-7	Show	GitHub Exploit DB Packet Storm

1820	8.8	重要 Network	litellm	litellm	LiteLLMにおける複数の脆弱性	CWE-77 CWE-78	CVE-2026-42271	2026-05-11 11:09	2026-05-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1841	6.5	MEDIUM Network	apple	ipados iphone_os macos tvos visionos watchos	A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processin…	CWE-416 Use After Free	CVE-2026-28942	2026-05-14 23:32	2026-05-12	Show	GitHub Exploit DB Packet Storm

1842	9.9	CRITICAL Network	microsoft	dynamics_365	Improper control of generation of code ('code injection') in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute code over a network.	CWE-94 Code Injection	CVE-2026-42898	2026-05-14 23:31	2026-05-13	Show	GitHub Exploit DB Packet Storm

1843	7.8	HIGH Local	microsoft	windows_11_24h2 windows_11_25h2 windows_11_26h1 windows_server_2025	Integer overflow or wraparound in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.	CWE-122 CWE-190 Heap-based Buffer Overflow Integer Overflow or Wraparound	CVE-2026-42896	2026-05-14 23:31	2026-05-13	Show	GitHub Exploit DB Packet Storm

1844	7.5	HIGH Network	microsoft	copilot_chat	Improper neutralization of special elements used in a command ('command injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to disclose information over a network.	CWE-77 Command Injection	CVE-2026-33111	2026-05-14 23:31	2026-05-8	Show	GitHub Exploit DB Packet Storm

1845	8.8	HIGH Network	arubanetworks	arubaos sd-wan	Command injection vulnerabilities exist in the command line interface (CLI) service accessed by the PAPI protocol of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabiliti…	CWE-77 Command Injection	CVE-2026-44871	2026-05-14 23:29	2026-05-13	Show	GitHub Exploit DB Packet Storm

1846	6.5	MEDIUM Network	-	-	The Unlimited Elements for Elementor plugin for WordPress is vulnerable to SQL Injection via the 'data[filter_search]' parameter in the get_cat_addons AJAX action in versions up to and including 2.0.…	CWE-89 SQL Injection	CVE-2026-5486	2026-05-14 23:29	2026-05-14	Show	GitHub Exploit DB Packet Storm

1847	6.4	MEDIUM Network	-	-	The Envira Gallery Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the REST API in versions up to and including 1.12.4. This is due to insufficient input sanitization in th…	CWE-79 Cross-site Scripting	CVE-2026-5361	2026-05-14 23:29	2026-05-14	Show	GitHub Exploit DB Packet Storm

1848	4.3	MEDIUM Network	-	-	The My Calendar – Accessible Event Manager plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.7.9. This is due to the plugin not properly verifying tha…	CWE-862 Missing Authorization	CVE-2026-7525	2026-05-14 23:29	2026-05-14	Show	GitHub Exploit DB Packet Storm

1849	4.3	MEDIUM Network	-	-	The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to payment bypass through user-controlled key in all versions up to, and including, 4.3.5. …	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2026-7648	2026-05-14 23:29	2026-05-14	Show	GitHub Exploit DB Packet Storm

1850	6.1	MEDIUM Network	-	-	The MapGeo – Interactive Geo Maps plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'map' parameter in the display-map shortcode in all versions up to, and including, 1.6.2…	CWE-80 Basic XSS	CVE-2025-15345	2026-05-14 23:29	2026-05-14	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed