Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 26, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
1991 4.6 警告
Network
- OpenC3のOpenC3 COSMOSにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-42086 2026-05-11 11:09 2026-05-4 Show GitHub Exploit DB Packet Storm
1992 9.6 緊急
Network
- OpenC3のOpenC3 COSMOSにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2026-42087 2026-05-11 11:09 2026-05-4 Show GitHub Exploit DB Packet Storm
1993 9.8 緊急
Network
litellm litellm LiteLLMにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2026-42208 2026-05-11 11:09 2026-05-8 Show GitHub Exploit DB Packet Storm
1994 9.1 緊急
Network
OpenEXR OpenEXR OpenEXRにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2026-42216 2026-05-11 11:09 2026-05-7 Show GitHub Exploit DB Packet Storm
1995 9.8 緊急
Network
OpenEXR OpenEXR OpenEXRにおける整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド
CVE-2026-42217 2026-05-11 11:09 2026-05-7 Show GitHub Exploit DB Packet Storm
1996 8.8 重要
Network
litellm litellm LiteLLMにおける複数の脆弱性 CWE-77
CWE-78
CVE-2026-42271 2026-05-11 11:09 2026-05-8 Show GitHub Exploit DB Packet Storm
1997 8.7 重要
Network
NetFoundry zrok NetFoundryのzrokにおける複数の脆弱性 CWE-22
CWE-61
CVE-2026-42275 2026-05-11 11:09 2026-05-8 Show GitHub Exploit DB Packet Storm
1998 5.8 警告
Network
solidtime solidtime solidtimeにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避
CVE-2026-42279 2026-05-11 11:09 2026-05-8 Show GitHub Exploit DB Packet Storm
1999 7.5 重要
Network
マイクロソフト Azure DevOps Azure DevOps Information Disclosure Vulnerability CWE-200
情報漏えい
CVE-2026-42826 2026-05-11 11:09 2026-05-7 Show GitHub Exploit DB Packet Storm
2000 5.5 警告
Local
Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足
CVE-2026-43017 2026-05-11 11:08 2026-05-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312181 7.5 HIGH
Network
ruby-lang rexml REXML is an XML toolkit for Ruby. The REXML gem before 3.3.2 has some DoS vulnerabilities when it parses an XML that has many specific characters such as whitespace character, `>]` and `]>`. The REXM… CWE-400
 Uncontrolled Resource Consumption
CVE-2024-41123 2024-10-10 21:56 2024-08-2 Show GitHub Exploit DB Packet Storm
312182 6.1 MEDIUM
Network
- - Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit … - CVE-2024-45123 2024-10-10 21:51 2024-10-10 Show GitHub Exploit DB Packet Storm
312183 4.3 MEDIUM
Network
- - Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low-privileged a… CWE-284
Improper Access Control
CVE-2024-45122 2024-10-10 21:51 2024-10-10 Show GitHub Exploit DB Packet Storm
312184 - - - Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low-privileged a… CWE-284
Improper Access Control
CVE-2024-45121 2024-10-10 21:51 2024-10-10 Show GitHub Exploit DB Packet Storm
312185 4.3 MEDIUM
Network
- - Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability that could lead to a security feature byp… CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2024-45120 2024-10-10 21:51 2024-10-10 Show GitHub Exploit DB Packet Storm
312186 5.5 MEDIUM
Network
- - Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to arbitrary file system read. A low-pri… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2024-45119 2024-10-10 21:51 2024-10-10 Show GitHub Exploit DB Packet Storm
312187 6.5 MEDIUM
Network
- - Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low-privileged a… CWE-284
Improper Access Control
CVE-2024-45118 2024-10-10 21:51 2024-10-10 Show GitHub Exploit DB Packet Storm
312188 7.6 HIGH
Network
- - Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read. An admin attacker… CWE-20
 Improper Input Validation 
CVE-2024-45117 2024-10-10 21:51 2024-10-10 Show GitHub Exploit DB Packet Storm
312189 8.1 HIGH
Network
- - Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by a Cross-Site Scripting (XSS) vulnerability that could be exploited to execute arbitrary code. If an admin a… CWE-79
Cross-site Scripting
CVE-2024-45116 2024-10-10 21:51 2024-10-10 Show GitHub Exploit DB Packet Storm
312190 9.8 CRITICAL
Network
- - Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Authentication vulnerability that could result in privilege escalation. An attacker could explo… CWE-287
Improper Authentication
CVE-2024-45115 2024-10-10 21:51 2024-10-10 Show GitHub Exploit DB Packet Storm