Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
381	7.1	重要 Network	Quantum Nous	New API	Quantum NousのNew APIにおけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-42339	2026-05-20 13:30	2026-05-8	Show	GitHub Exploit DB Packet Storm

382	9.8	緊急 Network	sentry	sentry	sentryにおけるスプーフィングによる認証回避に関する脆弱性	CWE-290 スプーフィングによる認証回避	CVE-2026-42354	2026-05-20 13:30	2026-05-8	Show	GitHub Exploit DB Packet Storm

383	5.5	警告 Local	M2-Team	NanaZip	M2-TeamのNanaZipにおける再帰制御に関する脆弱性	CWE-674 不適切な再帰制御	CVE-2026-42355	2026-05-20 13:30	2026-05-12	Show	GitHub Exploit DB Packet Storm

384	5.1	警告 Local	uriparser project	uriparser	uriparser projectのuriparserにおける数値打ち切り誤差に関する脆弱性	CWE-197 数値打ち切り誤差	CVE-2026-42371	2026-05-20 13:30	2026-04-27	Show	GitHub Exploit DB Packet Storm

385	5.5	警告 Local	M2-Team	NanaZip	M2-TeamのNanaZipにおけるNULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2026-42442	2026-05-20 13:30	2026-05-12	Show	GitHub Exploit DB Packet Storm

386	5.5	警告 Local	M2-Team	NanaZip	M2-TeamのNanaZipにおけるゼロ除算に関する脆弱性	CWE-369 ゼロ除算	CVE-2026-42443	2026-05-20 13:30	2026-05-12	Show	GitHub Exploit DB Packet Storm

387	5.5	警告 Local	M2-Team	NanaZip	M2-TeamのNanaZipにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-42444	2026-05-20 13:30	2026-05-12	Show	GitHub Exploit DB Packet Storm

388	4.3	警告 Network	mintplexlabs	anythingllm	mintplexlabsのanythingllmにおける複数の脆弱性	CWE-200 CWE-639 CWE-639	CVE-2026-42456	2026-05-20 13:30	2026-05-8	Show	GitHub Exploit DB Packet Storm

389	6.1	警告 Network	Gofiber	Fiber	GofiberのFiberにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-42554	2026-05-20 13:29	2026-05-11	Show	GitHub Exploit DB Packet Storm

390	9	緊急 Network	Gitroom	Postiz	GitroomのPostizにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-42556	2026-05-20 13:29	2026-05-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
311521	8.0	HIGH Network	splunk	splunk	In Splunk Enterprise for Windows versions below 9.3.1, 9.2.3, and 9.1.6, a low-privileged user that does not hold the "admin" or "power" Splunk roles could write a file to the Windows system root dir…	CWE-22 Path Traversal	CVE-2024-45731	2024-10-17 22:09	2024-10-15	Show	GitHub Exploit DB Packet Storm

311522	6.5	MEDIUM Network	splunk	splunk splunk_cloud_platform	In Splunk Enterprise versions below 9.3.1, and 9.2.0 versions below 9.2.3, and Splunk Cloud Platform versions below 9.2.2403.103, 9.1.2312.200, 9.1.2312.110 and 9.1.2308.208, a low-privileged user th…	CWE-862 Missing Authorization	CVE-2024-45732	2024-10-17 22:03	2024-10-15	Show	GitHub Exploit DB Packet Storm

311523	6.5	MEDIUM Network	paloaltonetworks	expedition	A cleartext storage of sensitive information vulnerability in Palo Alto Networks Expedition allows an authenticated attacker to reveal firewall usernames, passwords, and API keys generated using thos…	CWE-312 Cleartext Storage of Sensitive Information	CVE-2024-9466	2024-10-17 15:15	2024-10-10	Show	GitHub Exploit DB Packet Storm

311524	6.5	MEDIUM Network	paloaltonetworks	expedition	An OS command injection vulnerability in Palo Alto Networks Expedition allows an authenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, clear…	CWE-78 OS Command	CVE-2024-9464	2024-10-17 15:15	2024-10-10	Show	GitHub Exploit DB Packet Storm

311525	-		-	-	Multiple Home GateWay/Hikari Denwa routers provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION are vulnerable to insufficient access restrictions for Device Setting pages. If this vulnerabili…	-	CVE-2024-47044	2024-10-17 11:15	2024-09-26	Show	GitHub Exploit DB Packet Storm

311526	8.8	HIGH Network	splunk	splunk	In Splunk Enterprise for Windows versions below 9.2.3 and 9.1.6, a low-privileged user that does not hold the "admin" or "power" Splunk roles could perform a Remote Code Execution (RCE) due to an ins…	CWE-502 Deserialization of Untrusted Data	CVE-2024-45733	2024-10-17 07:26	2024-10-15	Show	GitHub Exploit DB Packet Storm

311527	4.3	MEDIUM Network	splunk	splunk splunk_cloud_platform	In Splunk Enterprise versions below 9.2.3 and 9.1.6, and Splunk Secure Gateway versions on Splunk Cloud Platform versions below 3.4.259, 3.6.17, and 3.7.0, a low-privileged user that does not hold th…	NVD-CWE-noinfo	CVE-2024-45735	2024-10-17 07:20	2024-10-15	Show	GitHub Exploit DB Packet Storm

311528	4.3	MEDIUM Network	splunk	splunk	In Splunk Enterprise versions 9.3.0, 9.2.3, and 9.1.6, a low-privileged user that does not hold the "admin" or "power" Splunk roles could view images on the machine that runs Splunk Enterprise by usi…	NVD-CWE-noinfo	CVE-2024-45734	2024-10-17 07:20	2024-10-15	Show	GitHub Exploit DB Packet Storm

311529	6.5	MEDIUM Network	splunk	splunk splunk_cloud_platform	In Splunk Enterprise versions below 9.3.1, 9.2.3, and 9.1.6 and Splunk Cloud Platform versions below 9.2.2403.107, 9.1.2312.204, and 9.1.2312.111, a low-privileged user that does not hold the "admin"…	NVD-CWE-noinfo	CVE-2024-45736	2024-10-17 07:19	2024-10-15	Show	GitHub Exploit DB Packet Storm

311530	3.5	LOW Network	splunk	splunk splunk_cloud_platform	In Splunk Enterprise versions below 9.3.1, 9.2.3, and 9.1.6 and Splunk Cloud Platform versions below 9.2.2403.108, and 9.1.2312.204, a low-privileged user that does not hold the "admin" or "power" Sp…	CWE-352 Origin Validation Error	CVE-2024-45737	2024-10-17 07:18	2024-10-15	Show	GitHub Exploit DB Packet Storm