Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 24, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
5581 9.6 緊急
Network 		- OpenC3のOpenC3 COSMOSにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2026-42087 2026-05-11 11:09 2026-05-4 Show GitHub Exploit DB Packet Storm
5582 9.8 緊急
Network 		litellm litellm LiteLLMにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2026-42208 2026-05-11 11:09 2026-05-8 Show GitHub Exploit DB Packet Storm
5583 9.1 緊急
Network 		OpenEXR OpenEXR OpenEXRにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-42216 2026-05-11 11:09 2026-05-7 Show GitHub Exploit DB Packet Storm
5584 9.8 緊急
Network 		OpenEXR OpenEXR OpenEXRにおける整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2026-42217 2026-05-11 11:09 2026-05-7 Show GitHub Exploit DB Packet Storm
5585 8.8 重要
Network 		litellm litellm LiteLLMにおける複数の脆弱性 CWE-77
CWE-78
CVE-2026-42271 2026-05-11 11:09 2026-05-8 Show GitHub Exploit DB Packet Storm
5586 8.7 重要
Network 		NetFoundry zrok NetFoundryのzrokにおける複数の脆弱性 CWE-22
CWE-61
CVE-2026-42275 2026-05-11 11:09 2026-05-8 Show GitHub Exploit DB Packet Storm
5587 5.8 警告
Network 		solidtime solidtime solidtimeにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-42279 2026-05-11 11:09 2026-05-8 Show GitHub Exploit DB Packet Storm
5588 7.5 重要
Network 		マイクロソフト Azure DevOps Azure DevOps Information Disclosure Vulnerability CWE-200
情報漏えい 		CVE-2026-42826 2026-05-11 11:09 2026-05-7 Show GitHub Exploit DB Packet Storm
5589 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2026-43017 2026-05-11 11:08 2026-05-1 Show GitHub Exploit DB Packet Storm
5590 8.8 重要
Adjacent 		Linux Linux Kernel LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-43018 2026-05-11 11:08 2026-05-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 24, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314341 - - - The Simple File List WordPress plugin before 6.1.13 does not sanitise and escape a generated URL before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting which could be … - CVE-2024-10146 2024-11-15 22:58 2024-11-14 Show GitHub Exploit DB Packet Storm
314342 - - - The Salt-SSH pre-flight option copies the script to the target at a predictable path, which allows an attacker to force Salt-SSH to run their script. If an attacker has access to the target VM and kn… - CVE-2023-34049 2024-11-15 22:58 2024-11-14 Show GitHub Exploit DB Packet Storm
314343 - - - Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain a hardcoded cryptographic key used for encryption. - CVE-2024-40410 2024-11-15 22:58 2024-11-14 Show GitHub Exploit DB Packet Storm
314344 - - - Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain an access control issue in the Create Profile section. This vulnerability allows attackers to create arbitrary user pr… - CVE-2024-40408 2024-11-15 22:58 2024-11-14 Show GitHub Exploit DB Packet Storm
314345 - - - A full path disclosure in Cybele Software Thinfinity Workspace before v7.0.2.113 allows attackers to obtain the root path of the application via unspecified vectors. - CVE-2024-40407 2024-11-15 22:58 2024-11-14 Show GitHub Exploit DB Packet Storm
314346 - - - Incorrect access control in Cybele Software Thinfinity Workspace before v7.0.3.109 allows attackers to gain access to a secondary broker via a crafted request. - CVE-2024-40405 2024-11-15 22:58 2024-11-14 Show GitHub Exploit DB Packet Storm
314347 - - - Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain an access control issue in the API endpoint where Web Sockets connections are established. - CVE-2024-40404 2024-11-15 22:58 2024-11-14 Show GitHub Exploit DB Packet Storm
314348 - - - Ruijie NBR800G gateway NBR_RGOS_11.1(6)B4P9 is vulnerable to command execution in /itbox_pi/networksafe.php via the province parameter. - CVE-2024-51027 2024-11-15 22:58 2024-11-14 Show GitHub Exploit DB Packet Storm
314349 - - - A buffer overflow in the RecvSocketData function of Inovance HCPLC_AM401-CPU1608TPTN 21.38.0.0, HCPLC_AM402-CPU1608TPTN 41.38.0.0, and HCPLC_AM403-CPU1608TN 81.38.0.0 allows attackers to cause a Deni… - CVE-2024-50956 2024-11-15 22:58 2024-11-14 Show GitHub Exploit DB Packet Storm
314350 - - - Jenkins Shared Library Version Override Plugin 17.v786074c9fce7 and earlier declares folder-scoped library overrides as trusted, so that they're not executed in the Script Security sandbox, allowing … - CVE-2024-52554 2024-11-15 22:58 2024-11-14 Show GitHub Exploit DB Packet Storm