Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1991	7.8	重要 Local	Sebastian Bergmann	PHPUnit	Sebastian BergmannのPHPUnitにおける複数の脆弱性	CWE-88 CWE-93	CVE-2026-41570	2026-05-11 11:09	2026-05-8	Show	GitHub Exploit DB Packet Storm

1992	7.5	重要 Network	Zcash Foundation	Zebra-chain Zebrad	Zcash FoundationのZebra-chain等の複数製品における到達可能なアサーションに関する脆弱性	CWE-617 到達可能なアサーション	CVE-2026-41584	2026-05-11 11:09	2026-05-8	Show	GitHub Exploit DB Packet Storm

1993	5.3	警告 Network	projectdiscovery	Nuclei	ProjectDiscovery, Inc.のNucleiにおけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2026-41645	2026-05-11 11:09	2026-05-8	Show	GitHub Exploit DB Packet Storm

1994	5.5	警告 Local	projectdiscovery	Nuclei	ProjectDiscovery, Inc.のNucleiにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-41646	2026-05-11 11:09	2026-05-8	Show	GitHub Exploit DB Packet Storm

1995	8.1	重要 Network		-	OpenC3のOpenC3 COSMOSにおける未検証のパスワード変更に関する脆弱性	CWE-620 未検証のパスワード変更	CVE-2026-42084	2026-05-11 11:09	2026-05-4	Show	GitHub Exploit DB Packet Storm

1996	4.3	警告 Network		-	OpenC3のOpenC3 COSMOSにおける相対パストラバーサルの脆弱性	CWE-23 相対的パストラバーサル	CVE-2026-42085	2026-05-11 11:09	2026-05-4	Show	GitHub Exploit DB Packet Storm

1997	4.6	警告 Network		-	OpenC3のOpenC3 COSMOSにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-42086	2026-05-11 11:09	2026-05-4	Show	GitHub Exploit DB Packet Storm

1998	9.6	緊急 Network		-	OpenC3のOpenC3 COSMOSにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2026-42087	2026-05-11 11:09	2026-05-4	Show	GitHub Exploit DB Packet Storm

1999	9.8	緊急 Network	litellm	litellm	LiteLLMにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2026-42208	2026-05-11 11:09	2026-05-8	Show	GitHub Exploit DB Packet Storm

2000	9.1	緊急 Network	OpenEXR	OpenEXR	OpenEXRにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-42216	2026-05-11 11:09	2026-05-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2441	6.5	MEDIUM Network	-	-	phpMyFAQ before 4.1.2 contains an authorization bypass vulnerability in AbstractAdministrationController::userHasPermission() that fails to terminate execution after sending a forbidden response. Att…	CWE-863 Incorrect Authorization	CVE-2026-46362	2026-05-19 02:25	2026-05-16	Show	GitHub Exploit DB Packet Storm

2442	5.4	MEDIUM Network	-	-	phpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in FAQ creation and update endpoints that bypass sanitization through encode-decode cycles. The vulnerability allows authent…	CWE-79 Cross-site Scripting	CVE-2026-46363	2026-05-19 02:25	2026-05-16	Show	GitHub Exploit DB Packet Storm

2443	9.8	CRITICAL Network	-	-	phpMyFAQ before 4.1.2 contains an unauthenticated SQL injection vulnerability in BuiltinCaptcha::garbageCollector() and BuiltinCaptcha::saveCaptcha() methods that interpolate unsanitized User-Agent h…	CWE-89 SQL Injection	CVE-2026-46364	2026-05-19 02:25	2026-05-16	Show	GitHub Exploit DB Packet Storm

2444	5.4	MEDIUM Network	-	-	phpMyFAQ before 4.1.2 contains a missing authorization vulnerability in the DELETE /admin/api/content/tags/{tagId} endpoint that allows any authenticated user to delete tags. Any logged-in user, incl…	CWE-862 Missing Authorization	CVE-2026-46365	2026-05-19 02:25	2026-05-16	Show	GitHub Exploit DB Packet Storm

2445	7.5	HIGH Network	-	-	phpMyFAQ before 4.1.2 contains an information disclosure vulnerability in the getIdFromSolutionId() method that lacks permission filtering, allowing unauthenticated attackers to enumerate restricted …	CWE-863 Incorrect Authorization	CVE-2026-46366	2026-05-19 02:25	2026-05-16	Show	GitHub Exploit DB Packet Storm

2446	7.6	HIGH Network	-	-	phpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in Utils::parseUrl() that allows authenticated users to inject JavaScript via malformed URLs in comments. Attackers can craf…	CWE-79 Cross-site Scripting	CVE-2026-46367	2026-05-19 02:25	2026-05-16	Show	GitHub Exploit DB Packet Storm

2447	6.1	MEDIUM Network	siemens	teamcenter	A vulnerability has been identified in Teamcenter V2312 (All versions < V2312.0014), Teamcenter V2406 (All versions < V2406.0012), Teamcenter V2412 (All versions < V2412.0009), Teamcenter V2506 (All …	CWE-79 Cross-site Scripting	CVE-2026-33862	2026-05-19 02:23	2026-05-12	Show	GitHub Exploit DB Packet Storm

2448	4.3	MEDIUM Network	dovecot open-xchange	dovecot	An attacker can cause uncontrolled memory usage with excessive bracing over IMAP. The fix in CVE-2026-27857 was incomplete, only blocking one way of doing this, so there was still another way left op…	CWE-400 Uncontrolled Resource Consumption	CVE-2026-42006	2026-05-19 02:22	2026-05-12	Show	GitHub Exploit DB Packet Storm

2449	8.8	HIGH Network	fortinet	fortindr	An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiNDR 7.6.0 through 7.6.2, FortiNDR 7.4.0 through 7.4.9, FortiNDR 7.2 all versions…	CWE-89 SQL Injection	CVE-2026-25088	2026-05-19 02:19	2026-05-13	Show	GitHub Exploit DB Packet Storm

2450	6.5	MEDIUM Network	fortinet	fortideceptor	An improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiDeceptor 6.0.0 through 6.0.2, FortiDeceptor 5.3.0 through 5.3.3, FortiDeceptor 5.2…	CWE-88 Argument Injection	CVE-2026-25690	2026-05-19 02:17	2026-05-13	Show	GitHub Exploit DB Packet Storm