Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
226491 10 危険 TYPO3 Association - TYPO3 Secure Directory エクステンションにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2008-4188 2012-12-20 18:52 2008-09-23 Show GitHub Exploit DB Packet Storm
226492 4.3 警告 proactive cms - ProActive CMS の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-4187 2012-12-20 18:52 2008-09-23 Show GitHub Exploit DB Packet Storm
226493 7.5 危険 webcms - webCMS Portal Edition の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-4186 2012-12-20 18:52 2008-09-23 Show GitHub Exploit DB Packet Storm
226494 9.3 危険 systemrequirementslab - Instant Expert Analysis で使用されている LLC Systems Requirements Lab における強制的にダウンロードされる脆弱性 CWE-94
コード・インジェクション
CVE-2008-4385 2012-12-20 18:52 2008-10-14 Show GitHub Exploit DB Packet Storm
226495 7.8 危険 サムスン - Samsung DVR の Web インターフェースにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2008-4380 2012-12-20 18:52 2008-10-1 Show GitHub Exploit DB Packet Storm
226496 4.3 警告 siteman - Siteman の search.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-4365 2012-12-20 18:52 2008-09-30 Show GitHub Exploit DB Packet Storm
226497 7.8 危険 powerportal - PowerPortal におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-4361 2012-12-20 18:52 2008-09-30 Show GitHub Exploit DB Packet Storm
226498 10 危険 spaw editor - SPAW Editor PHP Edtion の class/theme.class.php における脆弱性 CWE-20
不適切な入力確認
CVE-2008-4358 2012-12-20 18:52 2008-09-30 Show GitHub Exploit DB Packet Storm
226499 7.5 危険 Powie - Powie pLink の linkto.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-4357 2012-12-20 18:52 2008-09-30 Show GitHub Exploit DB Packet Storm
226500 7.5 危険 Powie - Powie PSCRIPT Forum の showprofil.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-4355 2012-12-20 18:52 2008-09-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1421 4.7 MEDIUM
Network
- - A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0. This affects the function save_user of the file /admin/ajax.php?action=save_user. Executing a manipulation can lead to sql inject… CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-7409 2026-04-30 23:52 2026-04-30 Show GitHub Exploit DB Packet Storm
1422 6.3 MEDIUM
Network
- - A vulnerability has been found in SourceCodester Pizzafy Ecommerce System 1.0. This vulnerability affects unknown code of the file /admin/ajax.php?action=add_to_cart. The manipulation of the argument… CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-7410 2026-04-30 23:52 2026-04-30 Show GitHub Exploit DB Packet Storm
1423 7.3 HIGH
Network
- - A vulnerability was found in PolarVista xcode-mcp-server 1.0.0. This issue affects the function build_project/run_tests of the file src/index.ts of the component MCP Interface. The manipulation of th… CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-7416 2026-04-30 23:52 2026-04-30 Show GitHub Exploit DB Packet Storm
1424 7.3 HIGH
Network
- - A vulnerability was found in Algovate xhs-mcp 0.8.11. This affects the function xhs_publish_content of the file src/server/mcp.server.ts of the component MCP Interface. Performing a manipulation of t… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-7417 2026-04-30 23:52 2026-04-30 Show GitHub Exploit DB Packet Storm
1425 8.8 HIGH
Network
- - A vulnerability was determined in UTT HiPER 1250GW up to 3.2.7-210907-180535. This vulnerability affects the function strcpy of the file route/goform/NTP. Executing a manipulation of the argument Pro… CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow
CVE-2026-7418 2026-04-30 23:52 2026-04-30 Show GitHub Exploit DB Packet Storm
1426 8.8 HIGH
Network
- - A vulnerability was identified in UTT HiPER 1250GW up to 3.2.7-210907-180535. This issue affects the function strcpy of the file route/goform/formTaskEdit_ap. The manipulation of the argument Profile… CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow
CVE-2026-7419 2026-04-30 23:52 2026-04-30 Show GitHub Exploit DB Packet Storm
1427 8.8 HIGH
Network
- - A security flaw has been discovered in UTT HiPER 1250GW up to 3.2.7-210907-180535. Impacted is the function strcpy of the file route/goform/ConfigAdvideo. The manipulation of the argument Profile res… CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow
CVE-2026-7420 2026-04-30 23:52 2026-04-30 Show GitHub Exploit DB Packet Storm
1428 7.3 HIGH
Network
- - A weakness has been identified in BurtTheCoder mcp-dnstwist up to 1.0.4. Affected by this vulnerability is the function fuzz_domain of the file src/index.ts of the component MCP Interface. Executing … CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-7443 2026-04-30 23:52 2026-04-30 Show GitHub Exploit DB Packet Storm
1429 6.3 MEDIUM
Network
- - A security vulnerability has been detected in ZachHandley ZMCPTools up to 0.2.2. Affected by this issue is some unknown functionality of the file src/managers/ResourceManager.ts of the component MCP … CWE-22
Path Traversal
CVE-2026-7445 2026-04-30 23:52 2026-04-30 Show GitHub Exploit DB Packet Storm
1430 7.3 HIGH
Network
- - A vulnerability was detected in VetCoders mcp-server-semgrep 1.0.0. This affects the function analyze_results/filter_results/export_results/compare_results/scan_directory/create_rule of the file src/… CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-7446 2026-04-30 23:52 2026-04-30 Show GitHub Exploit DB Packet Storm