Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
226831 4.3 警告 WordPress.org - WPMU の wp-admin/wp-blogs.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-4671 2012-12-20 18:52 2008-10-22 Show GitHub Exploit DB Packet Storm
226832 9.3 危険 qvod - QVOD Player の QvodInsert.QvodCtrl.1 ActiveX コンポーネントにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-4664 2012-12-20 18:52 2008-10-21 Show GitHub Exploit DB Packet Storm
226833 4.3 警告 TYPO3 Association - TYPO3 用の Page Improvements エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-4661 2012-12-20 18:52 2008-10-21 Show GitHub Exploit DB Packet Storm
226834 7.5 危険 TYPO3 Association - TYPO3 用の M1 Intern エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-4660 2012-12-20 18:52 2008-10-21 Show GitHub Exploit DB Packet Storm
226835 7.5 危険 TYPO3 Association - TYPO3 用の Mannschaftsliste エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-4659 2012-12-20 18:52 2008-10-21 Show GitHub Exploit DB Packet Storm
226836 7.5 危険 TYPO3 Association - TYPO3 用の JobControl エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-4658 2012-12-20 18:52 2008-10-21 Show GitHub Exploit DB Packet Storm
226837 7.5 危険 TYPO3 Association - TYPO3 用の Econda エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-4657 2012-12-20 18:52 2008-10-21 Show GitHub Exploit DB Packet Storm
226838 7.5 危険 TYPO3 Association - TYPO3 用の Frontend Users View エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-4656 2012-12-20 18:52 2008-10-21 Show GitHub Exploit DB Packet Storm
226839 7.5 危険 TYPO3 Association - TYPO3 用の Simple survey エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-4655 2012-12-20 18:52 2008-10-21 Show GitHub Exploit DB Packet Storm
226840 9.3 危険 VideoLAN - VLC Media Player の Ty demux プラグインにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-4654 2012-12-20 18:52 2008-10-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1771 6.3 MEDIUM
Network
- - A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0. This affects an unknown function of the file /view_prod.php. This manipulation of the argument ID causes sql injection. The attac… CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-7267 2026-04-29 10:00 2026-04-28 Show GitHub Exploit DB Packet Storm
1772 6.3 MEDIUM
Network
- - A vulnerability has been found in SourceCodester Pizzafy Ecommerce System 1.0. This impacts the function save_category of the file /admin/ajax.php?action=save_category. Such manipulation of the argum… CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-7268 2026-04-29 10:00 2026-04-28 Show GitHub Exploit DB Packet Storm
1773 2.4 LOW
Network
- - A vulnerability was found in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected is an unknown function of the file /index.php?page=product. Performing a manipulation of the argument ID … CWE-79
CWE-94
Cross-site Scripting
Code Injection
CVE-2026-7269 2026-04-29 10:00 2026-04-28 Show GitHub Exploit DB Packet Storm
1774 7.3 HIGH
Network
- - A flaw has been found in WilliamCloudQi matlab-mcp-server up to ab88f6b9bf5f36f725e8628029f7f6dd0d9913ca. The affected element is the function generate_matlab_code/execute_matlab_code of the file src… CWE-22
Path Traversal
CVE-2026-7272 2026-04-29 10:00 2026-04-28 Show GitHub Exploit DB Packet Storm
1775 2.4 LOW
Network
- - A vulnerability was determined in SourceCodester Pharmacy Sales and Inventory System 1.0. The impacted element is the function supplier of the file /index.php?page=supplier. Executing a manipulation … CWE-79
CWE-94
Cross-site Scripting
Code Injection
CVE-2026-7281 2026-04-29 10:00 2026-04-28 Show GitHub Exploit DB Packet Storm
1776 4.7 MEDIUM
Network
- - A vulnerability was identified in SourceCodester Pharmacy Sales and Inventory System 1.0. This affects the function delete_expired of the file /ajax.php?action=delete_expired. The manipulation of the… CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-7282 2026-04-29 10:00 2026-04-29 Show GitHub Exploit DB Packet Storm
1777 4.7 MEDIUM
Network
- - A security flaw has been discovered in SourceCodester Pharmacy Sales and Inventory System 1.0. This impacts the function save_expired of the file /ajax.php?action=save_expired. The manipulation of th… CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-7283 2026-04-29 10:00 2026-04-29 Show GitHub Exploit DB Packet Storm
1778 6.3 MEDIUM
Network
- - A vulnerability was determined in JeecgBoot up to 3.9.1. Impacted is the function SqlInjectionUtil of the file jeecg-boot/jeecg-boot-base-core/src/main/java/org/jeecg/common/util/SqlInjectionUtil.jav… CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-7290 2026-04-29 10:00 2026-04-29 Show GitHub Exploit DB Packet Storm
1779 6.3 MEDIUM
Network
- - A weakness has been identified in o2oa up to 10.0. This affects the function FileAction of the file FileAction.java of the component URL Fetching. Executing a manipulation of the argument fileUrl can… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-7291 2026-04-29 10:00 2026-04-29 Show GitHub Exploit DB Packet Storm
1780 5.6 MEDIUM
Network
- - A security vulnerability has been detected in o2oa up to 10.0. This impacts the function syncFile of the file NodeAgent.java of the component NodeAgent. The manipulation leads to improper authorizati… CWE-266
CWE-285
 Incorrect Privilege Assignment
Improper Authorization
CVE-2026-7292 2026-04-29 10:00 2026-04-29 Show GitHub Exploit DB Packet Storm