Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
227081 7.5 危険 quickersite - QuickerSite の asp/includes/contact.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6678 2012-12-20 19:10 2009-04-8 Show GitHub Exploit DB Packet Storm
227082 7.5 危険 quickersite - QuickerSite の fckeditor251/editor/filemanager/connectors/asp/upload.asp における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2008-6677 2012-12-20 19:10 2009-04-8 Show GitHub Exploit DB Packet Storm
227083 5 警告 quickersite - QuickerSite における重要な情報を取得される脆弱性 CWE-20
不適切な入力確認
CVE-2008-6676 2012-12-20 19:10 2009-04-8 Show GitHub Exploit DB Packet Storm
227084 2.1 注意 ZoneMinder - Gentoo Linux 上で稼動する ZoneMinder におけるデータベースユーザ名などを取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-6756 2012-12-20 19:10 2008-12-12 Show GitHub Exploit DB Packet Storm
227085 7.5 危険 SilverStripe - SilverStripe における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6753 2012-12-20 19:10 2008-03-14 Show GitHub Exploit DB Packet Storm
227086 4.3 警告 quickersite - QuickerSite におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-6675 2012-12-20 19:10 2009-04-8 Show GitHub Exploit DB Packet Storm
227087 5 警告 quickersite - QuickerSite の mailPage.asp における電子メールアカウントをメッセージでフラッドされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-6674 2012-12-20 19:10 2009-04-8 Show GitHub Exploit DB Packet Storm
227088 7.5 危険 quickersite - QuickerSite の asp/bs_login.asp における admin パスワードを変更される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-6673 2012-12-20 19:10 2009-04-8 Show GitHub Exploit DB Packet Storm
227089 5 警告 vertex4 - Vertex4 SunAge におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題
CVE-2008-6672 2012-12-20 19:10 2009-04-8 Show GitHub Exploit DB Packet Storm
227090 5 警告 vertex4 - Vertex4 SunAge におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題
CVE-2008-6671 2012-12-20 19:10 2009-04-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2521 6.3 MEDIUM
Network
- - A vulnerability was detected in Dayoooun hwpx-mcp 0.2.0. This affects the function save_document/export_to_text/export_to_html of the file mcp-server/src/index.ts of the component MCP Interface. Perf… CWE-22
Path Traversal
CVE-2026-7599 2026-05-6 04:17 2026-05-2 Show GitHub Exploit DB Packet Storm
2522 6.3 MEDIUM
Network
- - A flaw has been found in ArtMin96 yii2-mcp-server 1.0.2. This impacts the function yii_command_help/yii_execute_command of the file src/index.ts of the component MCP Interface. Executing a manipulati… CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-7600 2026-05-6 04:17 2026-05-2 Show GitHub Exploit DB Packet Storm
2523 4.3 MEDIUM
Network
- - A vulnerability has been found in Open5GS up to 2.7.6. Affected is an unknown function of the file src/amf/gmm-handler.c of the component AMF. The manipulation of the argument reg_type leads to denia… CWE-404
 Improper Resource Shutdown or Release
CVE-2026-7601 2026-05-6 04:17 2026-05-2 Show GitHub Exploit DB Packet Storm
2524 6.4 MEDIUM
Network
- - The Maxi Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `/wp-json/maxi-blocks/v1.0/style-card` REST API endpoint in all versions up to, and including, 2.1.9 due to i… CWE-79
Cross-site Scripting
CVE-2026-6378 2026-05-6 04:17 2026-05-2 Show GitHub Exploit DB Packet Storm
2525 6.4 MEDIUM
Network
- - The Simple Link Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `qcopd-directory` shortcode in all versions up to, and including, 8.9.2. This is due to in… CWE-79
Cross-site Scripting
CVE-2026-7209 2026-05-6 04:17 2026-05-2 Show GitHub Exploit DB Packet Storm
2526 6.3 MEDIUM
Network
- - A vulnerability was found in JeecgBoot up to 3.9.1. Affected by this vulnerability is an unknown functionality of the file /sys/fillRule/edit of the component FillRuleUtil Component. The manipulation… CWE-266
CWE-285
 Incorrect Privilege Assignment
Improper Authorization
CVE-2026-7602 2026-05-6 04:17 2026-05-2 Show GitHub Exploit DB Packet Storm
2527 5.3 MEDIUM
Network
- - The App Builder – Create Native Android & iOS Apps On The Flight plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to and including 5.6.0. This is due to miss… CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2026-7638 2026-05-6 04:17 2026-05-2 Show GitHub Exploit DB Packet Storm
2528 6.5 MEDIUM
Network
- - The Widgets for Social Photo Feed plugin for WordPress is vulnerable to unauthorized access of data and modification of data due to a missing capability check on the '/trustindex_feed_hook_instagram/… CWE-200
Information Exposure
CVE-2025-14726 2026-05-6 04:17 2026-05-2 Show GitHub Exploit DB Packet Storm
2529 6.4 MEDIUM
Network
- - The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the className, classHook, and blockId attributes in th… CWE-79
Cross-site Scripting
CVE-2026-4658 2026-05-6 04:17 2026-05-2 Show GitHub Exploit DB Packet Storm
2530 9.8 CRITICAL
Network
- - The User Registration Advanced Fields plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'URAF_AJAX::method_upload' function in all versions up to… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2026-4882 2026-05-6 04:17 2026-05-2 Show GitHub Exploit DB Packet Storm