Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228161 4.3 警告 pro search - PRO-Search におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0207 2012-12-20 18:34 2008-01-9 Show GitHub Exploit DB Packet Storm
228162 4.3 警告 WordPress.org - WordPress 用の Captcha! プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0206 2012-12-20 18:34 2008-01-9 Show GitHub Exploit DB Packet Storm
228163 4.3 警告 WordPress.org - WordPress 用の Math Comment Spam Protection プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0205 2012-12-20 18:34 2008-01-9 Show GitHub Exploit DB Packet Storm
228164 4.3 警告 WordPress.org - WordPress 用の Math Comment Spam Protection プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0204 2012-12-20 18:34 2008-01-9 Show GitHub Exploit DB Packet Storm
228165 4.3 警告 WordPress.org - WordPress 用の Cryptographp プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0203 2012-12-20 18:34 2008-01-9 Show GitHub Exploit DB Packet Storm
228166 5 警告 pro search - PRO-Search におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2008-0199 2012-12-20 18:34 2008-01-9 Show GitHub Exploit DB Packet Storm
228167 4.3 警告 WordPress.org - WordPress 用の WP-ContactForm プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-0198 2012-12-20 18:34 2008-01-9 Show GitHub Exploit DB Packet Storm
228168 4.3 警告 WordPress.org - WordPress 用の WP-ContactForm プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0197 2012-12-20 18:34 2008-01-9 Show GitHub Exploit DB Packet Storm
228169 5 警告 WordPress.org - WordPress におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-0196 2012-12-20 18:34 2008-01-9 Show GitHub Exploit DB Packet Storm
228170 5 警告 WordPress.org - WordPress における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2008-0195 2012-12-20 18:34 2008-01-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2541 5.6 MEDIUM
Network 		- - A security vulnerability has been detected in Xuxueli xxl-job up to 3.3.2. The impacted element is an unknown function of the file xxl-job-admin/src/main/java/com/xxl/job/admin/scheduler/openapi/Open… CWE-320
CWE-321
 Key Management Errors
 Use of Hard-coded Cryptographic Key 		CVE-2026-7306 2026-04-29 10:00 2026-04-29 Show GitHub Exploit DB Packet Storm
2542 7.3 HIGH
Network 		- - A vulnerability was detected in eiceblue spire-doc-mcp-server 1.0.0. This affects the function get_doc_path of the file src/spire_doc_mcp/api/base.py. Performing a manipulation of the argument docume… CWE-22
Path Traversal 		CVE-2026-7314 2026-04-29 10:00 2026-04-29 Show GitHub Exploit DB Packet Storm
2543 7.3 HIGH
Network 		- - A flaw has been found in eiceblue spire-pdf-mcp-server 0.1.1. This impacts the function get_pdf_path of the file src/spire_pdf_mcp/server.py of the component PDF File Handler. Executing a manipulatio… CWE-22
Path Traversal 		CVE-2026-7315 2026-04-29 10:00 2026-04-29 Show GitHub Exploit DB Packet Storm
2544 5.9 MEDIUM
Local 		- - A vulnerability was detected in elie mcp-project 0.1.0. The affected element is the function search_papers of the file research_server.py. The manipulation of the argument topic results in path trave… CWE-22
Path Traversal 		CVE-2026-7318 2026-04-29 10:00 2026-04-29 Show GitHub Exploit DB Packet Storm
2545 7.3 HIGH
Network 		- - A flaw has been found in elinsky execution-system-mcp 0.1.0. The impacted element is the function _get_context_file_path of the file src/execution_system_mcp/server.py of the component add_action Too… CWE-22
Path Traversal 		CVE-2026-7319 2026-04-29 10:00 2026-04-29 Show GitHub Exploit DB Packet Storm
2546 7.3 HIGH
Network 		- - A vulnerability has been found in eiliyaabedini aider-mcp up to 667b914301aada695aab0e46d1fb3a7d5e32c8af. Affected is an unknown function of the file aider_mcp.py of the component code_with_ai. The m… CWE-74
CWE-77
Injection
Command Injection 		CVE-2026-7316 2026-04-29 10:00 2026-04-29 Show GitHub Exploit DB Packet Storm
2547 5.0 MEDIUM
Network 		- - A vulnerability was found in Grav CMS up to 1.7.49.5/2.0.0-beta.1. Affected by this vulnerability is the function FileCache::doGet of the file system/src/Grav/Framework/Cache/Adapter/FileCache.php of… CWE-20
CWE-502
 Improper Input Validation 
 Deserialization of Untrusted Data 		CVE-2026-7317 2026-04-29 10:00 2026-04-29 Show GitHub Exploit DB Packet Storm
2548 - - - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. - CVE-2026-5822 2026-04-29 08:16 2026-04-29 Show GitHub Exploit DB Packet Storm
2549 4.7 MEDIUM
Local 		- - Mojic is a CLI tool to transform readable C code into an unrecognizable chaotic stream of emojis. Prior to 2.1.4, the CipherEngine uses a standard equality operator (!==) to verify the HMAC-SHA256 in… CWE-208
 Information Exposure Through Timing Discrepancy 		CVE-2026-41244 2026-04-29 06:18 2026-04-25 Show GitHub Exploit DB Packet Storm
2550 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: NFC: nxp-nci: allow GPIOs to sleep Allow the firmware and enable GPIOs to sleep. This fixes a `WARN_ON' and allows the driver to… NVD-CWE-noinfo
CVE-2026-31545 2026-04-29 05:53 2026-04-25 Show GitHub Exploit DB Packet Storm