Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228721 6.9 警告 sshkeychain - SSHKeychain の TunnelRunner における権限を取得される脆弱性 - CVE-2007-4500 2012-12-20 18:33 2007-08-23 Show GitHub Exploit DB Packet Storm
228722 5.5 警告 VMware - EMC VMware Workstation などにおけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-4497 2012-12-20 18:33 2007-09-21 Show GitHub Exploit DB Packet Storm
228723 6.5 警告 VMware - EMC VMware Workstation などにおけるメモリを破損する脆弱性 CWE-399
リソース管理の問題 		CVE-2007-4496 2012-12-20 18:33 2007-09-21 Show GitHub Exploit DB Packet Storm
228724 10 危険 トレンドマイクロ - Windows 用の Trend Micro ServerProtect におけるバッファオーバーフローの脆弱性 - CVE-2007-4490 2012-12-20 18:33 2007-07-27 Show GitHub Exploit DB Packet Storm
228725 4.3 警告 シーメンス - Siemens Gigaset SE361 WLAN ルータにおけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4488 2012-12-20 18:33 2007-08-22 Show GitHub Exploit DB Packet Storm
228726 4.3 警告 WordPress.org - WordPress の WordPress Classic テーマの index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4483 2012-12-20 18:33 2007-08-22 Show GitHub Exploit DB Packet Storm
228727 4.3 警告 WordPress.org - WordPress 用の Pool テーマの index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4482 2012-12-20 18:33 2007-08-22 Show GitHub Exploit DB Packet Storm
228728 4.3 警告 WordPress.org - WordPress 用の Blix テーマなどの index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4481 2012-12-20 18:33 2007-08-16 Show GitHub Exploit DB Packet Storm
228729 4.3 警告 WordPress.org - WordPress 用の Sirius テーマの index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4480 2012-12-20 18:33 2007-08-22 Show GitHub Exploit DB Packet Storm
228730 5 警告 planet technology corp - Planet VC-200M VDSL2 ルータの管理インターフェースにおけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-4477 2012-12-20 18:33 2007-08-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2181 7.3 HIGH
Network 		- - A weakness has been identified in BurtTheCoder mcp-dnstwist up to 1.0.4. Affected by this vulnerability is the function fuzz_domain of the file src/index.ts of the component MCP Interface. Executing … CWE-77
CWE-78
Command Injection
OS Command  		CVE-2026-7443 2026-04-30 23:52 2026-04-30 Show GitHub Exploit DB Packet Storm
2182 6.3 MEDIUM
Network 		- - A security vulnerability has been detected in ZachHandley ZMCPTools up to 0.2.2. Affected by this issue is some unknown functionality of the file src/managers/ResourceManager.ts of the component MCP … CWE-22
Path Traversal 		CVE-2026-7445 2026-04-30 23:52 2026-04-30 Show GitHub Exploit DB Packet Storm
2183 6.3 MEDIUM
Network 		- - A flaw has been found in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknown code of the file /admin/update_customer.php. This manipulation of the argument type/le… CWE-74
CWE-89
Injection
SQL Injection 		CVE-2026-7447 2026-04-30 23:52 2026-04-30 Show GitHub Exploit DB Packet Storm
2184 7.3 HIGH
Network 		- - A vulnerability was detected in VetCoders mcp-server-semgrep 1.0.0. This affects the function analyze_results/filter_results/export_results/compare_results/scan_directory/create_rule of the file src/… CWE-77
CWE-78
Command Injection
OS Command  		CVE-2026-7446 2026-04-30 23:52 2026-04-30 Show GitHub Exploit DB Packet Storm
2185 7.3 HIGH
Network 		- - A security vulnerability has been detected in 1024-lab smart-admin up to 3.30.0. This affects an unknown function of the file /smart-admin-api/druid/index.html of the component Demo Site. The manipul… CWE-266
CWE-284
 Incorrect Privilege Assignment
Improper Access Control 		CVE-2026-7468 2026-04-30 23:52 2026-04-30 Show GitHub Exploit DB Packet Storm
2186 5.3 MEDIUM
Network 		- - The Five Star Restaurant Reservations plugin for WordPress is vulnerable to a payment bypass via PHP type juggling in versions up to, and including, 2.7.16 This is due to the valid_payment() function… CWE-345
 Insufficient Verification of Data Authenticity 		CVE-2026-6498 2026-04-30 23:52 2026-04-30 Show GitHub Exploit DB Packet Storm
2187 7.5 HIGH
Network 		- - The Otter Blocks plugin for WordPress is vulnerable to Purchase Verification Bypass in all versions up to, and including, 3.1.4. This is due to the 'get_customer_data' method relying on an unsigned '… CWE-285
Improper Authorization 		CVE-2026-2892 2026-04-30 23:52 2026-04-30 Show GitHub Exploit DB Packet Storm
2188 6.1 MEDIUM
Network 		frappe press Press, a Frappe custom app that runs Frappe Cloud, manages infrastructure, subscription, marketplace, and software-as-a-service (SaaS). Redirect parameter on login page is vulnerable to reflected XSS… CWE-79
Cross-site Scripting 		CVE-2026-41430 2026-04-30 23:51 2026-04-24 Show GitHub Exploit DB Packet Storm
2189 8.8 HIGH
Network 		tenda f456_firmware A security flaw has been discovered in Tenda F456 1.0.0.5. The impacted element is the function fromSetIpBind of the file /goform/SetIpBind of the component httpd. The manipulation of the argument pa… CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow 		CVE-2026-7078 2026-04-30 23:38 2026-04-27 Show GitHub Exploit DB Packet Storm
2190 8.8 HIGH
Network 		tenda f456_firmware A weakness has been identified in Tenda F456 1.0.0.5. This affects the function fromAdvSetWan of the file /goform/AdvSetWan of the component httpd. This manipulation of the argument wanmode causes bu… CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow 		CVE-2026-7079 2026-04-30 23:37 2026-04-27 Show GitHub Exploit DB Packet Storm