Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
229391 2.6 注意 TYPO3 Association - TYPO3 用の class.tx_indexedsearch.php エクステンションにおけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5069 2012-12-20 18:02 2006-09-27 Show GitHub Exploit DB Packet Storm
229392 5.1 警告 zoomstats - ZoomStats の libs/dbmax/mysql.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5065 2012-12-20 18:02 2006-09-27 Show GitHub Exploit DB Packet Storm
229393 5.1 警告 stefan ritt - Elog におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5063 2012-12-20 18:02 2006-09-27 Show GitHub Exploit DB Packet Storm
229394 5.1 警告 wired community software - WWWthreads におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5059 2012-12-20 18:02 2006-09-27 Show GitHub Exploit DB Packet Storm
229395 7.5 危険 web-news - Web-News の webnews/template.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5053 2012-12-20 18:02 2006-09-27 Show GitHub Exploit DB Packet Storm
229396 5 警告 rob landley - Rob Landley BusyBox の httpd におけるディレクトリトラバーサルの脆弱性 - CVE-2006-5050 2012-12-20 18:02 2006-09-27 Show GitHub Exploit DB Packet Storm
229397 6.8 警告 waltercedric - Joomla! 用の Security Images コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2006-5048 2012-12-20 18:02 2006-07-31 Show GitHub Exploit DB Packet Storm
229398 7.5 危険 phpartenaire - PHPartenaire の dix.php3 における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5032 2012-12-20 18:02 2006-09-27 Show GitHub Exploit DB Packet Storm
229399 7.5 危険 woltlab - wBB の thread.php における SQL インジェクションの脆弱性 - CVE-2006-5029 2012-12-20 18:02 2006-09-27 Show GitHub Exploit DB Packet Storm
229400 5 警告 swsoft - Swsoft Pleask Reload および Pleask の filemanager/filemanager.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-5028 2012-12-20 18:02 2006-09-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 1, 2026, 4:54 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
571 7.3 HIGH
Network
- - A security flaw has been discovered in dubydu sqlite-mcp up to 0.1.0. The affected element is the function extract_to_json of the file src/entry.py. Performing a manipulation of the argument output_f… New CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-7206 2026-04-29 10:00 2026-04-28 Show GitHub Exploit DB Packet Storm
572 7.3 HIGH
Network
- - A weakness has been identified in dvladimirov MCP up to 0.1.0. The impacted element is the function GitSearchRequest of the file mcp_server.py of the component Git Search API. Executing a manipulatio… New CWE-74
CWE-77
Injection
Command Injection
CVE-2026-7211 2026-04-29 10:00 2026-04-28 Show GitHub Exploit DB Packet Storm
573 7.3 HIGH
Network
- - A security vulnerability has been detected in edvardlindelof notes-mcp up to 0.1.4. This affects an unknown function of the file notes_mcp.py. The manipulation of the argument root_dir/path leads to … New CWE-22
Path Traversal
CVE-2026-7212 2026-04-29 10:00 2026-04-28 Show GitHub Exploit DB Packet Storm
574 7.3 HIGH
Network
- - A vulnerability was detected in ef10007 MLOps_MCP 1.0.0. This impacts an unknown function of the file fastmcp_server.py of the component save_file Tool. The manipulation of the argument filename/dest… New CWE-22
Path Traversal
CVE-2026-7213 2026-04-29 10:00 2026-04-28 Show GitHub Exploit DB Packet Storm
575 7.3 HIGH
Network
- - A vulnerability was identified in eghuzefa engineer-your-data up to 0.1.3. This vulnerability affects the function read_file/write_file/list_files/file_inf of the file src/server.py. The manipulation… New CWE-22
Path Traversal
CVE-2026-7214 2026-04-29 10:00 2026-04-28 Show GitHub Exploit DB Packet Storm
576 7.3 HIGH
Network
- - A security flaw has been discovered in egtai gmx-vmd-mcp up to 0.1.0. This issue affects the function launch_vmd_gui_tool of the file mcp_server.py of the component VMD Launch Handler. The manipulati… New CWE-74
CWE-77
Injection
Command Injection
CVE-2026-7215 2026-04-29 10:00 2026-04-28 Show GitHub Exploit DB Packet Storm
577 7.3 HIGH
Network
- - A weakness has been identified in donchelo processing-claude-mcp-bridge up to e017b20a4b592a45531a6392f494007f04e661bd. Impacted is an unknown function of the file processing_server.py of the compone… New CWE-22
Path Traversal
CVE-2026-7216 2026-04-29 10:00 2026-04-28 Show GitHub Exploit DB Packet Storm
578 7.3 HIGH
Network
- - A vulnerability has been found in jackwrichards FastlyMCP up to 6f3d0b0e654fc51076badc7fa16c03c461f95620. This impacts an unknown function of the file fastly-mcp.mjs of the component fastly_cli Tool.… New CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-7220 2026-04-29 10:00 2026-04-28 Show GitHub Exploit DB Packet Storm
579 7.3 HIGH
Network
- - A vulnerability was found in TencentCloudBase CloudBase-MCP up to 2.17.0. Affected is the function openUrl of the file mcp/src/interactive-server.ts of the component open-url API Endpoint. The manipu… New CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-7221 2026-04-29 10:00 2026-04-28 Show GitHub Exploit DB Packet Storm
580 3.5 LOW
Network
- - A vulnerability was determined in code-projects Coaching Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /cims/modules/student/complaint.php of the compo… New CWE-79
CWE-94
Cross-site Scripting
Code Injection
CVE-2026-7222 2026-04-29 10:00 2026-04-28 Show GitHub Exploit DB Packet Storm