Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 5, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
250381 - - (複数のベンダ) - UPnP 対応の複数のルータにアクセス制限不備の脆弱性 - - 2011-10-12 14:57 2011-10-6 Show GitHub Exploit DB Packet Storm
250382 10 危険 Iceni Technology - Iceni Argus にバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-3332 2011-10-12 14:42 2011-10-6 Show GitHub Exploit DB Packet Storm
250383 7.5 危険 Likno Software Inc. - WordPress 用 Allwebmenus プラグイン内にある actions.php における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2011-3981 2011-10-11 10:23 2011-10-4 Show GitHub Exploit DB Packet Storm
250384 6 警告 Jerome Schneider - TYPO3 で利用される Drag Drop Mass Upload における任意のファイルをアップロードされる脆弱性 CWE-noinfo
情報不足
CVE-2011-3980 2011-10-11 10:20 2011-07-9 Show GitHub Exploit DB Packet Storm
250385 4.3 警告 Zikula Foundation - Zikula Application Framework の Theme モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-3979 2011-10-11 10:18 2011-09-9 Show GitHub Exploit DB Packet Storm
250386 3.5 注意 LightNEasy - LightNEasy の LightNEasy.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-3978 2011-10-11 10:15 2011-10-4 Show GitHub Exploit DB Packet Storm
250387 7.2 危険 NoMachine - NoMachine NX Node および NX Server の nxconfigure.sh における任意のファイルを読まれる脆弱性 CWE-noinfo
情報不足
CVE-2011-3977 2011-10-11 10:13 2011-08-5 Show GitHub Exploit DB Packet Storm
250388 5 警告 IceWarp, Inc. - IceWarp Mail Server の IceWarp WebMail における設定情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2011-3580 2011-10-11 10:11 2011-09-30 Show GitHub Exploit DB Packet Storm
250389 6.4 警告 IceWarp, Inc. - IceWarp Mail Server の server/webmail.php における任意のファイルを読まれる脆弱性 CWE-399
リソース管理の問題
CVE-2011-3579 2011-10-11 10:10 2011-09-30 Show GitHub Exploit DB Packet Storm
250390 7.5 危険 シマンテック - Symantec IM Manager の管理コンソールにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2011-0554 2011-10-11 10:10 2011-09-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1201 7.3 HIGH
Network
- - A security vulnerability has been detected in edvardlindelof notes-mcp up to 0.1.4. This affects an unknown function of the file notes_mcp.py. The manipulation of the argument root_dir/path leads to … CWE-22
Path Traversal
CVE-2026-7212 2026-04-29 10:00 2026-04-28 Show GitHub Exploit DB Packet Storm
1202 7.3 HIGH
Network
- - A vulnerability was detected in ef10007 MLOps_MCP 1.0.0. This impacts an unknown function of the file fastmcp_server.py of the component save_file Tool. The manipulation of the argument filename/dest… CWE-22
Path Traversal
CVE-2026-7213 2026-04-29 10:00 2026-04-28 Show GitHub Exploit DB Packet Storm
1203 7.3 HIGH
Network
- - A vulnerability was identified in eghuzefa engineer-your-data up to 0.1.3. This vulnerability affects the function read_file/write_file/list_files/file_inf of the file src/server.py. The manipulation… CWE-22
Path Traversal
CVE-2026-7214 2026-04-29 10:00 2026-04-28 Show GitHub Exploit DB Packet Storm
1204 7.3 HIGH
Network
- - A security flaw has been discovered in egtai gmx-vmd-mcp up to 0.1.0. This issue affects the function launch_vmd_gui_tool of the file mcp_server.py of the component VMD Launch Handler. The manipulati… CWE-74
CWE-77
Injection
Command Injection
CVE-2026-7215 2026-04-29 10:00 2026-04-28 Show GitHub Exploit DB Packet Storm
1205 7.3 HIGH
Network
- - A weakness has been identified in donchelo processing-claude-mcp-bridge up to e017b20a4b592a45531a6392f494007f04e661bd. Impacted is an unknown function of the file processing_server.py of the compone… CWE-22
Path Traversal
CVE-2026-7216 2026-04-29 10:00 2026-04-28 Show GitHub Exploit DB Packet Storm
1206 7.3 HIGH
Network
- - A vulnerability has been found in jackwrichards FastlyMCP up to 6f3d0b0e654fc51076badc7fa16c03c461f95620. This impacts an unknown function of the file fastly-mcp.mjs of the component fastly_cli Tool.… CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-7220 2026-04-29 10:00 2026-04-28 Show GitHub Exploit DB Packet Storm
1207 7.3 HIGH
Network
- - A vulnerability was found in TencentCloudBase CloudBase-MCP up to 2.17.0. Affected is the function openUrl of the file mcp/src/interactive-server.ts of the component open-url API Endpoint. The manipu… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-7221 2026-04-29 10:00 2026-04-28 Show GitHub Exploit DB Packet Storm
1208 3.5 LOW
Network
- - A vulnerability was determined in code-projects Coaching Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /cims/modules/student/complaint.php of the compo… CWE-79
CWE-94
Cross-site Scripting
Code Injection
CVE-2026-7222 2026-04-29 10:00 2026-04-28 Show GitHub Exploit DB Packet Storm
1209 7.3 HIGH
Network
- - A vulnerability was identified in BigSweetPotatoStudio HyperChat up to 2.0.0-alpha.63. Affected by this issue is the function fetch of the file packages/core/src/http/aiProxyMiddleware.mts of the com… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-7223 2026-04-29 10:00 2026-04-28 Show GitHub Exploit DB Packet Storm
1210 7.3 HIGH
Network
- - A security flaw has been discovered in SourceCodester Pizzafy Ecommerce System 1.0. This affects the function delete_cart of the file /admin/ajax.php?action=delete_cart. Performing a manipulation of … CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-7224 2026-04-29 10:00 2026-04-28 Show GitHub Exploit DB Packet Storm