Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 2, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
250411 6.9 警告 PlotSoft L.L.C. - PlotSoft PDFill PDF Editor における権限を取得される脆弱性 CWE-Other
その他
CVE-2011-3690 2011-10-4 10:00 2011-09-27 Show GitHub Exploit DB Packet Storm
250412 7.5 危険 Sonexis Technology, Inc. - Sonexis ConferenceManager における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2011-3688 2011-10-4 09:45 2011-09-27 Show GitHub Exploit DB Packet Storm
250413 4.3 警告 Sonexis Technology, Inc. - Sonexis ConferenceManager におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-3687 2011-10-3 14:56 2011-09-27 Show GitHub Exploit DB Packet Storm
250414 4.3 警告 Sonexis Technology, Inc. - Sonexis ConferenceManager の myAddressBook.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-3686 2011-10-3 14:55 2011-09-27 Show GitHub Exploit DB Packet Storm
250415 1.9 注意 Tembria - Tembria Server Monitor における重要な情報を取得される脆弱性 CWE-310
暗号の問題
CVE-2011-3685 2011-10-3 14:54 2011-09-27 Show GitHub Exploit DB Packet Storm
250416 4.3 警告 Tembria - Tembria Server Monitor におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-3684 2011-10-3 14:52 2011-09-27 Show GitHub Exploit DB Packet Storm
250417 7.5 危険 Newgen Software Technologies Limited - Newgen OmniDocs におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-3645 2011-10-3 14:48 2011-09-27 Show GitHub Exploit DB Packet Storm
250418 7.5 危険 AliBabaClone.com - Alibaba Clone B2B の countrydetails.php におけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4849 2011-09-30 14:24 2011-09-27 Show GitHub Exploit DB Packet Storm
250419 4.3 警告 Diferior - Diferior におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-4850 2011-09-30 14:22 2011-09-27 Show GitHub Exploit DB Packet Storm
250420 7.5 危険 Eclime - Eclime における複数の SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4851 2011-09-30 14:19 2011-09-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 2, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
651 5.3 MEDIUM
Network
- - A security flaw has been discovered in geldata gel-mcp 0.1.0. This impacts the function list_rules/fetch_rule of the file src/gel_mcp/server.py. The manipulation of the argument rule_name results in … New CWE-22
Path Traversal
CVE-2026-7403 2026-04-30 06:16 2026-04-30 Show GitHub Exploit DB Packet Storm
652 7.3 HIGH
Network
- - A weakness has been identified in getsimpletool mcpo-simple-server up to 0.2.0. Affected is the function delete_shared_prompt of the file src/mcpo_simple_server/services/prompt_manager/base_manager.p… New CWE-22
CWE-23
Path Traversal
 Relative Path Traversal
CVE-2026-7404 2026-04-30 06:16 2026-04-30 Show GitHub Exploit DB Packet Storm
653 4.7 MEDIUM
Network
- - A security vulnerability has been detected in SourceCodester Pizzafy Ecommerce System 1.0. Affected by this vulnerability is the function save_settings of the file /pizzafy/admin/ajax.php?action=save… New CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-7407 2026-04-30 06:16 2026-04-30 Show GitHub Exploit DB Packet Storm
654 4.7 MEDIUM
Network
- - A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0. Affected by this issue is the function save_menu of the file /admin/ajax.php?action=save_menu. Performing a manipulation r… New CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-7408 2026-04-30 06:16 2026-04-30 Show GitHub Exploit DB Packet Storm
655 4.4 MEDIUM
Local
- - A security flaw has been discovered in NousResearch hermes-agent 0.8.0. This affects the function _check_sensitive_path of the file tools/file_tools.py. The manipulation results in symlink following.… New CWE-59
CWE-61
Link Following
 UNIX Symbolic Link (Symlink) Following
CVE-2026-7397 2026-04-30 06:16 2026-04-30 Show GitHub Exploit DB Packet Storm
656 7.3 HIGH
Network
- - A weakness has been identified in florensiawidjaja BioinfoMCP up to 7ada7918b9e515604d3c0ae264d3a9af10bf6e54. This vulnerability affects the function Upload of the file bioinfo_mcp_platform/app.py of… New CWE-22
Path Traversal
CVE-2026-7398 2026-04-30 06:16 2026-04-30 Show GitHub Exploit DB Packet Storm
657 7.3 HIGH
Network
- - A security vulnerability has been detected in geekgod382 filesystem-mcp-server 1.0.0. This issue affects the function is_path_allowed of the file server.py of the component read_file_tool/write_file_… New CWE-22
Path Traversal
CVE-2026-7400 2026-04-30 06:16 2026-04-30 Show GitHub Exploit DB Packet Storm
658 4.3 MEDIUM
Network
- - A vulnerability was detected in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. This vulnerability affects unknown code of the file /index.php?action=register of the com… New CWE-79
CWE-94
Cross-site Scripting
Code Injection
CVE-2026-7401 2026-04-30 06:16 2026-04-30 Show GitHub Exploit DB Packet Storm
659 7.5 HIGH
Network
- - PsiTransfer is an open source, self-hosted file sharing solution. Prior to version 2.4.3, the upload PATCH flow under `/files/:uploadId` validates the mounted request path using the still-encoded `re… Update CWE-22
Path Traversal
CVE-2026-41180 2026-04-30 06:08 2026-04-23 Show GitHub Exploit DB Packet Storm
660 8.2 HIGH
Network
- - Open Source Social Network (OSSN) is open-source social networking software developed in PHP. Versions prior to 9.0 are vulnerable to resource exhaustion. An attacker can upload a specially crafted i… Update CWE-400
CWE-770
 Uncontrolled Resource Consumption
 Allocation of Resources Without Limits or Throttling
CVE-2026-41309 2026-04-30 05:56 2026-04-24 Show GitHub Exploit DB Packet Storm