Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
208591 6.8 警告 Node Invite project - Drupal 用 Node Invite モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2015-3370 2015-04-24 18:11 2015-01-28 Show GitHub Exploit DB Packet Storm
208592 4 警告 Havard Pedersen - Drupal 用 Certify モジュールにおけるアクセス制限を回避される脆弱性 CWE-200
情報漏えい
CVE-2015-3404 2015-04-24 16:57 2015-01-14 Show GitHub Exploit DB Packet Storm
208593 5.8 警告 .VDMi/ - Drupal 用 Commerce WeDeal モジュールにおけるオープンリダイレクトの脆弱性 CWE-Other
その他
CVE-2015-3393 2015-04-24 16:55 2015-02-3 Show GitHub Exploit DB Packet Storm
208594 5 警告 Path Breadcrumbs project - Drupal 用 Path Breadcrumbs モジュールにおけるアクセス制限を回避される脆弱性 CWE-200
情報漏えい
CVE-2015-3391 2015-04-24 16:55 2015-02-4 Show GitHub Exploit DB Packet Storm
208595 3.5 注意 Bryan Sharpe - Drupal 用 Ajax Timeline モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-3392 2015-04-24 16:55 2014-02-4 Show GitHub Exploit DB Packet Storm
208596 3.5 注意 Facebook Album Fetcher project - Drupal 用 Facebook Album Fetcher モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-3390 2015-04-24 16:55 2015-02-4 Show GitHub Exploit DB Packet Storm
208597 3.5 注意 pixture - Drupal 用 Public Download Count モジュールの Download counts report ページにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-3389 2015-04-24 16:55 2015-02-4 Show GitHub Exploit DB Packet Storm
208598 5.8 警告 Commerce Balanced Payments project - Drupal 用 Commerce Balanced Payments モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2015-3388 2015-04-24 16:55 2015-02-11 Show GitHub Exploit DB Packet Storm
208599 3.5 注意 Taxonomy Tools project - Drupal 用 Taxonomy Tools モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-3387 2015-04-24 16:55 2015-02-11 Show GitHub Exploit DB Packet Storm
208600 3.5 注意 Node Access Product project - Drupal 用 Node Access Product モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-3386 2015-04-24 16:55 2015-02-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 1, 2026, 4:54 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
241 8.8 HIGH
Network
- - A security flaw has been discovered in UTT HiPER 1250GW up to 3.2.7-210907-180535. Impacted is the function strcpy of the file route/goform/ConfigAdvideo. The manipulation of the argument Profile res… New CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow
CVE-2026-7420 2026-04-30 23:52 2026-04-30 Show GitHub Exploit DB Packet Storm
242 7.3 HIGH
Network
- - A weakness has been identified in BurtTheCoder mcp-dnstwist up to 1.0.4. Affected by this vulnerability is the function fuzz_domain of the file src/index.ts of the component MCP Interface. Executing … New CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-7443 2026-04-30 23:52 2026-04-30 Show GitHub Exploit DB Packet Storm
243 6.3 MEDIUM
Network
- - A security vulnerability has been detected in ZachHandley ZMCPTools up to 0.2.2. Affected by this issue is some unknown functionality of the file src/managers/ResourceManager.ts of the component MCP … New CWE-22
Path Traversal
CVE-2026-7445 2026-04-30 23:52 2026-04-30 Show GitHub Exploit DB Packet Storm
244 7.3 HIGH
Network
- - A vulnerability was detected in VetCoders mcp-server-semgrep 1.0.0. This affects the function analyze_results/filter_results/export_results/compare_results/scan_directory/create_rule of the file src/… New CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-7446 2026-04-30 23:52 2026-04-30 Show GitHub Exploit DB Packet Storm
245 6.3 MEDIUM
Network
- - A flaw has been found in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknown code of the file /admin/update_customer.php. This manipulation of the argument type/le… New CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-7447 2026-04-30 23:52 2026-04-30 Show GitHub Exploit DB Packet Storm
246 7.3 HIGH
Network
- - A security vulnerability has been detected in 1024-lab smart-admin up to 3.30.0. This affects an unknown function of the file /smart-admin-api/druid/index.html of the component Demo Site. The manipul… New CWE-266
CWE-284
 Incorrect Privilege Assignment
Improper Access Control
CVE-2026-7468 2026-04-30 23:52 2026-04-30 Show GitHub Exploit DB Packet Storm
247 5.3 MEDIUM
Network
- - The Five Star Restaurant Reservations plugin for WordPress is vulnerable to a payment bypass via PHP type juggling in versions up to, and including, 2.7.16 This is due to the valid_payment() function… New CWE-345
 Insufficient Verification of Data Authenticity
CVE-2026-6498 2026-04-30 23:52 2026-04-30 Show GitHub Exploit DB Packet Storm
248 7.5 HIGH
Network
- - The Otter Blocks plugin for WordPress is vulnerable to Purchase Verification Bypass in all versions up to, and including, 3.1.4. This is due to the 'get_customer_data' method relying on an unsigned '… New CWE-285
Improper Authorization
CVE-2026-2892 2026-04-30 23:52 2026-04-30 Show GitHub Exploit DB Packet Storm
249 6.1 MEDIUM
Network
frappe press Press, a Frappe custom app that runs Frappe Cloud, manages infrastructure, subscription, marketplace, and software-as-a-service (SaaS). Redirect parameter on login page is vulnerable to reflected XSS… Update CWE-79
Cross-site Scripting
CVE-2026-41430 2026-04-30 23:51 2026-04-24 Show GitHub Exploit DB Packet Storm
250 8.8 HIGH
Network
tenda f456_firmware A security flaw has been discovered in Tenda F456 1.0.0.5. The impacted element is the function fromSetIpBind of the file /goform/SetIpBind of the component httpd. The manipulation of the argument pa… New CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow
CVE-2026-7078 2026-04-30 23:38 2026-04-27 Show GitHub Exploit DB Packet Storm