Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 3, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
213991 7.5 危険 xmonad - xmonad-contrib の XMonad.Hooks.DynamicLog モジュールにおける任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2013-1436 2014-10-8 15:28 2013-07-8 Show GitHub Exploit DB Packet Storm
213992 7.5 危険 Tildeslash Ltd. - M/Monit における他のユーザのパスワードを変更される脆弱性 CWE-255
証明書・パスワード管理
CVE-2014-6607 2014-10-8 15:10 2014-09-19 Show GitHub Exploit DB Packet Storm
213993 6.8 警告 Tildeslash Ltd. - M/Monit におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2014-6409 2014-10-8 15:03 2014-09-19 Show GitHub Exploit DB Packet Storm
213994 6.8 警告 Jolokia - Jolokia におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2014-0168 2014-10-8 14:56 2014-04-10 Show GitHub Exploit DB Packet Storm
213995 10 危険 オラクル - Oracle Solaris の libXtsol におけるバッファエラーに関する脆弱性 CWE-119
バッファエラー
CVE-2014-0397 2014-10-8 14:55 2014-06-17 Show GitHub Exploit DB Packet Storm
213996 7.5 危険 Apache Software Foundation - Apache Shiro における認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2014-0074 2014-10-8 14:40 2014-10-1 Show GitHub Exploit DB Packet Storm
213997 3.5 注意 Drupal - Drupal 用 Custom Search モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-7870 2014-10-8 14:30 2014-04-2 Show GitHub Exploit DB Packet Storm
213998 3.5 注意 Drupal - Drupal 用 Context Form Alteration モジュールの設定 UI におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-7869 2014-10-8 14:29 2014-04-29 Show GitHub Exploit DB Packet Storm
213999 4.3 警告 LibVNC - LibVNCServer の libvncserver/rfbserver.c の rfbProcessClientNormalMessage 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題
CVE-2014-6054 2014-10-8 14:28 2014-08-18 Show GitHub Exploit DB Packet Storm
214000 6.5 警告 レッドハット - Red Hat CloudForms Management Engine の vmdb/app/controllers/application_controller/performance.rb における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-3642 2014-10-8 14:19 2014-10-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 3, 2026, 4:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
671 8.8 HIGH
Network
- - A vulnerability was identified in UTT HiPER 1250GW up to 3.2.7-210907-180535. This issue affects the function strcpy of the file route/goform/formTaskEdit_ap. The manipulation of the argument Profile… CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow
CVE-2026-7419 2026-04-30 23:52 2026-04-30 Show GitHub Exploit DB Packet Storm
672 8.8 HIGH
Network
- - A security flaw has been discovered in UTT HiPER 1250GW up to 3.2.7-210907-180535. Impacted is the function strcpy of the file route/goform/ConfigAdvideo. The manipulation of the argument Profile res… CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow
CVE-2026-7420 2026-04-30 23:52 2026-04-30 Show GitHub Exploit DB Packet Storm
673 7.3 HIGH
Network
- - A weakness has been identified in BurtTheCoder mcp-dnstwist up to 1.0.4. Affected by this vulnerability is the function fuzz_domain of the file src/index.ts of the component MCP Interface. Executing … CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-7443 2026-04-30 23:52 2026-04-30 Show GitHub Exploit DB Packet Storm
674 6.3 MEDIUM
Network
- - A security vulnerability has been detected in ZachHandley ZMCPTools up to 0.2.2. Affected by this issue is some unknown functionality of the file src/managers/ResourceManager.ts of the component MCP … CWE-22
Path Traversal
CVE-2026-7445 2026-04-30 23:52 2026-04-30 Show GitHub Exploit DB Packet Storm
675 7.3 HIGH
Network
- - A vulnerability was detected in VetCoders mcp-server-semgrep 1.0.0. This affects the function analyze_results/filter_results/export_results/compare_results/scan_directory/create_rule of the file src/… CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-7446 2026-04-30 23:52 2026-04-30 Show GitHub Exploit DB Packet Storm
676 6.3 MEDIUM
Network
- - A flaw has been found in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknown code of the file /admin/update_customer.php. This manipulation of the argument type/le… CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-7447 2026-04-30 23:52 2026-04-30 Show GitHub Exploit DB Packet Storm
677 7.3 HIGH
Network
- - A security vulnerability has been detected in 1024-lab smart-admin up to 3.30.0. This affects an unknown function of the file /smart-admin-api/druid/index.html of the component Demo Site. The manipul… CWE-266
CWE-284
 Incorrect Privilege Assignment
Improper Access Control
CVE-2026-7468 2026-04-30 23:52 2026-04-30 Show GitHub Exploit DB Packet Storm
678 5.3 MEDIUM
Network
- - The Five Star Restaurant Reservations plugin for WordPress is vulnerable to a payment bypass via PHP type juggling in versions up to, and including, 2.7.16 This is due to the valid_payment() function… CWE-345
 Insufficient Verification of Data Authenticity
CVE-2026-6498 2026-04-30 23:52 2026-04-30 Show GitHub Exploit DB Packet Storm
679 7.5 HIGH
Network
- - The Otter Blocks plugin for WordPress is vulnerable to Purchase Verification Bypass in all versions up to, and including, 3.1.4. This is due to the 'get_customer_data' method relying on an unsigned '… CWE-285
Improper Authorization
CVE-2026-2892 2026-04-30 23:52 2026-04-30 Show GitHub Exploit DB Packet Storm
680 6.1 MEDIUM
Network
frappe press Press, a Frappe custom app that runs Frappe Cloud, manages infrastructure, subscription, marketplace, and software-as-a-service (SaaS). Redirect parameter on login page is vulnerable to reflected XSS… CWE-79
Cross-site Scripting
CVE-2026-41430 2026-04-30 23:51 2026-04-24 Show GitHub Exploit DB Packet Storm