Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
214121 5.4 警告 PlayScapeTM - Android 用 MoMinis ライブラリにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-5525 2014-09-17 17:15 2014-09-3 Show GitHub Exploit DB Packet Storm
214122 5.4 警告 Adcolony - Android 用 Adcolony ライブラリにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-5524 2014-09-17 17:15 2014-09-3 Show GitHub Exploit DB Packet Storm
214123 5.4 警告 Gameloft - Android 用 Gameloft ライブラリにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-5529 2014-09-17 17:15 2014-09-3 Show GitHub Exploit DB Packet Storm
214124 4.4 警告 Schneider Electric - Schneider Electric VAMPSET におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2014-5407 2014-09-16 18:50 2014-08-21 Show GitHub Exploit DB Packet Storm
214125 5 警告 VMware - VMware NSX および vCloud Networking and Security における重要な情報を取得される脆弱性 CWE-20
不適切な入力確認
CVE-2014-3796 2014-09-16 18:50 2014-09-11 Show GitHub Exploit DB Packet Storm
214126 4 警告 Moodle - Moodle の mod/forum/lib.php 内の forum_print_latest_discussions 関数における個々の answer-posting 要求を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-3617 2014-09-16 18:49 2014-09-15 Show GitHub Exploit DB Packet Storm
214127 7.5 危険 エンバカデロ・テクノロジーズ - Embarcadero Delphi と C++Builder の VCL にバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2014-0993 2014-09-16 18:11 2014-09-11 Show GitHub Exploit DB Packet Storm
214128 6.5 警告 Tribulant Software - WordPress 用 Tribulant Slideshow Gallery プラグインにおける任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2014-5460 2014-09-16 18:05 2014-08-29 Show GitHub Exploit DB Packet Storm
214129 5 警告 IBM - IBM Rational コラボレーティブ・ライフサイクル・マネージメント などの Rational 製品で使用される Jazz Team Server におけるセッション Cookie をキャプチャされる脆弱性 CWE-200
情報漏えい
CVE-2014-3092 2014-09-16 17:55 2014-09-9 Show GitHub Exploit DB Packet Storm
214130 5 警告 MiniUPnP Project
Linux
- MiniUPnP の miniwget.c の getHTTPレスポンス関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2014-3985 2014-09-16 16:54 2014-04-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 1, 2026, 4:54 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
241 8.8 HIGH
Network
- - A security flaw has been discovered in UTT HiPER 1250GW up to 3.2.7-210907-180535. Impacted is the function strcpy of the file route/goform/ConfigAdvideo. The manipulation of the argument Profile res… New CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow
CVE-2026-7420 2026-04-30 23:52 2026-04-30 Show GitHub Exploit DB Packet Storm
242 7.3 HIGH
Network
- - A weakness has been identified in BurtTheCoder mcp-dnstwist up to 1.0.4. Affected by this vulnerability is the function fuzz_domain of the file src/index.ts of the component MCP Interface. Executing … New CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-7443 2026-04-30 23:52 2026-04-30 Show GitHub Exploit DB Packet Storm
243 6.3 MEDIUM
Network
- - A security vulnerability has been detected in ZachHandley ZMCPTools up to 0.2.2. Affected by this issue is some unknown functionality of the file src/managers/ResourceManager.ts of the component MCP … New CWE-22
Path Traversal
CVE-2026-7445 2026-04-30 23:52 2026-04-30 Show GitHub Exploit DB Packet Storm
244 7.3 HIGH
Network
- - A vulnerability was detected in VetCoders mcp-server-semgrep 1.0.0. This affects the function analyze_results/filter_results/export_results/compare_results/scan_directory/create_rule of the file src/… New CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-7446 2026-04-30 23:52 2026-04-30 Show GitHub Exploit DB Packet Storm
245 6.3 MEDIUM
Network
- - A flaw has been found in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknown code of the file /admin/update_customer.php. This manipulation of the argument type/le… New CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-7447 2026-04-30 23:52 2026-04-30 Show GitHub Exploit DB Packet Storm
246 7.3 HIGH
Network
- - A security vulnerability has been detected in 1024-lab smart-admin up to 3.30.0. This affects an unknown function of the file /smart-admin-api/druid/index.html of the component Demo Site. The manipul… New CWE-266
CWE-284
 Incorrect Privilege Assignment
Improper Access Control
CVE-2026-7468 2026-04-30 23:52 2026-04-30 Show GitHub Exploit DB Packet Storm
247 5.3 MEDIUM
Network
- - The Five Star Restaurant Reservations plugin for WordPress is vulnerable to a payment bypass via PHP type juggling in versions up to, and including, 2.7.16 This is due to the valid_payment() function… New CWE-345
 Insufficient Verification of Data Authenticity
CVE-2026-6498 2026-04-30 23:52 2026-04-30 Show GitHub Exploit DB Packet Storm
248 7.5 HIGH
Network
- - The Otter Blocks plugin for WordPress is vulnerable to Purchase Verification Bypass in all versions up to, and including, 3.1.4. This is due to the 'get_customer_data' method relying on an unsigned '… New CWE-285
Improper Authorization
CVE-2026-2892 2026-04-30 23:52 2026-04-30 Show GitHub Exploit DB Packet Storm
249 6.1 MEDIUM
Network
frappe press Press, a Frappe custom app that runs Frappe Cloud, manages infrastructure, subscription, marketplace, and software-as-a-service (SaaS). Redirect parameter on login page is vulnerable to reflected XSS… Update CWE-79
Cross-site Scripting
CVE-2026-41430 2026-04-30 23:51 2026-04-24 Show GitHub Exploit DB Packet Storm
250 8.8 HIGH
Network
tenda f456_firmware A security flaw has been discovered in Tenda F456 1.0.0.5. The impacted element is the function fromSetIpBind of the file /goform/SetIpBind of the component httpd. The manipulation of the argument pa… New CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow
CVE-2026-7078 2026-04-30 23:38 2026-04-27 Show GitHub Exploit DB Packet Storm