Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 1, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
220731 4.3 警告 MediaWiki - MediaWiki 用 SyntaxHighlight GeSHi 拡張機能の contrib/example.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-4305 2013-10-16 15:16 2013-09-3 Show GitHub Exploit DB Packet Storm
220732 6.5 警告 Kwoksys - Kwoksys Kwok Information Server の IT/hardware-list.dll における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2013-5028 2013-10-16 14:58 2013-08-7 Show GitHub Exploit DB Packet Storm
220733 9 危険 Adaptive Computing - Terascale Open-Source Resource and Queue Manager の pbs_mom における任意のジョブを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-4319 2013-10-16 14:42 2013-09-6 Show GitHub Exploit DB Packet Storm
220734 3.5 注意 Condor Project
レッドハット
- Condor のポリシー定義エバリュエータにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2013-4255 2013-10-16 14:41 2013-08-21 Show GitHub Exploit DB Packet Storm
220735 7.5 危険 Richard Cook - Ruby 用 rgpg gem の lib/rgpg/gpg_helper.rb における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2013-4203 2013-10-16 14:40 2013-08-1 Show GitHub Exploit DB Packet Storm
220736 5 警告 Xymon - Xymon の trend-data デーモンにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2013-4173 2013-10-16 14:40 2013-07-24 Show GitHub Exploit DB Packet Storm
220737 7.8 危険 OvisLink - 複数の AirLive 製品における重要な情報を取得される脆弱性 CWE-310
暗号の問題
CVE-2013-3687 2013-10-16 14:23 2013-06-12 Show GitHub Exploit DB Packet Storm
220738 10 危険 OvisLink - AirLive WL-2600CAM の cgi-bin/operator/param における管理者パスワードを取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-3686 2013-10-16 14:22 2013-06-12 Show GitHub Exploit DB Packet Storm
220739 6.8 警告 シスコシステムズ - Cisco Unified Computing System のファブリックインターコネクトコンポーネントにおける権限を取得される脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2012-4108 2013-10-16 14:17 2013-10-14 Show GitHub Exploit DB Packet Storm
220740 4.6 警告 シスコシステムズ - Cisco Unified Computing System のファブリックインターコネクトコンポーネントにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-4107 2013-10-16 13:51 2013-10-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 1, 2026, 4:54 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
321 7.3 HIGH
Network
- - A weakness has been identified in florensiawidjaja BioinfoMCP up to 7ada7918b9e515604d3c0ae264d3a9af10bf6e54. This vulnerability affects the function Upload of the file bioinfo_mcp_platform/app.py of… New CWE-22
Path Traversal
CVE-2026-7398 2026-04-30 06:16 2026-04-30 Show GitHub Exploit DB Packet Storm
322 7.3 HIGH
Network
- - A security vulnerability has been detected in geekgod382 filesystem-mcp-server 1.0.0. This issue affects the function is_path_allowed of the file server.py of the component read_file_tool/write_file_… New CWE-22
Path Traversal
CVE-2026-7400 2026-04-30 06:16 2026-04-30 Show GitHub Exploit DB Packet Storm
323 4.3 MEDIUM
Network
- - A vulnerability was detected in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. This vulnerability affects unknown code of the file /index.php?action=register of the com… New CWE-79
CWE-94
Cross-site Scripting
Code Injection
CVE-2026-7401 2026-04-30 06:16 2026-04-30 Show GitHub Exploit DB Packet Storm
324 7.5 HIGH
Network
- - PsiTransfer is an open source, self-hosted file sharing solution. Prior to version 2.4.3, the upload PATCH flow under `/files/:uploadId` validates the mounted request path using the still-encoded `re… Update CWE-22
Path Traversal
CVE-2026-41180 2026-04-30 06:08 2026-04-23 Show GitHub Exploit DB Packet Storm
325 8.2 HIGH
Network
- - Open Source Social Network (OSSN) is open-source social networking software developed in PHP. Versions prior to 9.0 are vulnerable to resource exhaustion. An attacker can upload a specially crafted i… Update CWE-400
CWE-770
 Uncontrolled Resource Consumption
 Allocation of Resources Without Limits or Throttling
CVE-2026-41309 2026-04-30 05:56 2026-04-24 Show GitHub Exploit DB Packet Storm
326 8.1 HIGH
Network
- - ERB is a templating system for Ruby. Ruby 2.7.0 (before ERB 2.2.0 was published on rubygems.org) introduced an `@_init` instance variable guard in `ERB#result` and `ERB#run` to prevent code execution… Update CWE-693
 Protection Mechanism Failure
CVE-2026-41316 2026-04-30 05:56 2026-04-24 Show GitHub Exploit DB Packet Storm
327 9.1 CRITICAL
Network
- - Clerk JavaScript is the official JavaScript repository for Clerk authentication. createRouteMatcher in @clerk/nextjs, @clerk/nuxt, and @clerk/astro can be bypassed by certain crafted requests, allowi… Update CWE-436
CWE-863
 Interpretation Conflict
 Incorrect Authorization
CVE-2026-41248 2026-04-30 05:56 2026-04-25 Show GitHub Exploit DB Packet Storm
328 9.1 CRITICAL
Network
- - Jellystat is a free and open source Statistics App for Jellyfin. Prior to version 1.1.10, multiple API endpoints in Jellystat build SQL queries by interpolating unsanitized request-body fields direct… Update CWE-89
SQL Injection
CVE-2026-41167 2026-04-30 05:46 2026-04-23 Show GitHub Exploit DB Packet Storm
329 5.3 MEDIUM
Network
- - LangSmith Client SDKs provide SDK's for interacting with the LangSmith platform. Prior to version 0.5.19 of the JavaScript SDK and version 0.7.31 of the Python SDK, the LangSmith SDK's output redacti… Update CWE-200
CWE-359
CWE-532
Information Exposure
 Exposure of Private Personal Information to an Unauthorized Actor
 Inclusion of Sensitive Information in Log Files
CVE-2026-41182 2026-04-30 05:46 2026-04-23 Show GitHub Exploit DB Packet Storm
330 - - - Noir is a Domain Specific Language for SNARK proving systems that is designed to use any ACIR compatible proving system, and Brillig is the bytecode ACIR uses for non-determinism. Noir programs can i… Update CWE-131
Incorrect Calculation of Buffer Size
CVE-2026-41197 2026-04-30 05:46 2026-04-23 Show GitHub Exploit DB Packet Storm