世界最速で気づき、最速で対応する。

Adobe path-traversal という製品で、CVE-2026-48282 という番号がついた弱点 (脆弱性) が見つかりました。悪用されるとシステム全体を乗っ取られる可能性があります。重要度は CVSS スコア 10.0/10 です。 ※ この弱点は、CISA (アメリカの政府機関) が「すでに実際の攻撃で使われている」と公式に認...

パストラバーサル CWE-22: パストラバーサル Adobe Coldfusion

CVE-2026-55255 high 1日前

【KEV】Simplehelp simple-help の脆弱性 (CVE-2026-48558)

最近検知された脆弱性

直近24時間

すべて見る →

CVE-2026-8310 medium 48分前

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Webbeyaz Web Design Mediküm Web allows Reflected XSS. This issue affects Mediküm Web: through 080...

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Webbeyaz Web Design Mediküm Web allows Reflected XSS. Thi...

CVE-2026-8315 medium 48分前

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Webbeyaz Web Design Mediküm Web allows Stored XSS. This issue affects Mediküm Web: through 080720...

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Webbeyaz Web Design Mediküm Web allows Stored XSS. This i...

CVE-2026-6459 medium 48分前

The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Event Calendar widget in all versions up to, and in...

The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Event Calen...

CVE-2026-6740 medium 48分前

The Nexter Blocks – Gutenberg Blocks, Page Builder & AI Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'commentIcon' parameter in all versions up to, and inc...

The Nexter Blocks – Gutenberg Blocks, Page Builder & AI Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'commentIcon'...

CVE-2026-6820 high 48分前

The VikBooking Hotel Booking Engine & PMS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'email' parameter in all versions up to, and including, 1.8.8 due to insufficient in...

The VikBooking Hotel Booking Engine & PMS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'email' parameter in all versions up to, and...

CVE-2026-8307 critical 48分前

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Webbeyaz Web Design Mediküm Web allows SQL Injection. This issue affects Mediküm Web: through 080...

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Webbeyaz Web Design Mediküm Web allows SQL Injection. Thi...

CVE-2026-5356 high 48分前

The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Improper Input Validation in all versions up to, and including, 5.4.0. This is due to the plug...

The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Improper Input Validation in all versions up to, and i...

CVE-2026-5459 medium 48分前

The User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, an...

The User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration plugin for WordPress is vulnerable to Insecure Direct Ob...

AIや機械から使う

REST API

AIや機械から使う

GET /api/v1/vulnerabilities?severity=critical&kev=1

MCP Server AI agents

Claude / Cursor / etc.

claude mcp add secpulse https://secpulse.variety777.site/mcp

世界最速で気づき、最速で対応する。

ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Limitation of a...

【KEV】langflow の脆弱性 (CVE-2026-55255)

【KEV】Joomshaper ollyo に 危険なファイルアップロード (CVE-2026-48908)

【KEV】Joomlack page-builder-ck に 危険なファイルアップロード (CVE-2026-56290)

【KEV】Microsoft deserialization に 安全でないデシリアライゼーション (CVE-2026-45659)

【KEV】Simplehelp simple-help の脆弱性 (CVE-2026-48558)

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Webbeyaz Web Design Mediküm Web allows Reflected XSS. This issue affects Mediküm Web: through 080...

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Webbeyaz Web Design Mediküm Web allows Stored XSS. This issue affects Mediküm Web: through 080720...

The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Event Calendar widget in all versions up to, and in...

The Nexter Blocks – Gutenberg Blocks, Page Builder & AI Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'commentIcon' parameter in all versions up to, and inc...

The VikBooking Hotel Booking Engine & PMS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'email' parameter in all versions up to, and including, 1.8.8 due to insufficient in...

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Webbeyaz Web Design Mediküm Web allows SQL Injection. This issue affects Mediküm Web: through 080...

The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Improper Input Validation in all versions up to, and including, 5.4.0. This is due to the plug...

The User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, an...

AIや機械から使う

AIや機械から使う

Claude / Cursor / etc.

🍪 Cookie について

【KEV】Joomshaper ollyo に危険なファイルアップロード (CVE-2026-48908)

【KEV】Joomlack page-builder-ck に危険なファイルアップロード (CVE-2026-56290)

【KEV】Microsoft deserialization に安全でないデシリアライゼーション (CVE-2026-45659)