Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 7, 2026, 2:09 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226461	4.3	警告	Web-Empowered Church Team	-	TYPO3 用の WEC Discussion Forum エクステンションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-6144	2012-12-20 19:10	2009-02-16	Show	GitHub Exploit DB Packet Storm

226462	5	警告	webbiscuits	-	WebBiscuits Modules Controller の faqsupport/wce.download.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-6139	2012-12-20 19:10	2009-02-13	Show	GitHub Exploit DB Packet Storm

226463	7.5	危険	webbiscuits	-	WebBiscuits Modules Controller の adminhead.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-6138	2012-12-20 19:10	2009-02-13	Show	GitHub Exploit DB Packet Storm

226464	7.5	危険	socialengine	-	SocialEngine における CRLF インジェクションの脆弱性	CWE-20 不適切な入力確認	CVE-2008-6121	2012-12-20 19:10	2009-02-11	Show	GitHub Exploit DB Packet Storm

226465	7.5	危険	socialengine	-	SocialEngine の profile_comments.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6120	2012-12-20 19:10	2009-02-11	Show	GitHub Exploit DB Packet Storm

226466	7.5	危険	pilotgroup	-	PG Job Site Pro の homepage.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6117	2012-12-20 19:10	2009-02-11	Show	GitHub Exploit DB Packet Storm

226467	7.5	危険	prozilla	-	Prozilla Hosting Index の directory.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6115	2012-12-20 19:10	2009-02-11	Show	GitHub Exploit DB Packet Storm

226468	4.3	警告	SemanticScuttle	-	SemanticScuttle におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-6113	2012-12-20 19:10	2009-02-11	Show	GitHub Exploit DB Packet Storm

226469	5	警告	Scriptsez.net	-	Ez Ringtone Manager におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-6112	2012-12-20 19:10	2009-02-11	Show	GitHub Exploit DB Packet Storm

226470	10	危険	SemanticScuttle	-	SemanticScuttle における脆弱性	CWE-noinfo 情報不足	CVE-2008-6110	2012-12-20 19:10	2009-02-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
212861	3.7	LOW Network	gitlab	gitlab	An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It allows Information Exposure (issue 5 of 5).	CWE-200 Information Exposure	CVE-2019-9179	2024-11-21 13:51	2019-04-18	Show	GitHub Exploit DB Packet Storm

212862	5.3	MEDIUM Network	gitlab	gitlab	An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It allows Information Exposure (issue 4 of 5).	NVD-CWE-noinfo	CVE-2019-9178	2024-11-21 13:51	2019-04-18	Show	GitHub Exploit DB Packet Storm

212863	6.5	MEDIUM Network	gitlab	gitlab	An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It allows CSRF.	CWE-352 Origin Validation Error	CVE-2019-9176	2024-11-21 13:51	2019-04-18	Show	GitHub Exploit DB Packet Storm

212864	5.3	MEDIUM Network	gitlab	gitlab	An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It allows Information Exposure (issue 3 of 5).	CWE-200 Information Exposure	CVE-2019-9175	2024-11-21 13:51	2019-04-18	Show	GitHub Exploit DB Packet Storm

212865	10.0	CRITICAL Network	gitlab	gitlab	An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It allows SSRF.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2019-9174	2024-11-21 13:51	2019-04-18	Show	GitHub Exploit DB Packet Storm

212866	5.9	MEDIUM Network	gitlab	gitlab	An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It allows Information Exposure (issue 2 of 5).	NVD-CWE-noinfo	CVE-2019-9172	2024-11-21 13:51	2019-04-18	Show	GitHub Exploit DB Packet Storm

212867	3.7	LOW Network	gitlab	gitlab	An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It allows Information Exposure (issue 1 of 5).	CWE-862 Missing Authorization	CVE-2019-9171	2024-11-21 13:51	2019-04-18	Show	GitHub Exploit DB Packet Storm

212868	5.3	MEDIUM Network	gitlab	gitlab	An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Incorrect Access Control.	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2019-9170	2024-11-21 13:51	2019-04-18	Show	GitHub Exploit DB Packet Storm

212869	8.1	HIGH Network	w1.fi fedoraproject opensuse debian synology freebsd	hostapd wpa_supplicant fedora leap backports_sle debian_linux router_manager radius_server freebsd	The implementations of EAP-PWD in wpa_supplicant EAP Peer, when built against a crypto library missing explicit validation on imported elements, do not validate the scalar and element values in EAP-p…	CWE-287 Improper Authentication	CVE-2019-9499	2024-11-21 13:51	2019-04-17	Show	GitHub Exploit DB Packet Storm

212870	8.1	HIGH Network	w1.fi fedoraproject opensuse debian synology freebsd	hostapd wpa_supplicant fedora leap backports_sle debian_linux router_manager radius_server freebsd	The implementations of EAP-PWD in hostapd EAP Server, when built against a crypto library missing explicit validation on imported elements, do not validate the scalar and element values in EAP-pwd-Co…	CWE-287 Improper Authentication	CVE-2019-9498	2024-11-21 13:51	2019-04-17	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed