Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227381 7.5 危険 XOOPS - XOOPS の xhresim モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5665 2012-12-20 18:52 2008-12-18 Show GitHub Exploit DB Packet Storm
227382 9.3 危険 Realtek Semiconductor Corp - Realtek Media Player におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-5664 2012-12-20 18:52 2008-12-18 Show GitHub Exploit DB Packet Storm
227383 7.5 危険 Quassel IRC - Quassel Core における CRLF インジェクションの脆弱性 CWE-20
不適切な入力確認 		CVE-2008-5657 2012-12-20 18:52 2008-10-27 Show GitHub Exploit DB Packet Storm
227384 4.3 警告 TYPO3 Association - TYPO3 の felogin system エクステンション用の frontend プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-5656 2012-12-20 18:52 2008-12-17 Show GitHub Exploit DB Packet Storm
227385 5 警告 Edgewall Software - Trac の HTML サニタイズフィルタにおけるフィッシング攻撃を実行される脆弱性 CWE-noinfo
情報不足 		CVE-2008-5647 2012-12-20 18:52 2008-12-17 Show GitHub Exploit DB Packet Storm
227386 7.5 危険 Edgewall Software - Trac におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2008-5646 2012-12-20 18:52 2008-12-17 Show GitHub Exploit DB Packet Storm
227387 4.3 警告 TYPO3 Association - TYPO3 用の file backend モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-5644 2012-12-20 18:52 2008-12-17 Show GitHub Exploit DB Packet Storm
227388 4.3 警告 txtblogcms - TxtBlog の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-5639 2012-12-20 18:52 2008-12-17 Show GitHub Exploit DB Packet Storm
227389 6.8 警告 qualityunit - Post Affiliate Pro の merchants/index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5630 2012-12-20 18:52 2008-12-17 Show GitHub Exploit DB Packet Storm
227390 7.5 危険 turnkeyarcade - Turnkey Arcade Script の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5629 2012-12-20 18:52 2008-12-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209891 6.5 MEDIUM
Network 		gitlab gitlab An issue has been discovered in GitLab affecting versions from 12.6.2 prior to 12.10.13. GitLab was vulnerable to a stored XSS by in the blob view feature. CWE-79
Cross-site Scripting 		CVE-2020-13329 2024-11-21 14:01 2020-10-1 Show GitHub Exploit DB Packet Storm
209892 4.8 MEDIUM
Network 		gitlab gitlab An issue has been discovered in GitLab affecting versions prior to 13.1.2, 13.0.8 and 12.10.13. GitLab was vulnerable to a stored XSS by using the PyPi files API. CWE-79
Cross-site Scripting 		CVE-2020-13328 2024-11-21 14:01 2020-10-1 Show GitHub Exploit DB Packet Storm
209893 4.3 MEDIUM
Network 		gitlab gitlab A vulnerability was discovered in GitLab versions prior to 13.1. Under certain conditions the restriction for Github project import could be bypassed. NVD-CWE-noinfo
CVE-2020-13326 2024-11-21 14:01 2020-10-1 Show GitHub Exploit DB Packet Storm
209894 7.1 HIGH
Network 		gitlab gitlab A vulnerability was discovered in GitLab versions prior 13.1. The comment section of the issue page was not restricting the characters properly, potentially resulting in a denial of service. NVD-CWE-noinfo
CVE-2020-13325 2024-11-21 14:01 2020-10-1 Show GitHub Exploit DB Packet Storm
209895 6.5 MEDIUM
Network 		gitlab gitlab A vulnerability was discovered in GitLab versions prior to 13.1. Under certain conditions the private activity of a user could be exposed via the API. NVD-CWE-noinfo
CVE-2020-13324 2024-11-21 14:01 2020-10-1 Show GitHub Exploit DB Packet Storm
209896 7.7 HIGH
Network 		gitlab gitlab A vulnerability was discovered in GitLab versions prior 13.1. Under certain conditions private merge requests could be read via Todos NVD-CWE-noinfo
CVE-2020-13323 2024-11-21 14:01 2020-10-1 Show GitHub Exploit DB Packet Storm
209897 7.2 HIGH
Network 		gitlab gitlab A vulnerability was discovered in GitLab versions after 12.9. Due to improper verification of permissions, an unauthorized user can create and delete deploy tokens. CWE-863
 Incorrect Authorization 		CVE-2020-13322 2024-11-21 14:01 2020-10-1 Show GitHub Exploit DB Packet Storm
209898 8.3 HIGH
Network 		gitlab gitlab A vulnerability was discovered in GitLab versions prior to 13.1. Username format restrictions could be bypassed allowing for html tags to be added. NVD-CWE-noinfo
CVE-2020-13321 2024-11-21 14:01 2020-10-1 Show GitHub Exploit DB Packet Storm
209899 6.5 MEDIUM
Network 		gitlab gitlab An issue has been discovered in GitLab before version 12.10.13 that allowed a project member with limited permissions to view the project security dashboard. NVD-CWE-noinfo
CVE-2020-13320 2024-11-21 14:01 2020-10-1 Show GitHub Exploit DB Packet Storm
209900 4.3 MEDIUM
Network 		gitlab gitlab An issue has been discovered in GitLab affecting versions prior to 13.1.2, 13.0.8 and 12.10.13. Missing permission check for adding time spent on an issue. CWE-862
 Missing Authorization 		CVE-2020-13319 2024-11-21 14:01 2020-10-1 Show GitHub Exploit DB Packet Storm