Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227721 4.3 警告 シマンテック - Symantec Norton Ghost の Symantec.EasySetup.1 ActiveX コントロールにおけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2009-1517 2012-12-20 19:10 2009-05-4 Show GitHub Exploit DB Packet Storm
227722 7.5 危険 xigla - Absolute Form Processor XE における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2009-1504 2012-12-20 19:10 2009-05-1 Show GitHub Exploit DB Packet Storm
227723 7.5 危険 tigerdms - Tiger DMS の login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-1503 2012-12-20 19:10 2009-05-1 Show GitHub Exploit DB Packet Storm
227724 6.8 警告 projectcms - ProjectCMS の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-1500 2012-12-20 19:10 2009-05-1 Show GitHub Exploit DB Packet Storm
227725 5 警告 webfileexplorer - Web File Explorer におけるデータベースをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-1495 2012-12-20 19:10 2009-05-1 Show GitHub Exploit DB Packet Storm
227726 5 警告 Sendmail Consortium - Sendmail におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-1490 2012-12-20 19:10 2009-05-5 Show GitHub Exploit DB Packet Storm
227727 7.5 危険 rens rikkerink - Fungamez の includes/user.php における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2009-1489 2012-12-20 19:10 2009-04-29 Show GitHub Exploit DB Packet Storm
227728 6.8 警告 rens rikkerink - FunGamez の admin/load.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-1488 2012-12-20 19:10 2009-04-29 Show GitHub Exploit DB Packet Storm
227729 7.5 危険 rens rikkerink - FunGamez の pages/login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-1487 2012-12-20 19:10 2009-04-29 Show GitHub Exploit DB Packet Storm
227730 6.8 警告 studiolounge - index2.php から到達可能な Adam Patterson Studio Lounge Address Book における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2009-1483 2012-12-20 19:10 2009-04-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
221551 5.3 MEDIUM
Network 		gitlab gitlab An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) 8.13 through 12.6.1. It has Incorrect Access Control. NVD-CWE-noinfo
CVE-2019-20148 2024-11-21 13:38 2020-01-14 Show GitHub Exploit DB Packet Storm
221552 5.3 MEDIUM
Network 		gitlab gitlab An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) 9.1 through 12.6.1. It has Incorrect Access Control. NVD-CWE-noinfo
CVE-2019-20147 2024-11-21 13:38 2020-01-14 Show GitHub Exploit DB Packet Storm
221553 5.3 MEDIUM
Network 		gitlab gitlab An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) 11.0 through 12.6. It allows Uncontrolled Resource Consumption. CWE-400
 Uncontrolled Resource Consumption 		CVE-2019-20146 2024-11-21 13:38 2020-01-14 Show GitHub Exploit DB Packet Storm
221554 4.3 MEDIUM
Network 		gitlab gitlab An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) 11.4 through 12.6.1. It has Incorrect Access Control. NVD-CWE-noinfo
CVE-2019-20145 2024-11-21 13:38 2020-01-14 Show GitHub Exploit DB Packet Storm
221555 6.1 MEDIUM
Network 		cththemes citybook
easybook
townhub 		The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow Persistent XSS via the chat widget/page message form. CWE-79
Cross-site Scripting 		CVE-2019-20212 2024-11-21 13:38 2020-01-14 Show GitHub Exploit DB Packet Storm
221556 6.1 MEDIUM
Network 		cththemes citybook
easybook
townhub 		The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow Persistent XSS via Listing Address, Listing Latitude, Listing Longitude, Email Address,… CWE-79
Cross-site Scripting 		CVE-2019-20211 2024-11-21 13:38 2020-01-14 Show GitHub Exploit DB Packet Storm
221557 6.1 MEDIUM
Network 		cththemes citybook
easybook
townhub 		The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow Reflected XSS via a search query. CWE-79
Cross-site Scripting 		CVE-2019-20210 2024-11-21 13:38 2020-01-14 Show GitHub Exploit DB Packet Storm
221558 7.5 HIGH
Network 		cththemes citybook
easybook
townhub 		The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow nsecure Direct Object Reference (IDOR) via wp-admin/admin-ajax.php to delete any page/p… CWE-79
CWE-639
Cross-site Scripting
 Authorization Bypass Through User-Controlled Key 		CVE-2019-20209 2024-11-21 13:38 2020-01-14 Show GitHub Exploit DB Packet Storm
221559 6.1 MEDIUM
Network 		tophub toplist TopList before 2019-09-03 allows XSS via a title. CWE-79
Cross-site Scripting 		CVE-2019-20377 2024-11-21 13:38 2020-01-11 Show GitHub Exploit DB Packet Storm
221560 6.1 MEDIUM
Network 		ganglia ganglia-web ganglia-web (aka Ganglia Web Frontend) through 3.7.5 allows XSS via the header.php cs parameter. CWE-79
Cross-site Scripting 		CVE-2019-20379 2024-11-21 13:38 2020-01-11 Show GitHub Exploit DB Packet Storm