Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
227941 7.5 危険 ruven pillay - IIPImage Server の FastCGI プログラムにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-4230 2012-12-20 19:28 2009-12-8 Show GitHub Exploit DB Packet Storm
227942 4.3 警告 Xfig project - Xfig の u_bound.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2009-4228 2012-12-20 19:28 2009-12-8 Show GitHub Exploit DB Packet Storm
227943 6.8 警告 Xfig project - Xfig の f_readold.c におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-4227 2012-12-20 19:28 2009-12-8 Show GitHub Exploit DB Packet Storm
227944 7.1 危険 サン・マイクロシステムズ - Sun OpenSolaris のカーネルにおけるサービス運用妨害 (DoS) の脆弱性 CWE-362
競合状態
CVE-2009-4226 2012-12-20 19:28 2009-12-3 Show GitHub Exploit DB Packet Storm
227945 7.5 危険 smartisoft - phpBazar における管理コントロールパネルへのアクセス権を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-4222 2012-12-20 19:28 2009-12-7 Show GitHub Exploit DB Packet Storm
227946 7.5 危険 smartisoft - phpBazar の classified.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-4221 2012-12-20 19:28 2009-12-7 Show GitHub Exploit DB Packet Storm
227947 7.5 危険 raphael mazoyer - PointComma の includes/classes/pctemplate.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2009-4220 2012-12-20 19:28 2009-12-7 Show GitHub Exploit DB Packet Storm
227948 7.5 危険 ringsworld - Flashlight Free Edition の admin.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2009-4205 2012-12-20 19:28 2009-12-4 Show GitHub Exploit DB Packet Storm
227949 7.5 危険 ringsworld - Flashlight Free Edition の read.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-4204 2012-12-20 19:28 2009-12-4 Show GitHub Exploit DB Packet Storm
227950 7.5 危険 vollmar - Joomla! 用の Seminar コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-4200 2012-12-20 19:28 2009-12-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
195241 4.3 MEDIUM
Network
gitlab gitlab Potential DoS was identified in gitlab-shell in GitLab CE/EE version 12.6.0 or above, which allows an attacker to spike the server resource utilization via gitlab-shell command. CWE-400
 Uncontrolled Resource Consumption
CVE-2021-22177 2024-11-21 14:49 2021-04-2 Show GitHub Exploit DB Packet Storm
195242 6.5 MEDIUM
Network
vmware cloud_foundation
vrealize_suite_lifecycle_manager
vrealize_operations_manager
Arbitrary file write vulnerability in vRealize Operations Manager API (CVE-2021-21983) prior to 8.4 may allow an authenticated malicious actor with network access to the vRealize Operations Manager A… NVD-CWE-noinfo
CVE-2021-21983 2024-11-21 14:49 2021-04-1 Show GitHub Exploit DB Packet Storm
195243 7.5 HIGH
Network
vmware cloud_foundation
vrealize_suite_lifecycle_manager
vrealize_operations_manager
Server Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975) prior to 8.4 may allow a malicious actor with network access to the vRealize Operations Manager API can perform a Serve… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2021-21975 2024-11-21 14:49 2021-04-1 Show GitHub Exploit DB Packet Storm
195244 4.4 MEDIUM
Local
gitlab gitlab In all versions of GitLab, marshalled session keys were being stored in Redis. CWE-312
 Cleartext Storage of Sensitive Information
CVE-2021-22194 2024-11-21 14:49 2021-03-27 Show GitHub Exploit DB Packet Storm
195245 5.5 MEDIUM
Local
gitlab gitlab An information disclosure issue in GitLab starting from version 12.8 allowed a user with access to the server logs to see sensitive information that wasn't properly redacted. CWE-532
 Inclusion of Sensitive Information in Log Files
CVE-2021-22184 2024-11-21 14:49 2021-03-27 Show GitHub Exploit DB Packet Storm
195246 4.3 MEDIUM
Network
gitlab gitlab An issue has been discovered in GitLab affecting all versions starting from 13.4. Improper access control allows unauthorized users to access details on analytic pages. CWE-425
 Direct Request ('Forced Browsing')
CVE-2021-22180 2024-11-21 14:49 2021-03-27 Show GitHub Exploit DB Packet Storm
195247 4.3 MEDIUM
Network
gitlab gitlab Improper authorization in GitLab 12.8+ allows a guest user in a private project to view tag data that should be inaccessible on the releases page CWE-200
Information Exposure
CVE-2021-22172 2024-11-21 14:49 2021-03-27 Show GitHub Exploit DB Packet Storm
195248 4.3 MEDIUM
Network
gitlab gitlab An issue was identified in GitLab EE 13.4 or later which leaked internal IP address via error messages. CWE-209
Information Exposure Through an Error Message
CVE-2021-22169 2024-11-21 14:49 2021-03-25 Show GitHub Exploit DB Packet Storm
195249 3.5 LOW
Network
gitlab gitlab An issue has been discovered in GitLab affecting all versions starting with 7.1. A member of a private group was able to validate the use of a specific name for private project. CWE-209
Information Exposure Through an Error Message
CVE-2021-22193 2024-11-21 14:49 2021-03-25 Show GitHub Exploit DB Packet Storm
195250 8.8 HIGH
Network
gitlab gitlab An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.2 allowing unauthorized authenticated users to execute arbitrary code on the server. NVD-CWE-noinfo
CVE-2021-22192 2024-11-21 14:49 2021-03-25 Show GitHub Exploit DB Packet Storm