Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 14, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228851 7.5 危険 PreProject.com - PreProjects.com Pre Hotels & Resorts Management System の user_login.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0744 2012-12-20 18:34 2008-02-12 Show GitHub Exploit DB Packet Storm
228852 7.5 危険 powerscripts - PowerScripts PowerNews におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-0742 2012-12-20 18:34 2008-02-12 Show GitHub Exploit DB Packet Storm
228853 7.5 危険 shoppingtree - CP の admin/SA_shipFedExMeter.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0739 2012-12-20 18:34 2008-02-12 Show GitHub Exploit DB Packet Storm
228854 7.5 危険 shoppingtree - CP における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0738 2012-12-20 18:34 2008-02-12 Show GitHub Exploit DB Packet Storm
228855 7.5 危険 shoppingtree - CP の admin/utilities_ConfigHelp.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0737 2012-12-20 18:34 2008-02-12 Show GitHub Exploit DB Packet Storm
228856 5 警告 shoppingtree - CP の admin/SA_shipFedExMeter.asp におけるパスを取得される脆弱性 CWE-200
情報漏えい 		CVE-2008-0736 2012-12-20 18:34 2008-02-12 Show GitHub Exploit DB Packet Storm
228857 10 危険 titan - Titan FTP Server の FTP サービスなどにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0725 2012-12-20 18:34 2008-02-11 Show GitHub Exploit DB Packet Storm
228858 5 警告 the everything development company - The Everything Development System の The Everything Development Engine におけるユーザアカウントへアクセス権を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2008-0724 2012-12-20 18:34 2008-02-11 Show GitHub Exploit DB Packet Storm
228859 4.3 警告 planetluc - MyNews の mynews.inc.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0723 2012-12-20 18:34 2008-02-11 Show GitHub Exploit DB Packet Storm
228860 4.3 警告 Webmin Project - Webmin および Usermin におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0720 2012-12-20 18:34 2008-02-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
224611 7.4 HIGH
Network 		mi xiaomi_millet_firmware A malicious file upload vulnerability was discovered in Xiaomi Millet mobile phones 1-6.3.9.3. A particular condition involving a man-in-the-middle attack may lead to partial data leakage or maliciou… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2019-15843 2024-11-21 13:29 2019-09-19 Show GitHub Exploit DB Packet Storm
224612 7.5 HIGH
Network 		gitlab gitlab An issue was discovered in GitLab Community and Enterprise Edition 8.18 through 12.2.1. An internal endpoint unintentionally disclosed information about the last pipeline that ran for a merge request. CWE-863
 Incorrect Authorization 		CVE-2019-15729 2024-11-21 13:29 2019-09-18 Show GitHub Exploit DB Packet Storm
224613 9.8 CRITICAL
Network 		gitlab omnibus An issue was discovered in GitLab Omnibus 7.4 through 12.2.1. An unsafe interaction with logrotate could result in a privilege escalation NVD-CWE-noinfo
CVE-2019-15741 2024-11-21 13:29 2019-09-17 Show GitHub Exploit DB Packet Storm
224614 5.3 MEDIUM
Network 		gitlab gitlab An issue was discovered in GitLab Community and Enterprise Edition 7.9 through 12.2.1. EXIF Geolocation data was not being removed from certain image uploads. CWE-200
Information Exposure 		CVE-2019-15740 2024-11-21 13:29 2019-09-17 Show GitHub Exploit DB Packet Storm
224615 6.1 MEDIUM
Network 		gitlab gitlab An issue was discovered in GitLab Community and Enterprise Edition 8.1 through 12.2.1. Certain areas displaying Markdown were not properly sanitizing some XSS payloads. CWE-79
Cross-site Scripting 		CVE-2019-15739 2024-11-21 13:29 2019-09-17 Show GitHub Exploit DB Packet Storm
224616 5.3 MEDIUM
Network 		gitlab gitlab An issue was discovered in GitLab Community and Enterprise Edition 12.0 through 12.2.1. Under certain conditions, merge request IDs were being disclosed via email. CWE-200
Information Exposure 		CVE-2019-15738 2024-11-21 13:29 2019-09-17 Show GitHub Exploit DB Packet Storm
224617 6.5 MEDIUM
Network 		gitlab gitlab An issue was discovered in GitLab Community and Enterprise Edition through 12.2.1. Certain account actions needed improved authentication and session management. NVD-CWE-noinfo
CVE-2019-15737 2024-11-21 13:29 2019-09-17 Show GitHub Exploit DB Packet Storm
224618 7.5 HIGH
Network 		gitlab gitlab An issue was discovered in GitLab Community and Enterprise Edition through 12.2.1. Under certain circumstances, CI pipelines could potentially be used in a denial of service attack. CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2019-15736 2024-11-21 13:29 2019-09-17 Show GitHub Exploit DB Packet Storm
224619 4.3 MEDIUM
Network 		gitlab gitlab An issue was discovered in GitLab Community and Enterprise Edition 8.6 through 12.2.1. Under very specific conditions, commit titles and team member comments could become viewable to users who did no… CWE-200
Information Exposure 		CVE-2019-15734 2024-11-21 13:29 2019-09-17 Show GitHub Exploit DB Packet Storm
224620 4.3 MEDIUM
Network 		gitlab gitlab An issue was discovered in GitLab Community and Enterprise Edition 7.12 through 12.2.1. The specified default branch name could be exposed to unauthorized users. CWE-200
Information Exposure 		CVE-2019-15733 2024-11-21 13:29 2019-09-17 Show GitHub Exploit DB Packet Storm