Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 5, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228861 9.3 危険 rsbr-software - News File Grabber におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-1037 2012-12-20 18:19 2007-02-21 Show GitHub Exploit DB Packet Storm
228862 7.5 危険 PHPNUKE - PHP-Nuke 用の Emporium モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-1034 2012-12-20 18:19 2007-02-21 Show GitHub Exploit DB Packet Storm
228863 6.8 警告 phpMyFAQ - phpMyFAQ における "サーバ上にファイルをアップロードする権限を取得される" 脆弱性 CWE-noinfo
情報不足 		CVE-2007-1032 2012-12-20 18:19 2007-02-8 Show GitHub Exploit DB Packet Storm
228864 6.8 警告 spoonlabs - SpoonLabs Vivvo Article Management CMS の include/db_conn.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-1031 2012-12-20 18:19 2007-02-21 Show GitHub Exploit DB Packet Storm
228865 7.6 危険 quicksoft - Quiksoft EasyMail Objects の IMAP4 コンポーネントにおけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-1029 2012-12-20 18:19 2007-02-21 Show GitHub Exploit DB Packet Storm
228866 7.5 危険 scriptdungeon - XLAtunes の view.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-1026 2012-12-20 18:19 2007-02-21 Show GitHub Exploit DB Packet Storm
228867 7.5 危険 virtualsystem - VS-Link-Partner の inc/functions_inc.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1025 2012-12-20 18:19 2007-02-21 Show GitHub Exploit DB Packet Storm
228868 7.5 危険 Snitz - Snitz Forums 2000 の pop_profile.asp における SQL インジェクションの脆弱性 - CVE-2007-1023 2012-12-20 18:19 2007-02-21 Show GitHub Exploit DB Packet Storm
228869 7.5 危険 turuncu portal - Turuncu Portal の h_goster.asp における SQL インジェクションの脆弱性 - CVE-2007-1022 2012-12-20 18:19 2007-02-21 Show GitHub Exploit DB Packet Storm
228870 10 危険 xfairguy - CodeAvalanche News の inc_listnews.asp における SQL インジェクションの脆弱性 - CVE-2007-1021 2012-12-20 18:19 2007-02-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
223411 7.5 HIGH
Network 		gitlab gitlab An issue was discovered in GitLab Enterprise Edition 10.6 through 12.0.2. The GitHub project integration was vulnerable to an SSRF vulnerability which allowed an attacker to make requests to local ne… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2019-13121 2024-11-21 13:24 2020-03-11 Show GitHub Exploit DB Packet Storm
223412 4.3 MEDIUM
Network 		gitlab gitlab An issue was discovered in GitLab Enterprise Edition 8.11.0 through 12.0.2. By using brute-force a user with access to a project, but not it's repository could create a list of merge requests templat… CWE-400
 Uncontrolled Resource Consumption 		CVE-2019-13011 2024-11-21 13:24 2020-03-11 Show GitHub Exploit DB Packet Storm
223413 5.9 MEDIUM
Network 		gitlab gitlab An issue was discovered in GitLab Enterprise Edition 8.3 through 12.0.2. The color codes decoder was vulnerable to a resource depletion attack if specific formats were used. It allows Uncontrolled Re… NVD-CWE-noinfo
CVE-2019-13010 2024-11-21 13:24 2020-03-11 Show GitHub Exploit DB Packet Storm
223414 6.5 MEDIUM
Network 		gitlab gitlab An issue was discovered in GitLab Community and Enterprise Edition 9.2 through 12.0.2. Uploaded files associated with unsaved personal snippets were accessible to unauthorized users due to improper p… CWE-400
CWE-732
 Uncontrolled Resource Consumption
 Incorrect Permission Assignment for Critical Resource 		CVE-2019-13009 2024-11-21 13:24 2020-03-11 Show GitHub Exploit DB Packet Storm
223415 4.9 MEDIUM
Network 		gitlab gitlab An issue was discovered in GitLab Community and Enterprise Edition 11.11 through 12.0.2. When an admin enabled one of the service templates, it was triggering an action that leads to resource depleti… CWE-400
 Uncontrolled Resource Consumption 		CVE-2019-13007 2024-11-21 13:24 2020-03-11 Show GitHub Exploit DB Packet Storm
223416 4.3 MEDIUM
Network 		gitlab gitlab An issue was discovered in GitLab Community and Enterprise Edition 9.0 and through 12.0.2. Users with access to issues, but not the repository were able to view the number of related merge requests o… NVD-CWE-noinfo
CVE-2019-13006 2024-11-21 13:24 2020-03-11 Show GitHub Exploit DB Packet Storm
223417 4.3 MEDIUM
Network 		gitlab gitlab An issue was discovered in GitLab Enterprise Edition and Community Edition 1.10 through 12.0.2. The GitLab graphql service was vulnerable to multiple authorization issues that disclosed restricted us… NVD-CWE-noinfo
CVE-2019-13005 2024-11-21 13:24 2020-03-11 Show GitHub Exploit DB Packet Storm
223418 5.3 MEDIUM
Network 		gitlab gitlab An issue was discovered in GitLab Community and Enterprise Edition 11.10 through 12.0.2. When specific encoded characters were added to comments, the comments section would become inaccessible. It ha… NVD-CWE-Other
CVE-2019-13004 2024-11-21 13:24 2020-03-11 Show GitHub Exploit DB Packet Storm
223419 7.5 HIGH
Network 		gitlab gitlab An issue was discovered in GitLab Community and Enterprise Edition before 12.0.3. One of the parsers used by Gilab CI was vulnerable to a resource exhaustion attack. It allows Uncontrolled Resource C… CWE-400
 Uncontrolled Resource Consumption 		CVE-2019-13003 2024-11-21 13:24 2020-03-11 Show GitHub Exploit DB Packet Storm
223420 8.8 HIGH
Network 		mi mi_browser This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Xiaomi Browser Prior to 10.4.0. User interaction is required to exploit this vulnerability in that … CWE-20
 Improper Input Validation  		CVE-2019-13322 2024-11-21 13:24 2020-02-11 Show GitHub Exploit DB Packet Storm