Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
229541 10 危険 TYPO3 Association - TYPO3 用の Dictionary エクステンションにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2008-5801 2012-12-20 19:10 2008-12-31 Show GitHub Exploit DB Packet Storm
229542 7.5 危険 TYPO3 Association - TYPO3 用の fsmi_people エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-5800 2012-12-20 19:10 2008-12-31 Show GitHub Exploit DB Packet Storm
229543 4.3 警告 TYPO3 Association - TYPO3 用の Wir ber uns エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-5799 2012-12-20 19:10 2008-12-31 Show GitHub Exploit DB Packet Storm
229544 7.5 危険 TYPO3 Association - TYPO3 用の CMS Poll system エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-5798 2012-12-20 19:10 2008-12-31 Show GitHub Exploit DB Packet Storm
229545 7.5 危険 TYPO3 Association - TYPO3 用の advCalendar エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-5797 2012-12-20 19:10 2008-12-31 Show GitHub Exploit DB Packet Storm
229546 7.5 危険 TYPO3 Association - TYPO3 用の eluna Page Comments エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-5796 2012-12-20 19:10 2008-12-31 Show GitHub Exploit DB Packet Storm
229547 4.3 警告 TYPO3 Association - TYPO3 用の eluna Page Comments エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-5795 2012-12-20 19:10 2008-12-31 Show GitHub Exploit DB Packet Storm
229548 6.8 警告 recly - Joomla! 用の clickheat コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2008-5793 2012-12-20 19:10 2008-12-31 Show GitHub Exploit DB Packet Storm
229549 10 危険 PrestaShop - PrestaShop e-Commerce Solution における脆弱性 CWE-noinfo
情報不足
CVE-2008-5791 2012-12-20 19:10 2008-12-31 Show GitHub Exploit DB Packet Storm
229550 7.5 危険 recly - Joomla! 用の competitions コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2008-5790 2012-12-20 19:10 2008-12-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
215161 8.8 HIGH
Network
noviflow noviware The novish command-line interface, included in NoviFlow NoviWare before NW500.2.12 and deployed on NoviSwitch devices, is vulnerable to command injection in the "show status destination ipaddr" comma… CWE-78
OS Command 
CVE-2020-13122 2024-11-21 14:00 2020-08-18 Show GitHub Exploit DB Packet Storm
215162 4.3 MEDIUM
Network
gitlab gitlab For GitLab before 13.0.12, 13.1.6, 13.2.3 user controlled git configuration settings can be modified to result in Server Side Request Forgery. CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2020-13286 2024-11-21 14:00 2020-08-13 Show GitHub Exploit DB Packet Storm
215163 6.5 MEDIUM
Network
gitlab gitlab For GitLab before 13.0.12, 13.1.6, 13.2.3 a denial of service exists in the project import feature CWE-400
 Uncontrolled Resource Consumption
CVE-2020-13281 2024-11-21 14:00 2020-08-13 Show GitHub Exploit DB Packet Storm
215164 5.4 MEDIUM
Network
gitlab gitlab For GitLab before 13.0.12, 13.1.6, 13.2.3 a cross-site scripting (XSS) vulnerability exists in the issue reference number tooltip. CWE-79
Cross-site Scripting
CVE-2020-13285 2024-11-21 14:00 2020-08-13 Show GitHub Exploit DB Packet Storm
215165 5.4 MEDIUM
Network
gitlab gitlab For GitLab before 13.0.12, 13.1.6, 13.2.3 a cross-site scripting vulnerability exists in the issues list via milestone title. CWE-79
Cross-site Scripting
CVE-2020-13283 2024-11-21 14:00 2020-08-13 Show GitHub Exploit DB Packet Storm
215166 3.5 LOW
Network
gitlab gitlab For GitLab before 13.0.12, 13.1.6, 13.2.3 after a group transfer occurs, members from a parent group keep their access level on the subgroup leading to improper access. CWE-281
 Improper Preservation of Permissions
CVE-2020-13282 2024-11-21 14:00 2020-08-13 Show GitHub Exploit DB Packet Storm
215167 6.5 MEDIUM
Network
gitlab gitlab For GitLab before 13.0.12, 13.1.6, 13.2.3 a memory exhaustion flaw exists due to excessive logging of an invite email error message. CWE-400
 Uncontrolled Resource Consumption
CVE-2020-13280 2024-11-21 14:00 2020-08-13 Show GitHub Exploit DB Packet Storm
215168 7.5 HIGH
Network
dovecot
debian
canonical
fedoraproject
dovecot
debian_linux
ubuntu_linux
fedora
In Dovecot before 2.3.11.3, sending a specially formatted RPA request will crash the auth service because a length of zero is mishandled. CWE-125
Out-of-bounds Read
CVE-2020-12674 2024-11-21 14:00 2020-08-13 Show GitHub Exploit DB Packet Storm
215169 7.5 HIGH
Network
dovecot
debian
canonical
fedoraproject
dovecot
debian_linux
ubuntu_linux
fedora
In Dovecot before 2.3.11.3, sending a specially formatted NTLM request will crash the auth service because of an out-of-bounds read. CWE-125
Out-of-bounds Read
CVE-2020-12673 2024-11-21 14:00 2020-08-13 Show GitHub Exploit DB Packet Storm
215170 8.1 HIGH
Network
gitlab gitlab In GitLab before 13.2.3, project sharing could temporarily allow too permissive access. NVD-CWE-noinfo
CVE-2020-13291 2024-11-21 14:00 2020-08-13 Show GitHub Exploit DB Packet Storm