Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229571 6.8 警告 Pixelpost.org - Windows 上で稼動する Pixelpost の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-3365 2012-12-20 18:52 2008-07-27 Show GitHub Exploit DB Packet Storm
229572 9.3 危険 トレンドマイクロ - Trend Micro OSCE Web-Deployment などの ObjRemoveCtrl Class ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-3364 2012-12-20 18:52 2008-07-30 Show GitHub Exploit DB Packet Storm
229573 7.5 危険 runcms - RunCMS の Newbb Plus モジュールにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-3354 2012-12-20 18:52 2008-07-28 Show GitHub Exploit DB Packet Storm
229574 4.3 警告 puresw - Pure Software Lore におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-3353 2012-12-20 18:52 2008-07-28 Show GitHub Exploit DB Packet Storm
229575 5 警告 thekelleys - dnsmasq におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2008-3350 2012-12-20 18:52 2008-07-28 Show GitHub Exploit DB Packet Storm
229576 10 危険 TIBCO Software - TIBCO Hawk AMI C library および Hawk HMA におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-3338 2012-12-20 18:52 2008-08-13 Show GitHub Exploit DB Packet Storm
229577 6.4 警告 PowerDNS - PowerDNS Authoritative Server における DNS を偽装される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-3337 2012-12-20 18:52 2008-08-6 Show GitHub Exploit DB Packet Storm
229578 4.3 警告 PunBB - PunBB におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-3336 2012-12-20 18:52 2008-07-14 Show GitHub Exploit DB Packet Storm
229579 10 危険 PunBB - PunBB における任意の SMTP コマンドを挿入される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-3335 2012-12-20 18:52 2008-07-14 Show GitHub Exploit DB Packet Storm
229580 9.3 危険 Twibright Labs - Links における脆弱性 CWE-59
リンク解釈の問題 		CVE-2008-3329 2012-12-20 18:52 2008-07-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
222221 5.3 MEDIUM
Network 		gitlab gitlab An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) 8.13 through 12.6.1. It has Incorrect Access Control. NVD-CWE-noinfo
CVE-2019-20148 2024-11-21 13:38 2020-01-14 Show GitHub Exploit DB Packet Storm
222222 5.3 MEDIUM
Network 		gitlab gitlab An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) 9.1 through 12.6.1. It has Incorrect Access Control. NVD-CWE-noinfo
CVE-2019-20147 2024-11-21 13:38 2020-01-14 Show GitHub Exploit DB Packet Storm
222223 5.3 MEDIUM
Network 		gitlab gitlab An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) 11.0 through 12.6. It allows Uncontrolled Resource Consumption. CWE-400
 Uncontrolled Resource Consumption 		CVE-2019-20146 2024-11-21 13:38 2020-01-14 Show GitHub Exploit DB Packet Storm
222224 4.3 MEDIUM
Network 		gitlab gitlab An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) 11.4 through 12.6.1. It has Incorrect Access Control. NVD-CWE-noinfo
CVE-2019-20145 2024-11-21 13:38 2020-01-14 Show GitHub Exploit DB Packet Storm
222225 6.1 MEDIUM
Network 		cththemes citybook
easybook
townhub 		The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow Persistent XSS via the chat widget/page message form. CWE-79
Cross-site Scripting 		CVE-2019-20212 2024-11-21 13:38 2020-01-14 Show GitHub Exploit DB Packet Storm
222226 6.1 MEDIUM
Network 		cththemes citybook
easybook
townhub 		The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow Persistent XSS via Listing Address, Listing Latitude, Listing Longitude, Email Address,… CWE-79
Cross-site Scripting 		CVE-2019-20211 2024-11-21 13:38 2020-01-14 Show GitHub Exploit DB Packet Storm
222227 6.1 MEDIUM
Network 		cththemes citybook
easybook
townhub 		The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow Reflected XSS via a search query. CWE-79
Cross-site Scripting 		CVE-2019-20210 2024-11-21 13:38 2020-01-14 Show GitHub Exploit DB Packet Storm
222228 7.5 HIGH
Network 		cththemes citybook
easybook
townhub 		The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow nsecure Direct Object Reference (IDOR) via wp-admin/admin-ajax.php to delete any page/p… CWE-79
CWE-639
Cross-site Scripting
 Authorization Bypass Through User-Controlled Key 		CVE-2019-20209 2024-11-21 13:38 2020-01-14 Show GitHub Exploit DB Packet Storm
222229 6.1 MEDIUM
Network 		tophub toplist TopList before 2019-09-03 allows XSS via a title. CWE-79
Cross-site Scripting 		CVE-2019-20377 2024-11-21 13:38 2020-01-11 Show GitHub Exploit DB Packet Storm
222230 6.1 MEDIUM
Network 		ganglia ganglia-web ganglia-web (aka Ganglia Web Frontend) through 3.7.5 allows XSS via the header.php cs parameter. CWE-79
Cross-site Scripting 		CVE-2019-20379 2024-11-21 13:38 2020-01-11 Show GitHub Exploit DB Packet Storm