Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 2:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229571 4.3 警告 xcomputer - Xcomputer の Search.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-5479 2012-12-20 18:33 2007-10-16 Show GitHub Exploit DB Packet Storm
229572 4.3 警告 valve software - WebMod Half-Life Dedicated Server プラグインの auth.w におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-5477 2012-12-20 18:33 2007-10-16 Show GitHub Exploit DB Packet Storm
229573 7.8 危険 SUSE - SUSE Linux Enterprise Server の ISC BIND named デーモンで使用される libgssapi におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2007-5471 2012-12-20 18:33 2007-10-15 Show GitHub Exploit DB Packet Storm
229574 5 警告 viart - ViArt Shop の iDEAL payment モジュール における証明書および鍵ファイルのパス名を取得される脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-5463 2012-12-20 18:33 2007-10-15 Show GitHub Exploit DB Packet Storm
229575 4.3 警告 wwwisis - WWWISIS の wxis.exe におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-5455 2012-12-20 18:33 2007-10-14 Show GitHub Exploit DB Packet Storm
229576 8.5 危険 php-stats - Php-Stats における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2007-5453 2012-12-20 18:33 2007-10-14 Show GitHub Exploit DB Packet Storm
229577 10 危険 php-stats - Php-Stats の php-stats.recjs.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-5452 2012-12-20 18:33 2007-10-14 Show GitHub Exploit DB Packet Storm
229578 7.5 危険 softbiz - Softbiz Recipes Portal Script の searchresult.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-5449 2012-12-20 18:33 2007-10-14 Show GitHub Exploit DB Packet Storm
229579 1.9 注意 VMware - VMware Workstation などの Reconfig.DLL における vmount2.exe がサービス運用妨害 (DoS) 状態となる脆弱性 CWE-20
不適切な入力確認 		CVE-2007-5438 2012-12-20 18:33 2007-10-12 Show GitHub Exploit DB Packet Storm
229580 4.3 警告 pro.setun - PRO-search におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-5434 2012-12-20 18:33 2007-10-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
222961 2.7 LOW
Network 		gitlab gitlab An issue was discovered in GitLab Community and Enterprise Edition through 12.4. It has Insecure Permissions (issue 2 of 4). CWE-281
 Improper Preservation of Permissions 		CVE-2019-18458 2024-11-21 13:33 2019-11-27 Show GitHub Exploit DB Packet Storm
222962 8.8 HIGH
Network 		gitlab gitlab An issue was discovered in GitLab Community and Enterprise Edition 11.8 through 12.4 when handling Security tokens.. It has Insecure Permissions. CWE-281
 Improper Preservation of Permissions 		CVE-2019-18457 2024-11-21 13:33 2019-11-27 Show GitHub Exploit DB Packet Storm
222963 4.3 MEDIUM
Network 		gitlab gitlab An issue was discovered in GitLab Community and Enterprise Edition through 12.4. It has Insecure Permissions (issue 4 of 4). CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2019-18463 2024-11-21 13:33 2019-11-27 Show GitHub Exploit DB Packet Storm
222964 4.3 MEDIUM
Network 		gitlab gitlab An issue was discovered in GitLab Community and Enterprise Edition 11.3 through 12.4. It has Insecure Permissions. CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2019-18462 2024-11-21 13:33 2019-11-27 Show GitHub Exploit DB Packet Storm
222965 4.3 MEDIUM
Network 		gitlab gitlab An issue was discovered in GitLab Community and Enterprise Edition 11.3 through 12.3 when a sub group epic is added to a public group. It has Incorrect Access Control. CWE-200
Information Exposure 		CVE-2019-18461 2024-11-21 13:33 2019-11-27 Show GitHub Exploit DB Packet Storm
222966 7.5 HIGH
Network 		gitlab gitlab An issue was discovered in GitLab Community and Enterprise Edition 8.15 through 12.4 in the Comments Search feature provided by the Elasticsearch integration. It has Incorrect Access Control. CWE-200
Information Exposure 		CVE-2019-18460 2024-11-21 13:33 2019-11-27 Show GitHub Exploit DB Packet Storm
222967 9.8 CRITICAL
Network 		broadcom symantec_critical_system_protection Symantec Critical System Protection (CSP), versions 8.0, 8.0 HF1 & 8.0 MP1, may be susceptible to an authentication bypass vulnerability, which is a type of issue that can potentially allow a threat … CWE-287
Improper Authentication 		CVE-2019-18374 2024-11-21 13:33 2019-11-26 Show GitHub Exploit DB Packet Storm
222968 7.8 HIGH
Local 		linux linux_kernel The Linux kernel through 5.3.13 has a start_offset+size Integer Overflow in cpia2_remap_buffer in drivers/media/usb/cpia2/cpia2_core.c because cpia2 has its own mmap implementation. This allows local… CWE-190
 Integer Overflow or Wraparound 		CVE-2019-18675 2024-11-21 13:33 2019-11-25 Show GitHub Exploit DB Packet Storm
222969 6.8 MEDIUM
Physics 		hp thinpro The Citrix Receiver wrapper function does not safely handle user supplied input, which may be leveraged by an attacker to inject commands that will execute with local user privileges. CWE-78
OS Command  		CVE-2019-18910 2024-11-21 13:33 2019-11-23 Show GitHub Exploit DB Packet Storm
222970 8.0 HIGH
Adjacent 		hp thinpro The VPN software within HP ThinPro does not safely handle user supplied input, which may be leveraged by an attacker to inject commands that will execute with root privileges. CWE-78
OS Command  		CVE-2019-18909 2024-11-21 13:33 2019-11-23 Show GitHub Exploit DB Packet Storm