Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
229851 6.8 警告 viart - ViArt CMS などの blocks/block_site_map.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2007-6347 2012-12-20 18:34 2007-12-13 Show GitHub Exploit DB Packet Storm
229852 7.5 危険 Trivantis Corporation Inc. - Trivantis CourseMill Enterprise Learning Management System の userlogin.jsp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-6338 2012-12-20 18:34 2007-12-14 Show GitHub Exploit DB Packet Storm
229853 5 警告 sergey lyubka - Windows 上で稼動する Sergey Lyubka Simple HTTPD におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2007-6326 2012-12-20 18:34 2007-12-13 Show GitHub Exploit DB Packet Storm
229854 5 警告 xml2owl - xml2owl の filedownload.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2007-6322 2012-12-20 18:34 2007-12-13 Show GitHub Exploit DB Packet Storm
229855 4.3 警告 Roundcube.net - RoundCube webmail におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-6321 2012-12-20 18:34 2007-12-11 Show GitHub Exploit DB Packet Storm
229856 6.8 警告 WordPress.org - WordPress の wp-includes/query.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-6318 2012-12-20 18:34 2007-12-11 Show GitHub Exploit DB Packet Storm
229857 5.5 警告 Real Time Logic - BarracudaDrive Web Server におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2007-6317 2012-12-20 18:34 2007-12-11 Show GitHub Exploit DB Packet Storm
229858 4.3 警告 Real Time Logic - BarracudaDrive Web Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-6316 2012-12-20 18:34 2007-12-11 Show GitHub Exploit DB Packet Storm
229859 4 警告 Real Time Logic - Group Chat の BarracudaDrive Web Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2007-6315 2012-12-20 18:34 2007-12-11 Show GitHub Exploit DB Packet Storm
229860 5 警告 Real Time Logic - BarracudaDrive Web Server における Web スクリプトに対するソースコードを読まれる脆弱性 CWE-20
不適切な入力確認
CVE-2007-6314 2012-12-20 18:34 2007-12-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
223491 10.0 CRITICAL
Network
dell emc_storage_monitoring_and_reporting Dell EMC Storage Monitoring and Reporting version 4.3.1 contains a Java RMI Deserialization of Untrusted Data vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerabili… CWE-502
 Deserialization of Untrusted Data
CVE-2019-18580 2024-11-21 13:33 2019-11-27 Show GitHub Exploit DB Packet Storm
223492 5.3 MEDIUM
Network
gitlab gitlab An issue was discovered in GitLab Community and Enterprise Edition 8.17 through 12.4 in the Search feature provided by Elasticsearch integration.. It has Insecure Permissions (issue 1 of 4). CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2019-18456 2024-11-21 13:33 2019-11-27 Show GitHub Exploit DB Packet Storm
223493 7.5 HIGH
Network
gitlab gitlab An issue was discovered in GitLab Community and Enterprise Edition 11 through 12.4 when building Nested GraphQL queries. It has a large or infinite loop. CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2019-18455 2024-11-21 13:33 2019-11-27 Show GitHub Exploit DB Packet Storm
223494 6.1 MEDIUM
Network
gitlab gitlab An issue was discovered in GitLab Community and Enterprise Edition 10.5 through 12.4 in link validation for RDoc wiki pages feature. It has XSS. CWE-79
Cross-site Scripting
CVE-2019-18454 2024-11-21 13:33 2019-11-27 Show GitHub Exploit DB Packet Storm
223495 4.3 MEDIUM
Network
gitlab gitlab An issue was discovered in GitLab Community and Enterprise Edition 11.6 through 12.4 in the add comments via email feature. It has Insecure Permissions. CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2019-18453 2024-11-21 13:33 2019-11-27 Show GitHub Exploit DB Packet Storm
223496 5.3 MEDIUM
Network
gitlab gitlab An issue was discovered in GitLab Community and Enterprise Edition 11.3 through 12.4 when moving an issue to a public project from a private one. It has Insecure Permissions. CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2019-18452 2024-11-21 13:33 2019-11-27 Show GitHub Exploit DB Packet Storm
223497 6.1 MEDIUM
Network
gitlab gitlab An issue was discovered in GitLab Community and Enterprise Edition 10.7.4 through 12.4 in the InternalRedirect filtering feature. It has an Open Redirect. CWE-601
Open Redirect
CVE-2019-18451 2024-11-21 13:33 2019-11-27 Show GitHub Exploit DB Packet Storm
223498 4.3 MEDIUM
Network
gitlab gitlab An issue was discovered in GitLab Community and Enterprise Edition before 12.4 in the Project labels feature. It has Insecure Permissions. CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2019-18450 2024-11-21 13:33 2019-11-27 Show GitHub Exploit DB Packet Storm
223499 4.3 MEDIUM
Network
gitlab gitlab An issue was discovered in GitLab Community and Enterprise Edition before 12.4 in the autocomplete feature. It has Insecure Permissions (issue 2 of 2). CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2019-18449 2024-11-21 13:33 2019-11-27 Show GitHub Exploit DB Packet Storm
223500 6.5 MEDIUM
Network
gitlab gitlab An issue was discovered in GitLab Community and Enterprise Edition before 12.4. It has Incorrect Access Control. NVD-CWE-noinfo
CVE-2019-18448 2024-11-21 13:33 2019-11-27 Show GitHub Exploit DB Packet Storm