Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229881 6.8 警告 positive software - Positive Software H-Sphere WebShell の actions.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-4448 2012-12-20 18:52 2008-10-6 Show GitHub Exploit DB Packet Storm
229882 4.3 警告 positive software - Positive Software H-Sphere WebShell の actions.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4447 2012-12-20 18:52 2008-10-6 Show GitHub Exploit DB Packet Storm
229883 4.3 警告 rmsoft - Xoops 用の rmdp モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4435 2012-12-20 18:52 2008-10-3 Show GitHub Exploit DB Packet Storm
229884 7.5 危険 rmsoft - Xoops 用の RMSOFT MiniShop モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4433 2012-12-20 18:52 2008-10-3 Show GitHub Exploit DB Packet Storm
229885 4.3 警告 rmsoft - Xoops 用の RMSOFT MiniShop モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4432 2012-12-20 18:52 2008-10-3 Show GitHub Exploit DB Packet Storm
229886 5 警告 トレンドマイクロ - Trend Micro OfficeScan のサーバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2008-4403 2012-12-20 18:52 2008-09-30 Show GitHub Exploit DB Packet Storm
229887 10 危険 トレンドマイクロ - Trend Micro OfficeScan のサーバにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-4402 2012-12-20 18:52 2008-09-30 Show GitHub Exploit DB Packet Storm
229888 9.3 危険 safer networking - Safer Networking FileAlyzer におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-4396 2012-12-20 18:52 2008-10-2 Show GitHub Exploit DB Packet Storm
229889 4.3 警告 ベリサイン - VeriSign Kontiki DMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4393 2012-12-20 18:52 2008-10-7 Show GitHub Exploit DB Packet Storm
229890 9.3 危険 simba technologies
SAP		 - SAP SAPgui の mdrmsap.dll における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-4387 2012-12-20 18:52 2008-11-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
214481 9.8 CRITICAL
Network 		aveva edna_enterprise_data_historian SQL injection vulnerability exists in the CHaD.asmx web service functionality of eDNA Enterprise Data Historian 3.0.1.2/7.5.4989.33053. Specially crafted SOAP web requests can cause SQL injections re… CWE-89
SQL Injection 		CVE-2020-13500 2024-11-21 14:01 2020-09-25 Show GitHub Exploit DB Packet Storm
214482 9.8 CRITICAL
Network 		aveva edna_enterprise_data_historian An SQL injection vulnerability exists in the CHaD.asmx web service functionality of eDNA Enterprise Data Historian 3.0.1.2/7.5.4989.33053. Specially crafted SOAP web requests can cause SQL injections… CWE-89
SQL Injection 		CVE-2020-13499 2024-11-21 14:01 2020-09-25 Show GitHub Exploit DB Packet Storm
214483 2.7 LOW
Network 		gitlab gitlab A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. A user without 2 factor authentication enabled could be prohibited from accessing GitLab by being invited into a p… CWE-281
 Improper Preservation of Permissions 		CVE-2020-13308 2024-11-21 14:01 2020-09-15 Show GitHub Exploit DB Packet Storm
214484 7.5 HIGH
Network 		gitlab gitlab A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. The profile activity page was not restricting the amount of results one could request, potentially resulting in a … NVD-CWE-noinfo
CVE-2020-13315 2024-11-21 14:01 2020-09-15 Show GitHub Exploit DB Packet Storm
214485 6.5 MEDIUM
Network 		gitlab gitlab A vulnerability was discovered in GitLab runner versions before 13.1.3, 13.2.3 and 13.3.1. It was possible to make the gitlab-runner process crash by sending malformed queries, resulting in a denial … NVD-CWE-noinfo
CVE-2020-13310 2024-11-21 14:01 2020-09-15 Show GitHub Exploit DB Packet Storm
214486 8.8 HIGH
Network 		gitlab gitlab A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab was vulnerable to a blind SSRF attack through the repository mirroring feature. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2020-13309 2024-11-21 14:01 2020-09-15 Show GitHub Exploit DB Packet Storm
214487 4.9 MEDIUM
Network 		gitlab gitlab A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8, and 13.3.4. An insufficient check in the GraphQL api allowed a maintainer to delete a repository. CWE-20
 Improper Input Validation  		CVE-2020-13317 2024-11-21 14:01 2020-09-15 Show GitHub Exploit DB Packet Storm
214488 5.3 MEDIUM
Network 		gitlab gitlab A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab Omniauth endpoint allowed a malicious user to submit content to be displayed back to the user within error … NVD-CWE-Other
CVE-2020-13314 2024-11-21 14:01 2020-09-15 Show GitHub Exploit DB Packet Storm
214489 4.3 MEDIUM
Network 		gitlab gitlab A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. An unauthorized project maintainer could edit the subgroup badges due to the lack of authorization control. CWE-863
 Incorrect Authorization 		CVE-2020-13313 2024-11-21 14:01 2020-09-15 Show GitHub Exploit DB Packet Storm
214490 9.8 CRITICAL
Network 		gitlab gitlab A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab OAuth endpoint was vulnerable to brute-force attacks through a specific parameter. CWE-307
mproper Restriction of Excessive Authentication Attempts 		CVE-2020-13312 2024-11-21 14:01 2020-09-15 Show GitHub Exploit DB Packet Storm