Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
231321 7.5 危険 thwboard - ThWboard の inc/header.inc.php における SQL インジェクションの脆弱性 - CVE-2007-0340 2012-12-20 18:19 2007-01-17 Show GitHub Exploit DB Packet Storm
231322 7.5 危険 scriptme - Scriptme SMe FileMailer の index.php における SQL インジェクションの脆弱性 - CVE-2007-0339 2012-12-20 18:19 2007-01-17 Show GitHub Exploit DB Packet Storm
231323 4.4 警告 rixstep - Rixstep Undercover の Undercover.app/Contents/Resources/uc における任意のファイルを上書きされる脆弱性 - CVE-2007-0336 2012-12-20 18:19 2007-01-17 Show GitHub Exploit DB Packet Storm
231324 7.5 危険 xentraz - liens_dynamiques の admin/adminlien.php3 などにおける許可されていない管理者の操作を実行される脆弱性 - CVE-2007-0332 2012-12-20 18:19 2007-01-17 Show GitHub Exploit DB Packet Storm
231325 6.8 警告 xentraz - liens_dynamiques の liens.php3 におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-0331 2012-12-20 18:19 2007-01-17 Show GitHub Exploit DB Packet Storm
231326 9.3 危険 トレンドマイクロ - Trend Micro OfficeScan Web-Deployment SetupINICtrl ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2007-0325 2012-12-20 18:19 2007-02-12 Show GitHub Exploit DB Packet Storm
231327 7.5 危険 BlackBerry - RIM の TeamOn Import Object ActiveX コントロールにおけるバッファオーバーフローの脆弱性 - CVE-2007-0323 2012-12-20 18:19 2007-05-8 Show GitHub Exploit DB Packet Storm
231328 7.8 危険 wcsimple poll - wcSimple Poll におけるパスワードハッシュを取得される脆弱性 - CVE-2007-0312 2012-12-20 18:19 2007-01-17 Show GitHub Exploit DB Packet Storm
231329 5 警告 texas imperial software - Texas Imperial Software WFTPD などにおけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2007-0311 2012-12-20 18:19 2007-01-17 Show GitHub Exploit DB Packet Storm
231330 6.8 警告 plain black - Plain Black WebGUI におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-0308 2012-12-20 18:19 2007-01-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212011 8.8 HIGH
Network
noviflow noviware The novish command-line interface, included in NoviFlow NoviWare before NW500.2.12 and deployed on NoviSwitch devices, is vulnerable to command injection in the "show status destination ipaddr" comma… CWE-78
OS Command 
CVE-2020-13122 2024-11-21 14:00 2020-08-18 Show GitHub Exploit DB Packet Storm
212012 4.3 MEDIUM
Network
gitlab gitlab For GitLab before 13.0.12, 13.1.6, 13.2.3 user controlled git configuration settings can be modified to result in Server Side Request Forgery. CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2020-13286 2024-11-21 14:00 2020-08-13 Show GitHub Exploit DB Packet Storm
212013 6.5 MEDIUM
Network
gitlab gitlab For GitLab before 13.0.12, 13.1.6, 13.2.3 a denial of service exists in the project import feature CWE-400
 Uncontrolled Resource Consumption
CVE-2020-13281 2024-11-21 14:00 2020-08-13 Show GitHub Exploit DB Packet Storm
212014 5.4 MEDIUM
Network
gitlab gitlab For GitLab before 13.0.12, 13.1.6, 13.2.3 a cross-site scripting (XSS) vulnerability exists in the issue reference number tooltip. CWE-79
Cross-site Scripting
CVE-2020-13285 2024-11-21 14:00 2020-08-13 Show GitHub Exploit DB Packet Storm
212015 5.4 MEDIUM
Network
gitlab gitlab For GitLab before 13.0.12, 13.1.6, 13.2.3 a cross-site scripting vulnerability exists in the issues list via milestone title. CWE-79
Cross-site Scripting
CVE-2020-13283 2024-11-21 14:00 2020-08-13 Show GitHub Exploit DB Packet Storm
212016 3.5 LOW
Network
gitlab gitlab For GitLab before 13.0.12, 13.1.6, 13.2.3 after a group transfer occurs, members from a parent group keep their access level on the subgroup leading to improper access. CWE-281
 Improper Preservation of Permissions
CVE-2020-13282 2024-11-21 14:00 2020-08-13 Show GitHub Exploit DB Packet Storm
212017 6.5 MEDIUM
Network
gitlab gitlab For GitLab before 13.0.12, 13.1.6, 13.2.3 a memory exhaustion flaw exists due to excessive logging of an invite email error message. CWE-400
 Uncontrolled Resource Consumption
CVE-2020-13280 2024-11-21 14:00 2020-08-13 Show GitHub Exploit DB Packet Storm
212018 7.5 HIGH
Network
dovecot
debian
canonical
fedoraproject
dovecot
debian_linux
ubuntu_linux
fedora
In Dovecot before 2.3.11.3, sending a specially formatted RPA request will crash the auth service because a length of zero is mishandled. CWE-125
Out-of-bounds Read
CVE-2020-12674 2024-11-21 14:00 2020-08-13 Show GitHub Exploit DB Packet Storm
212019 7.5 HIGH
Network
dovecot
debian
canonical
fedoraproject
dovecot
debian_linux
ubuntu_linux
fedora
In Dovecot before 2.3.11.3, sending a specially formatted NTLM request will crash the auth service because of an out-of-bounds read. CWE-125
Out-of-bounds Read
CVE-2020-12673 2024-11-21 14:00 2020-08-13 Show GitHub Exploit DB Packet Storm
212020 8.1 HIGH
Network
gitlab gitlab In GitLab before 13.2.3, project sharing could temporarily allow too permissive access. NVD-CWE-noinfo
CVE-2020-13291 2024-11-21 14:00 2020-08-13 Show GitHub Exploit DB Packet Storm