Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
231381 10 危険 VMware - EMC VMware Workstation などの SC dhcpd および DHCP サーバにおける整数オーバーフローの脆弱性 CWE-119
CWE-189
CVE-2007-0062 2012-12-20 18:19 2007-09-21 Show GitHub Exploit DB Packet Storm
231382 10 危険 VMware - EMC VMware Workstation などの DHCP サーバにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2007-0061 2012-12-20 18:19 2007-09-21 Show GitHub Exploit DB Packet Storm
231383 7.5 危険 vizayn haber - Vizayn Haber の haberdetay.asp における SQL インジェクションの脆弱性 - CVE-2007-0052 2012-12-20 18:19 2007-01-4 Show GitHub Exploit DB Packet Storm
231384 6.8 警告 VideoLAN - VideoLAN VLC の CDDA プラグイなどにおけるフォーマットストリングの脆弱性 CWE-134
書式文字列の問題
CVE-2007-0017 2012-12-20 18:19 2007-01-2 Show GitHub Exploit DB Packet Storm
231385 4.4 警告 サン・マイクロシステムズ - ChainKey Java Code Protection における Java クラスファイルをデコンパイルされる脆弱性 CWE-310
暗号の問題
CVE-2007-0014 2012-12-20 18:19 2007-01-16 Show GitHub Exploit DB Packet Storm
231386 7.8 危険 Canonical - Ubuntu 上で稼動する Linux Kernel の skge ドライバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2006-7229 2012-12-20 18:19 2007-11-14 Show GitHub Exploit DB Packet Storm
231387 7.8 危険 SAP - SAP SAPLPD におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-7220 2012-12-20 18:19 2007-07-9 Show GitHub Exploit DB Packet Storm
231388 4.3 警告 ZoneO-soft - phpTrafficA におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-7209 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
231389 6.8 警告 republique francaise - Agora の modules/Mysqlfinder/MysqlfinderAdmin.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-7194 2012-12-20 18:19 2007-04-18 Show GitHub Exploit DB Packet Storm
231390 4.3 警告 web-app.net - web-app.net WebAPP の cgi-bin/user-lib/topics.pl におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-7190 2012-12-20 18:19 2007-04-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211841 6.5 MEDIUM
Network
gitlab gitlab An issue has been discovered in GitLab affecting all versions before 13.2.10, 13.3.7 and 13.4.2: XSS in SVG File Preview. Overall impact is limited due to the current user only being impacted. CWE-79
Cross-site Scripting
CVE-2020-13339 2024-11-21 14:01 2020-10-8 Show GitHub Exploit DB Packet Storm
211842 2.7 LOW
Network
gitlab gitlab An issue has been discovered in GitLab affecting versions prior to 13.2.10, 13.3.7 and 13.4.2: Lack of Rate Limiting at Re-Sending Confirmation Email CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2020-13342 2024-11-21 14:01 2020-10-8 Show GitHub Exploit DB Packet Storm
211843 9.1 CRITICAL
Network
gitlab gitlab A command injection vulnerability was discovered in Gitlab runner versions prior to 13.2.4, 13.3.2 and 13.4.1. When the runner is configured on a Windows system with a docker executor, which allows t… CWE-22
Path Traversal
CVE-2020-13347 2024-11-21 14:01 2020-10-7 Show GitHub Exploit DB Packet Storm
211844 6.5 MEDIUM
Network
gitlab gitlab Membership changes are not reflected in ToDo subscriptions in GitLab versions prior to 13.2.10, 13.3.7 and 13.4.2, allowing guest users to access confidential issues through API. CWE-459
 Incomplete Cleanup
CVE-2020-13346 2024-11-21 14:01 2020-10-7 Show GitHub Exploit DB Packet Storm
211845 4.3 MEDIUM
Network
gitlab gitlab Improper group membership validation when deleting a user account in GitLab >=7.12 allows a user to delete own account without deleting/transferring their group. CWE-863
 Incorrect Authorization
CVE-2020-13335 2024-11-21 14:01 2020-10-7 Show GitHub Exploit DB Packet Storm
211846 7.5 HIGH
Network
gitlab gitlab In GitLab versions prior to 13.2.10, 13.3.7 and 13.4.2, improper authorization checks allow a non-member of a project/group to change the confidentiality attribute of issue via mutation GraphQL query CWE-863
 Incorrect Authorization
CVE-2020-13334 2024-11-21 14:01 2020-10-7 Show GitHub Exploit DB Packet Storm
211847 5.4 MEDIUM
Network
gitlab gitlab An issue has been discovered in GitLab affecting all versions starting from 10.8. Reflected XSS on Multiple Routes CWE-79
Cross-site Scripting
CVE-2020-13345 2024-11-21 14:01 2020-10-7 Show GitHub Exploit DB Packet Storm
211848 8.8 HIGH
Network
gitlab gitlab An issue has been discovered in GitLab affecting all versions starting from 11.2. Unauthorized Users Can View Custom Project Template CWE-668
 Exposure of Resource to Wrong Sphere
CVE-2020-13343 2024-11-21 14:01 2020-10-7 Show GitHub Exploit DB Packet Storm
211849 4.3 MEDIUM
Network
gitlab gitlab A potential DOS vulnerability was discovered in GitLab versions 13.1, 13.2 and 13.3. The api to update an asset as a link from a release had a regex check which caused exponential number of backtrack… CWE-400
 Uncontrolled Resource Consumption
CVE-2020-13333 2024-11-21 14:01 2020-10-7 Show GitHub Exploit DB Packet Storm
211850 5.4 MEDIUM
Network
gitlab gitlab An issue has been discovered in GitLab affecting versions prior to 12.10.13, 13.0.8, 13.1.2. A stored cross-site scripting vulnerability was discovered when editing references. CWE-79
Cross-site Scripting
CVE-2020-13338 2024-11-21 14:01 2020-10-3 Show GitHub Exploit DB Packet Storm