Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
231421 6.8 警告 phpx - phpx の gallery.php における任意の PHP スクリプトをアップロードおよび実行される脆弱性 - CVE-2007-1549 2012-12-20 18:19 2007-03-20 Show GitHub Exploit DB Packet Storm
231422 7.5 危険 webwizguide - Web Wiz Forums の functions/functions_filters.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-1548 2012-12-20 18:19 2007-03-20 Show GitHub Exploit DB Packet Storm
231423 7.8 危険 Jon Trulson - NAS の server/os/io.c におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-1547 2012-12-20 18:19 2007-03-20 Show GitHub Exploit DB Packet Storm
231424 5 警告 Jon Trulson - NAS におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-1546 2012-12-20 18:19 2007-03-20 Show GitHub Exploit DB Packet Storm
231425 5 警告 Jon Trulson - NAS の server/dia/resource.c におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-1545 2012-12-20 18:19 2007-03-20 Show GitHub Exploit DB Packet Storm
231426 5 警告 Jon Trulson - NAS の server/dia/audispatch.c における整数オーバーフローの脆弱性 - CVE-2007-1544 2012-12-20 18:19 2007-03-20 Show GitHub Exploit DB Packet Storm
231427 10 危険 Jon Trulson - NAS の server/os/connection.c におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-1543 2012-12-20 18:19 2007-03-20 Show GitHub Exploit DB Packet Storm
231428 7.5 危険 sql-ledger - SQL-Ledger の am.pl におけるディレクトリトラバーサルの脆弱性 - CVE-2007-1541 2012-12-20 18:19 2007-03-20 Show GitHub Exploit DB Packet Storm
231429 4.3 警告 pragmamx - pragmaMX Landkarten モジュールの inc/map.func.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-1539 2012-12-20 18:19 2007-03-20 Show GitHub Exploit DB Packet Storm
231430 5 警告 zomplog - Zomplog の themes/default/ におけるディレクトリトラバーサルの脆弱性 - CVE-2007-1524 2012-12-20 18:19 2007-03-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212001 7.6 HIGH
Network
gitlab gitlab The Terraform API in GitLab CE/EE 12.10+ exposed the object storage signed URL on the delete operation allowing a malicious project maintainer to overwrite the Terraform state, bypassing audit and ot… NVD-CWE-noinfo
CVE-2020-13359 2024-11-21 14:01 2020-11-19 Show GitHub Exploit DB Packet Storm
212002 8.2 HIGH
Network
gitlab gitlab An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.8.9. A specially crafted request could bypass Multipart protection and read files in certain specific paths on the … NVD-CWE-noinfo
CVE-2020-13356 2024-11-21 14:01 2020-11-19 Show GitHub Exploit DB Packet Storm
212003 8.1 HIGH
Network
gitlab gitlab An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.14. A path traversal is found in LFS Upload that allows attacker to overwrite certain specific paths on the server.… CWE-22
Path Traversal
CVE-2020-13355 2024-11-21 14:01 2020-11-19 Show GitHub Exploit DB Packet Storm
212004 6.8 MEDIUM
Physics
westerndigital
linaro
inand_cl_em132_firmware
inand_ix_em132_firmware
inand_ix_em132_xi_firmware
op-tee
Western Digital has identified a security vulnerability in the Replay Protected Memory Block (RPMB) protocol as specified in multiple standards for storage device interfaces, including all versions o… CWE-294
Authentication Bypass by Capture-replay 
CVE-2020-13799 2024-11-21 14:01 2020-11-19 Show GitHub Exploit DB Packet Storm
212005 4.3 MEDIUM
Network
gitlab gitlab An issue has been discovered in GitLab EE affecting all versions starting from 8.12. A regular expression related to a file path resulted in the Advanced Search feature susceptible to catastrophic ba… CWE-400
 Uncontrolled Resource Consumption
CVE-2020-13349 2024-11-21 14:01 2020-11-18 Show GitHub Exploit DB Packet Storm
212006 5.7 MEDIUM
Network
gitlab gitlab An issue has been discovered in GitLab EE affecting all versions starting from 10.2. Required CODEOWNERS approval could be bypassed by targeting a branch without the CODEOWNERS file. Affected version… NVD-CWE-noinfo
CVE-2020-13348 2024-11-21 14:01 2020-11-18 Show GitHub Exploit DB Packet Storm
212007 6.5 MEDIUM
Network
gitlab gitlab Insufficient permission checks in scheduled pipeline API in GitLab CE/EE 13.0+ allows an attacker to read variable names and values for scheduled pipelines on projects visible to the attacker. Affect… CWE-276
Incorrect Default Permissions 
CVE-2020-13351 2024-11-21 14:01 2020-11-18 Show GitHub Exploit DB Packet Storm
212008 4.3 MEDIUM
Network
gitlab gitlab CSRF in runner administration page in all versions of GitLab CE/EE allows an attacker who's able to target GitLab instance administrators to pause/resume runners. Affected versions are >=13.5.0, <13.… CWE-352
 Origin Validation Error
CVE-2020-13350 2024-11-21 14:01 2020-11-18 Show GitHub Exploit DB Packet Storm
212009 5.5 MEDIUM
Local
gitlab gitlab A vulnerability in the internal Kubernetes agent api in GitLab CE/EE version 13.3 and above allows unauthorized access to private projects. Affected versions are: >=13.4, <13.4.5,>=13.3, <13.3.9,>=13… NVD-CWE-noinfo
CVE-2020-13358 2024-11-21 14:01 2020-11-17 Show GitHub Exploit DB Packet Storm
212010 4.3 MEDIUM
Network
gitlab gitlab A potential DOS vulnerability was discovered in GitLab CE/EE starting with version 12.6. The container registry name check could cause exponential number of backtracks for certain user supplied value… CWE-400
 Uncontrolled Resource Consumption
CVE-2020-13354 2024-11-21 14:01 2020-11-17 Show GitHub Exploit DB Packet Storm