Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 17, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
232161 7.5 危険 uniwin - Uniwin eCart Professional における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4746 2012-12-20 18:52 2008-10-27 Show GitHub Exploit DB Packet Storm
232162 4.3 警告 uniwin - Uniwin eCart Professional の emailFriend.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4745 2012-12-20 18:52 2008-10-27 Show GitHub Exploit DB Packet Storm
232163 7.5 危険 quidascript - QuidaScript FAQ Management Script の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4743 2012-12-20 18:52 2008-10-27 Show GitHub Exploit DB Packet Storm
232164 4.3 警告 timetrex - TimeTrex の interface/Login.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4742 2012-12-20 18:52 2008-10-27 Show GitHub Exploit DB Packet Storm
232165 5.1 警告 tinycms - TinyCMS 内の ZZ_Templater モジュール内におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-4740 2012-12-20 18:52 2008-10-27 Show GitHub Exploit DB Packet Storm
232166 6.8 警告 plugspace - PlugSpace の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-4739 2012-12-20 18:52 2008-10-24 Show GitHub Exploit DB Packet Storm
232167 7.5 危険 tufat - MyCard の gallery.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4738 2012-12-20 18:52 2008-10-24 Show GitHub Exploit DB Packet Storm
232168 7.5 危険 pressography - WordPress 用の WP Comment Remix プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-4734 2012-12-20 18:52 2008-10-24 Show GitHub Exploit DB Packet Storm
232169 4.3 警告 pressography - WordPress 用の WP Comment Remix プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4733 2012-12-20 18:52 2008-10-24 Show GitHub Exploit DB Packet Storm
232170 7.5 危険 pressography - WordPress 用の WP Comment Remix プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4732 2012-12-20 18:52 2008-10-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
200051 9.8 CRITICAL
Network 		gitlab gitlab When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab affecting all versions starting from 10.5 was possible to exploit for an unauthen… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2021-22175 2024-11-21 14:49 2021-06-12 Show GitHub Exploit DB Packet Storm
200052 5.4 MEDIUM
Network 		gitlab gitlab An issue has been discovered in GitLab affecting all versions starting with 13.10. GitLab was vulnerable to a stored XSS in blob viewer of notebooks. CWE-79
Cross-site Scripting 		CVE-2021-22220 2024-11-21 14:49 2021-06-9 Show GitHub Exploit DB Packet Storm
200053 6.5 MEDIUM
Network 		gitlab gitlab A denial of service vulnerability in all versions of GitLab CE/EE before 13.12.2, 13.11.5 or 13.10.5 allows an attacker to cause uncontrolled resource consumption with a very long issue or merge requ… CWE-400
 Uncontrolled Resource Consumption 		CVE-2021-22216 2024-11-21 14:49 2021-06-9 Show GitHub Exploit DB Packet Storm
200054 6.5 MEDIUM
Network 		gitlab gitlab An issue has been discovered in GitLab affecting all versions starting from 12.9.0 before 13.10.5, all versions starting from 13.11.0 before 13.11.5, all versions starting from 13.12.0 before 13.12.2… CWE-613
 Insufficient Session Expiration 		CVE-2021-22221 2024-11-21 14:49 2021-06-9 Show GitHub Exploit DB Packet Storm
200055 4.9 MEDIUM
Network 		gitlab gitlab All versions of GitLab CE/EE starting from 9.5 before 13.10.5, all versions starting from 13.11 before 13.11.5, and all versions starting from 13.12 before 13.12.2 allow a high privilege user to obta… CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2021-22219 2024-11-21 14:49 2021-06-9 Show GitHub Exploit DB Packet Storm
200056 6.5 MEDIUM
Network 		gitlab gitlab A denial of service vulnerability in all versions of GitLab CE/EE before 13.12.2, 13.11.5 or 13.10.5 allows an attacker to cause uncontrolled resource consumption with a specially crafted issue or me… NVD-CWE-Other
CVE-2021-22217 2024-11-21 14:49 2021-06-9 Show GitHub Exploit DB Packet Storm
200057 6.5 MEDIUM
Network 		gitlab gitlab A cross-site leak vulnerability in the OAuth flow of all versions of GitLab CE/EE since 7.10 allowed an attacker to leak an OAuth access token by getting the victim to visit a malicious page with Saf… NVD-CWE-Other
CVE-2021-22213 2024-11-21 14:49 2021-06-9 Show GitHub Exploit DB Packet Storm
200058 2.6 LOW
Network 		gitlab gitlab All versions of GitLab CE/EE starting from 12.8 before 13.10.5, all versions starting from 13.11 before 13.11.5, and all versions starting from 13.12 before 13.12.2 were affected by an issue in the h… CWE-295
Improper Certificate Validation  		CVE-2021-22218 2024-11-21 14:49 2021-06-9 Show GitHub Exploit DB Packet Storm
200059 2.7 LOW
Network 		gitlab gitlab An information disclosure vulnerability in GitLab EE versions 13.11 and later allowed a project owner to leak information about the members' on-call rotations in other projects NVD-CWE-noinfo
CVE-2021-22215 2024-11-21 14:49 2021-06-9 Show GitHub Exploit DB Packet Storm
200060 8.6 HIGH
Network 		gitlab gitlab When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab CE/EE affecting all versions starting from 10.5 was possible to exploit for an un… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2021-22214 2024-11-21 14:49 2021-06-9 Show GitHub Exploit DB Packet Storm