Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
232231 4 警告 phpizabi - PHPizabi の template.class.php の AssignUser 関数における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2008-2018 2012-12-20 18:52 2008-04-29 Show GitHub Exploit DB Packet Storm
232232 9.3 危険 watchfire - WatchFire AppScan の特定の ActiveX コントロールにおける絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-2015 2012-12-20 18:52 2008-04-29 Show GitHub Exploit DB Packet Storm
232233 6.8 警告 pnflashgames - PostNuke 用の pnFlashGames モジュールの index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2013 2012-12-20 18:52 2008-04-29 Show GitHub Exploit DB Packet Storm
232234 7.5 危険 postnuke software foundation - PostNuke 用の PostSchedule モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2012 2012-12-20 18:52 2008-04-29 Show GitHub Exploit DB Packet Storm
232235 7.5 危険 サン・マイクロシステムズ - Sun Java System Directory Proxy Server におけるサーバに対するアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-1995 2012-12-20 18:52 2008-04-25 Show GitHub Exploit DB Packet Storm
232236 4.3 警告 pixel motion - Blog Pixel Motion の liste_article.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-1986 2012-12-20 18:52 2008-04-27 Show GitHub Exploit DB Packet Storm
232237 8.5 危険 サン・マイクロシステムズ - Sun Ray Kiosk Mode におけるルートの権限を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2008-2112 2012-12-20 18:52 2008-05-5 Show GitHub Exploit DB Packet Storm
232238 9.3 危険 Yahoo! - Yahoo! Assistant の ActiveX コントロールにおける任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2008-2111 2012-12-20 18:52 2008-05-7 Show GitHub Exploit DB Packet Storm
232239 7.5 危険 qto - QTOFileManager の qtofm.php における任意の PHP コードをアップロードされる脆弱性 CWE-20
不適切な入力確認 		CVE-2008-2110 2012-12-20 18:52 2008-05-7 Show GitHub Exploit DB Packet Storm
232240 7.5 危険 phpforge - PHP Forge の admin/news.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2088 2012-12-20 18:52 2008-05-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199451 9.8 CRITICAL
Network 		accusoft imagegear A stack-based buffer overflow vulnerability exists in the PDF process_fontname functionality of Accusoft ImageGear 19.9. A specially crafted malformed file can lead to code execution. An attacker can… CWE-787
 Out-of-bounds Write 		CVE-2021-21821 2024-11-21 14:49 2021-07-8 Show GitHub Exploit DB Packet Storm
199452 9.8 CRITICAL
Network 		accusoft imagegear An integer overflow vulnerability exists in the DICOM parse_dicom_meta_info functionality of Accusoft ImageGear 19.9. A specially crafted malformed file can lead to a stack-based buffer overflow. An … CWE-190
 Integer Overflow or Wraparound 		CVE-2021-21807 2024-11-21 14:49 2021-07-8 Show GitHub Exploit DB Packet Storm
199453 4.3 MEDIUM
Network 		gitlab gitlab An information disclosure vulnerability in GitLab EE versions 13.10 and later allowed a user to read project details CWE-862
 Missing Authorization 		CVE-2021-22233 2024-11-21 14:49 2021-07-7 Show GitHub Exploit DB Packet Storm
199454 5.4 MEDIUM
Network 		gitlab gitlab Insufficient input sanitization in markdown in GitLab version 13.11 and up allows an attacker to exploit a stored cross-site scripting vulnerability via a specially-crafted markdown CWE-79
Cross-site Scripting 		CVE-2021-22225 2024-11-21 14:49 2021-07-7 Show GitHub Exploit DB Packet Storm
199455 6.5 MEDIUM
Network 		gitlab gitlab A cross-site request forgery vulnerability in the GraphQL API in GitLab since version 13.12 and before versions 13.12.6 and 14.0.2 allowed an attacker to call mutations as the victim CWE-352
 Origin Validation Error 		CVE-2021-22224 2024-11-21 14:49 2021-07-7 Show GitHub Exploit DB Packet Storm
199456 4.3 MEDIUM
Network 		gitlab gitlab A denial of service in user's profile page is found starting with GitLab CE/EE 8.0 that allows attacker to reject access to their profile page via using a specially crafted username. NVD-CWE-noinfo
CVE-2021-22231 2024-11-21 14:49 2021-07-7 Show GitHub Exploit DB Packet Storm
199457 7.2 HIGH
Network 		gitlab gitlab Improper code rendering while rendering merge requests could be exploited to submit malicious code. This vulnerability affects GitLab CE/EE 9.3 and later through 13.11.6, 13.12.6, and 14.0.2. NVD-CWE-noinfo
CVE-2021-22230 2024-11-21 14:49 2021-07-7 Show GitHub Exploit DB Packet Storm
199458 6.1 MEDIUM
Network 		gitlab gitlab A reflected cross-site script vulnerability in GitLab before versions 13.11.6, 13.12.6 and 14.0.2 allowed an attacker to send a malicious link to a victim and trigger actions on their behalf if they … CWE-79
Cross-site Scripting 		CVE-2021-22227 2024-11-21 14:49 2021-07-7 Show GitHub Exploit DB Packet Storm
199459 6.5 MEDIUM
Network 		gitlab gitlab An issue has been discovered in GitLab affecting all versions before 13.11.6, all versions starting from 13.12 before 13.12.6, and all versions starting from 14.0 before 14.0.2. Improper access contr… NVD-CWE-Other
CVE-2021-22228 2024-11-21 14:49 2021-07-7 Show GitHub Exploit DB Packet Storm
199460 6.1 MEDIUM
Network 		gitlab gitlab Client-Side code injection through Feature Flag name in GitLab CE/EE starting with 11.9 allows a specially crafted feature flag name to PUT requests on behalf of other users via clicking on a link CWE-79
Cross-site Scripting 		CVE-2021-22223 2024-11-21 14:49 2021-07-7 Show GitHub Exploit DB Packet Storm