Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
248421 6.5 警告 ace image hosting script - Ace Image Hosting Script の albums.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6393 2012-06-26 15:54 2007-12-17 Show GitHub Exploit DB Packet Storm
248422 7.5 危険 dominion web - DWdirectory における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6392 2012-06-26 15:54 2007-12-17 Show GitHub Exploit DB Packet Storm
248423 2.1 注意 GNOME Project - GNOME screensaver の通知機能におけるクリップボードの内容などを読まれる脆弱性 CWE-DesignError
CVE-2007-6389 2012-06-26 15:54 2007-12-11 Show GitHub Exploit DB Packet Storm
248424 7.5 危険 BEAシステムズ - BEA WebLogic Mobility Server の Image Converter 機能におけるアプリケーションファイルおよびリソースアクセス権を取得される脆弱性 CWE-287
不適切な認証 		CVE-2007-6384 2012-06-26 15:54 2007-12-14 Show GitHub Exploit DB Packet Storm
248425 5.5 警告 chandler project - Cosmo のDAV コンポーネントにおける他ユーザのホームコレクションの任意のリソースを作成される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-6383 2012-06-26 15:54 2007-12-14 Show GitHub Exploit DB Packet Storm
248426 7.5 危険 e-xoops - exoops における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6380 2012-06-26 15:54 2007-12-14 Show GitHub Exploit DB Packet Storm
248427 5 警告 badblue - BadBlue における重要な情報を取得される脆弱性 CWE-16
環境設定 		CVE-2007-6379 2012-06-26 15:54 2007-12-14 Show GitHub Exploit DB Packet Storm
248428 7.5 危険 badblue - BadBlue の upload.dll におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-6378 2012-06-26 15:54 2007-12-14 Show GitHub Exploit DB Packet Storm
248429 7.5 危険 badblue - BadBlue の ext.dll の PassThru 機能におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-6377 2012-06-26 15:54 2007-12-14 Show GitHub Exploit DB Packet Storm
248430 7.5 危険 francisco burzi - Francisco Burzi PHP-Nuke の autohtml.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-6376 2012-06-26 15:54 2007-12-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
200121 6.5 MEDIUM
Network 		huawei ips_module_firmware
ngfw_module_firmware
secospace_usg6300_firmware
secospace_usg6500_firmware
secospace_usg6600_firmware
usg9500_firmware
nip6300_firmware
nip6600_firmware
ni… 		There is a memory leak vulnerability in some Huawei products. An authenticated remote attacker may exploit this vulnerability by sending specific message to the affected product. Due to not release t… CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2021-22312 2024-11-21 14:49 2021-04-9 Show GitHub Exploit DB Packet Storm
200122 7.2 HIGH
Network 		proofpoint insider_threat_management The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) is vulnerable to XML external entity (XXE) injection in the Web Console. The vulnerability requires admin user privileges a… CWE-611
XXE 		CVE-2021-22158 2024-11-21 14:49 2021-04-7 Show GitHub Exploit DB Packet Storm
200123 6.1 MEDIUM
Network 		proofpoint insider_threat_management Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.11.1 allows stored XSS. CWE-79
Cross-site Scripting 		CVE-2021-22157 2024-11-21 14:49 2021-04-7 Show GitHub Exploit DB Packet Storm
200124 9.8 CRITICAL
Network 		gitlab gitlab An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7.9 before 13.8.7, all versions starting from 13.9 before 13.9.5, and all versions starting from 13.10 before 13.1… NVD-CWE-noinfo
CVE-2021-22203 2024-11-21 14:49 2021-04-3 Show GitHub Exploit DB Packet Storm
200125 4.3 MEDIUM
Network 		gitlab gitlab An issue has been discovered in GitLab CE/EE affecting all previous versions. If the victim is an admin, it was possible to issue a CSRF in System hooks through the API. CWE-352
 Origin Validation Error 		CVE-2021-22202 2024-11-21 14:49 2021-04-3 Show GitHub Exploit DB Packet Storm
200126 6.5 MEDIUM
Network 		gitlab gitlab An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.9. A specially crafted import file could read files on the server. NVD-CWE-noinfo
CVE-2021-22201 2024-11-21 14:49 2021-04-3 Show GitHub Exploit DB Packet Storm
200127 7.5 HIGH
Network 		gitlab gitlab An issue has been discovered in GitLab CE/EE affecting all versions starting with 12.6. Under a special condition it was possible to access data of an internal repository through a public project for… NVD-CWE-noinfo
CVE-2021-22200 2024-11-21 14:49 2021-04-3 Show GitHub Exploit DB Packet Storm
200128 4.3 MEDIUM
Network 		gitlab gitlab An issue has been discovered in GitLab CE/EE affecting all versions from 13.8 and above allowing an authenticated user to delete incident metric images of public projects. NVD-CWE-noinfo
CVE-2021-22198 2024-11-21 14:49 2021-04-3 Show GitHub Exploit DB Packet Storm
200129 4.3 MEDIUM
Network 		gitlab gitlab An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.6 where an infinite loop exist when an authenticated user with specific rights access a MR having source and targe… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2021-22197 2024-11-21 14:49 2021-04-3 Show GitHub Exploit DB Packet Storm
200130 5.4 MEDIUM
Network 		gitlab gitlab An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.4. It was possible to exploit a stored cross-site-scripting in merge request via a specifically crafted branch nam… CWE-79
Cross-site Scripting 		CVE-2021-22196 2024-11-21 14:49 2021-04-3 Show GitHub Exploit DB Packet Storm