Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252071 7.5 危険 4homepages - 4images の admin/categories.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-1022 2012-02-10 11:08 2012-02-8 Show GitHub Exploit DB Packet Storm
252072 4.3 警告 4homepages - 4images の admin/categories.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1021 2012-02-10 10:35 2012-02-8 Show GitHub Exploit DB Packet Storm
252073 4.3 警告 Overseas - NexorONE Online Banking の login.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1020 2012-02-10 10:29 2012-02-8 Show GitHub Exploit DB Packet Storm
252074 4.3 警告 XWiki - XWiki Enterprise におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1019 2012-02-10 10:16 2012-02-8 Show GitHub Exploit DB Packet Storm
252075 4.3 警告 D-Mack Media - Joomla! 用 D-Mack Media Currency Converter モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1018 2012-02-10 10:15 2012-02-8 Show GitHub Exploit DB Packet Storm
252076 7.5 危険 Secure Ideas - Basic Analysis and Security Engine の base_qry_main.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-1017 2012-02-10 10:14 2012-02-8 Show GitHub Exploit DB Packet Storm
252077 4.3 警告 ]project-open[ - Project Open にクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1027 2012-02-9 18:34 2012-02-6 Show GitHub Exploit DB Packet Storm
252078 4.3 警告 Sphinx Software - Sphinx Software Mobile Web Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1005 2012-02-9 16:52 2012-02-7 Show GitHub Exploit DB Packet Storm
252079 7.5 危険 Hudong - HDWiki の attachement.php における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2011-5077 2012-02-9 16:01 2012-02-8 Show GitHub Exploit DB Packet Storm
252080 7.5 危険 Hudong - HDWiki の model/comment.class.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-5076 2012-02-9 16:00 2012-02-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 29, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
195511 6.5 MEDIUM
Network 		gitlab gitlab A denial of service vulnerability in all versions of GitLab CE/EE before 13.12.2, 13.11.5 or 13.10.5 allows an attacker to cause uncontrolled resource consumption with a very long issue or merge requ… CWE-400
 Uncontrolled Resource Consumption 		CVE-2021-22216 2024-11-21 14:49 2021-06-9 Show GitHub Exploit DB Packet Storm
195512 6.5 MEDIUM
Network 		gitlab gitlab An issue has been discovered in GitLab affecting all versions starting from 12.9.0 before 13.10.5, all versions starting from 13.11.0 before 13.11.5, all versions starting from 13.12.0 before 13.12.2… CWE-613
 Insufficient Session Expiration 		CVE-2021-22221 2024-11-21 14:49 2021-06-9 Show GitHub Exploit DB Packet Storm
195513 4.9 MEDIUM
Network 		gitlab gitlab All versions of GitLab CE/EE starting from 9.5 before 13.10.5, all versions starting from 13.11 before 13.11.5, and all versions starting from 13.12 before 13.12.2 allow a high privilege user to obta… CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2021-22219 2024-11-21 14:49 2021-06-9 Show GitHub Exploit DB Packet Storm
195514 6.5 MEDIUM
Network 		gitlab gitlab A denial of service vulnerability in all versions of GitLab CE/EE before 13.12.2, 13.11.5 or 13.10.5 allows an attacker to cause uncontrolled resource consumption with a specially crafted issue or me… NVD-CWE-Other
CVE-2021-22217 2024-11-21 14:49 2021-06-9 Show GitHub Exploit DB Packet Storm
195515 6.5 MEDIUM
Network 		gitlab gitlab A cross-site leak vulnerability in the OAuth flow of all versions of GitLab CE/EE since 7.10 allowed an attacker to leak an OAuth access token by getting the victim to visit a malicious page with Saf… NVD-CWE-Other
CVE-2021-22213 2024-11-21 14:49 2021-06-9 Show GitHub Exploit DB Packet Storm
195516 2.6 LOW
Network 		gitlab gitlab All versions of GitLab CE/EE starting from 12.8 before 13.10.5, all versions starting from 13.11 before 13.11.5, and all versions starting from 13.12 before 13.12.2 were affected by an issue in the h… CWE-295
Improper Certificate Validation  		CVE-2021-22218 2024-11-21 14:49 2021-06-9 Show GitHub Exploit DB Packet Storm
195517 2.7 LOW
Network 		gitlab gitlab An information disclosure vulnerability in GitLab EE versions 13.11 and later allowed a project owner to leak information about the members' on-call rotations in other projects NVD-CWE-noinfo
CVE-2021-22215 2024-11-21 14:49 2021-06-9 Show GitHub Exploit DB Packet Storm
195518 8.6 HIGH
Network 		gitlab gitlab When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab CE/EE affecting all versions starting from 10.5 was possible to exploit for an un… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2021-22214 2024-11-21 14:49 2021-06-9 Show GitHub Exploit DB Packet Storm
195519 7.4 HIGH
Network 		ntpsec
fedoraproject 		ntpsec
fedora 		ntpkeygen can generate keys that ntpd fails to parse. NTPsec 1.2.0 allows ntpkeygen to generate keys with '#' characters. ntpd then either pads, shortens the key, or fails to load these keys entirely… CWE-327
 Use of a Broken or Risky Cryptographic Algorithm 		CVE-2021-22212 2024-11-21 14:49 2021-06-8 Show GitHub Exploit DB Packet Storm
195520 7.5 HIGH
Network 		vmware
debian 		rabbitmq
debian_linux 		RabbitMQ all versions prior to 3.8.16 are prone to a denial of service vulnerability due to improper input validation in AMQP 1.0 client connection endpoint. A malicious user can exploit the vulnerab… CWE-20
 Improper Input Validation  		CVE-2021-22116 2024-11-21 14:49 2021-06-8 Show GitHub Exploit DB Packet Storm