Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 30, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251131 7.5 危険 e-gads - E-GADS! の common.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2007-2521 2012-06-26 15:46 2007-05-8 Show GitHub Exploit DB Packet Storm
251132 6.8 警告 frankmancuso - MyNews の admin.php における SQL インジェクションの脆弱性 - CVE-2007-2520 2012-06-26 15:46 2007-06-26 Show GitHub Exploit DB Packet Storm
251133 9.3 危険 シマンテック
numara
centennial
- XferWan.exe におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-2514 2012-06-26 15:46 2007-06-6 Show GitHub Exploit DB Packet Storm
251134 7.5 危険 Alcatel-Lucent - OmniPCX Enterprise の Alcatel-Lucent IP-Touch Telephone におけるボイス VLAN へアクセスを取得される脆弱性 - CVE-2007-2512 2012-06-26 15:46 2007-06-7 Show GitHub Exploit DB Packet Storm
251135 7.5 危険 fernando m.a.d.s. - CodePress の codepress.html における任意のコードを実行される脆弱性 - CVE-2007-2501 2012-06-26 15:46 2007-05-3 Show GitHub Exploit DB Packet Storm
251136 10 危険 GNU Project - GNU Gnash の server/parser/sprite_definition.cpp における任意のコードを実行される脆弱性 - CVE-2007-2500 2012-06-26 15:46 2007-05-3 Show GitHub Exploit DB Packet Storm
251137 6.8 警告 globalmegacorp - DVDdb におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2499 2012-06-26 15:46 2007-05-3 Show GitHub Exploit DB Packet Storm
251138 5 警告 archangelmgt - Archangel Weblog の index.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-2574 2012-06-26 15:46 2007-05-9 Show GitHub Exploit DB Packet Storm
251139 7.1 危険 cdelia software - Cdelia Software ImageProcessing におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-2565 2012-06-26 15:46 2007-05-9 Show GitHub Exploit DB Packet Storm
251140 10 危険 Digium - Asterisk の IAX2 チャネルドライバにおけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-2488 2012-06-26 15:46 2007-05-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 30, 2026, 4:22 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
247211 6.5 MEDIUM
Network
gitlab gitlab GitLab EE, version 11.5 before 11.5.1, is vulnerable to an insecure object reference issue that permits a user with Reporter privileges to view the Jaeger Tracing Operations page. CWE-285
Improper Authorization
CVE-2018-19578 2024-11-21 12:58 2019-07-11 Show GitHub Exploit DB Packet Storm
247212 7.7 HIGH
Network
gitlab gitlab GitLab CE/EE, versions 8.18 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an SSRF vulnerability in webhooks. CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2018-19571 2024-11-21 12:58 2019-07-11 Show GitHub Exploit DB Packet Storm
247213 8.1 HIGH
Network
gitlab gitlab GitLab CE/EE, versions 8.6 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an access control issue that allows a Guest user to make changes to or delete their… CWE-284
Improper Access Control
CVE-2018-19576 2024-11-21 12:58 2019-07-11 Show GitHub Exploit DB Packet Storm
247214 4.3 MEDIUM
Network
gitlab gitlab GitLab CE/EE, versions 10.1 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an insecure direct object reference issue that allows a user to make comments on a… CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2018-19575 2024-11-21 12:58 2019-07-11 Show GitHub Exploit DB Packet Storm
247215 5.4 MEDIUM
Network
gitlab gitlab GitLab CE/EE, versions 7.6 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an XSS vulnerability in the OAuth authorization page. CWE-79
Cross-site Scripting
CVE-2018-19574 2024-11-21 12:58 2019-07-11 Show GitHub Exploit DB Packet Storm
247216 5.4 MEDIUM
Network
gitlab gitlab GitLab CE/EE, versions 10.3 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an XSS vulnerability in Markdown fields via Mermaid. CWE-79
Cross-site Scripting
CVE-2018-19573 2024-11-21 12:58 2019-07-11 Show GitHub Exploit DB Packet Storm
247217 5.9 MEDIUM
Network
gitlab gitlab GitLab CE 8.17 and later and EE 8.3 and later have a symlink time-of-check-to-time-of-use race condition that would allow unauthorized access to files in the GitLab Pages chroot environment. This is … CWE-362
Race Condition
CVE-2018-19572 2024-11-21 12:58 2019-07-11 Show GitHub Exploit DB Packet Storm
247218 5.4 MEDIUM
Network
gitlab gitlab GitLab CE/EE, versions 11.3 before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an XSS vulnerability in Markdown fields via unrecognized HTML tags. CWE-79
Cross-site Scripting
CVE-2018-19570 2024-11-21 12:58 2019-07-11 Show GitHub Exploit DB Packet Storm
247219 8.8 HIGH
Network
gitlab gitlab GitLab CE/EE, versions 8.8 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an authorization vulnerability that allows access to the web-UI as a user using a P… CWE-285
Improper Authorization
CVE-2018-19569 2024-11-21 12:58 2019-07-11 Show GitHub Exploit DB Packet Storm
247220 5.3 MEDIUM
Network
gitlab gitlab Gitlab CE/EE, versions 8.6 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an incorrect access control vulnerability that displays to an unauthorized user the… CWE-284
Improper Access Control
CVE-2018-19577 2024-11-21 12:58 2019-07-11 Show GitHub Exploit DB Packet Storm