Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228841 4.4 警告 stephenjungels - Plait の plaiter における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2008-4085 2012-12-20 18:52 2008-09-15 Show GitHub Exploit DB Packet Storm
228842 7.5 危険 stash - Stash の admin/login.php における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-4081 2012-12-20 18:52 2008-09-15 Show GitHub Exploit DB Packet Storm
228843 6.8 警告 stash - Stash における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4080 2012-12-20 18:52 2008-09-15 Show GitHub Exploit DB Packet Storm
228844 7.5 危険 zanfi solutions - Zanfi Autodealers CMS AutOnline の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4074 2012-12-20 18:52 2008-09-15 Show GitHub Exploit DB Packet Storm
228845 7.5 危険 zanfi solutions - Zanfi Autodealers CMS AutOnline の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4073 2012-12-20 18:52 2008-09-15 Show GitHub Exploit DB Packet Storm
228846 7.5 危険 phsdev - phsBlog の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4072 2012-12-20 18:52 2008-09-15 Show GitHub Exploit DB Packet Storm
228847 7.5 危険 texmedia - Million Pixel Script の tops_top.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4055 2012-12-20 18:52 2008-09-11 Show GitHub Exploit DB Packet Storm
228848 4.6 警告 トレンドマイクロ - Trend Micro NSC モジュールの Trend Micro Personal Firewall サービスにおけるアクセス制限を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-3866 2012-12-20 18:52 2009-01-16 Show GitHub Exploit DB Packet Storm
228849 10 危険 トレンドマイクロ - Trend Micro NSC モジュールのファイアーウォールにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-3865 2012-12-20 18:52 2009-01-16 Show GitHub Exploit DB Packet Storm
228850 5 警告 トレンドマイクロ - Trend Micro NSC モジュールのファイアーウォールサービスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2008-3864 2012-12-20 18:52 2009-01-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
224981 4.9 MEDIUM
Network 		nextcloud
opensuse
suse 		nextcloud_server
backports
suse_linux_enterprise_server 		Improper Input Validation in Nextcloud Server 15.0.7 allows group admins to create users with IDs of system folders. CWE-20
 Improper Input Validation  		CVE-2019-15624 2024-11-21 13:29 2020-02-5 Show GitHub Exploit DB Packet Storm
224982 5.3 MEDIUM
Network 		nextcloud
suse
opensuse 		nextcloud_server
package_hub
backports_sle 		Exposure of Private Information in Nextcloud Server 16.0.1 causes the server to send it's domain and user IDs to the Nextcloud Lookup Server without any further data when the Lookup server is disable… NVD-CWE-noinfo
CVE-2019-15623 2024-11-21 13:29 2020-02-5 Show GitHub Exploit DB Packet Storm
224983 2.4 LOW
Physics 		nextcloud nextcloud Not strictly enough sanitization in the Nextcloud Android app 3.6.0 allowed an attacker to get content information from protected tables when using custom queries. CWE-89
SQL Injection 		CVE-2019-15622 2024-11-21 13:29 2020-02-5 Show GitHub Exploit DB Packet Storm
224984 6.5 MEDIUM
Network 		nextcloud nextcloud_server Improper permissions preservation in Nextcloud Server 16.0.1 causes sharees to be able to reshare with write permissions when sharing the mount point of a share they received, as a public link. CWE-281
 Improper Preservation of Permissions 		CVE-2019-15621 2024-11-21 13:29 2020-02-5 Show GitHub Exploit DB Packet Storm
224985 2.7 LOW
Network 		nextcloud talk Improper access control in Nextcloud Talk 6.0.3 leaks the existance and the name of private conversations when linked them to another shared item via the projects feature. NVD-CWE-Other
CVE-2019-15620 2024-11-21 13:29 2020-02-5 Show GitHub Exploit DB Packet Storm
224986 4.8 MEDIUM
Network 		nextcloud talk
deck
nextcloud_server 		Improper neutralization of file names, conversation names and board names in Nextcloud Server 16.0.3, Nextcloud Talk 6.0.3 and Nextcloud Deck 0.6.5 causes an XSS when linking them with each others in… CWE-79
Cross-site Scripting 		CVE-2019-15619 2024-11-21 13:29 2020-02-5 Show GitHub Exploit DB Packet Storm
224987 4.8 MEDIUM
Network 		nextcloud nextcloud_server Missing escaping of HTML in the Updater of Nextcloud 15.0.5 allowed a reflected XSS when starting the updater from a malicious location. CWE-79
Cross-site Scripting 		CVE-2019-15618 2024-11-21 13:29 2020-02-5 Show GitHub Exploit DB Packet Storm
224988 5.4 MEDIUM
Network 		nextcloud nextcloud_server A missing check in Nextcloud Server 17.0.0 allowed an attacker to set up a new second factor when trying to login. NVD-CWE-noinfo
CVE-2019-15617 2024-11-21 13:29 2020-02-5 Show GitHub Exploit DB Packet Storm
224989 4.3 MEDIUM
Network 		nextcloud nextcloud_server Dangling remote share attempts in Nextcloud 16 allow a DNS pollution when running long. CWE-74
Injection 		CVE-2019-15616 2024-11-21 13:29 2020-02-5 Show GitHub Exploit DB Packet Storm
224990 6.1 MEDIUM
Physics 		nextcloud nextcloud A wrong check for the system time in the Android App 3.9.0 causes a bypass of the lock protection when changing the time of the system to the past. CWE-287
Improper Authentication 		CVE-2019-15615 2024-11-21 13:29 2020-02-5 Show GitHub Exploit DB Packet Storm