Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 12:10 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228991 4.3 警告 Zabbix - ZABBIX の zabbix_agentd におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2008-1353 2012-12-20 18:34 2008-03-17 Show GitHub Exploit DB Packet Storm
228992 4.9 警告 SCO - SCO UnixWare の pkgadd および pkgrm におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-1343 2012-12-20 18:34 2008-02-27 Show GitHub Exploit DB Packet Storm
228993 4.3 警告 polymita technologies - Polymita BPM-Suite などの search 機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-1342 2012-12-20 18:34 2008-03-17 Show GitHub Exploit DB Packet Storm
228994 6.8 警告 woltlab - wBB の index.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-1323 2012-12-20 18:34 2008-03-13 Show GitHub Exploit DB Packet Storm
228995 9.3 危険 versant - Borland CaliberRM などで使用される Versant Object Database における任意のコマンドを実行される脆弱性 CWE-DesignError
CVE-2008-1319 2012-12-20 18:34 2008-03-13 Show GitHub Exploit DB Packet Storm
228996 6.8 警告 qt-cute - QT-cute QuickTalk フォーラムの qtf_ind_search_ov.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1316 2012-12-20 18:34 2008-03-13 Show GitHub Exploit DB Packet Storm
228997 7.5 危険 PHPNUKE - PHP-Nuke 用の ZClassifieds モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1315 2012-12-20 18:34 2008-03-13 Show GitHub Exploit DB Packet Storm
228998 7.5 危険 sudirman angriawan - PHP-Nuke 用の Sudirman Angriawan NukeC30 モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1308 2012-12-20 18:34 2008-03-12 Show GitHub Exploit DB Packet Storm
228999 4.3 警告 WordPress.org - WordPress におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-1304 2012-12-20 18:34 2008-03-12 Show GitHub Exploit DB Packet Storm
229000 4.3 警告 ViewVC - ViewVC における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2008-1292 2012-12-20 18:34 2008-03-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
224441 6.5 MEDIUM
Network 		nextcloud nextcloud_server Improper permissions preservation in Nextcloud Server 16.0.1 causes sharees to be able to reshare with write permissions when sharing the mount point of a share they received, as a public link. CWE-281
 Improper Preservation of Permissions 		CVE-2019-15621 2024-11-21 13:29 2020-02-5 Show GitHub Exploit DB Packet Storm
224442 2.7 LOW
Network 		nextcloud talk Improper access control in Nextcloud Talk 6.0.3 leaks the existance and the name of private conversations when linked them to another shared item via the projects feature. NVD-CWE-Other
CVE-2019-15620 2024-11-21 13:29 2020-02-5 Show GitHub Exploit DB Packet Storm
224443 4.8 MEDIUM
Network 		nextcloud talk
deck
nextcloud_server 		Improper neutralization of file names, conversation names and board names in Nextcloud Server 16.0.3, Nextcloud Talk 6.0.3 and Nextcloud Deck 0.6.5 causes an XSS when linking them with each others in… CWE-79
Cross-site Scripting 		CVE-2019-15619 2024-11-21 13:29 2020-02-5 Show GitHub Exploit DB Packet Storm
224444 4.8 MEDIUM
Network 		nextcloud nextcloud_server Missing escaping of HTML in the Updater of Nextcloud 15.0.5 allowed a reflected XSS when starting the updater from a malicious location. CWE-79
Cross-site Scripting 		CVE-2019-15618 2024-11-21 13:29 2020-02-5 Show GitHub Exploit DB Packet Storm
224445 5.4 MEDIUM
Network 		nextcloud nextcloud_server A missing check in Nextcloud Server 17.0.0 allowed an attacker to set up a new second factor when trying to login. NVD-CWE-noinfo
CVE-2019-15617 2024-11-21 13:29 2020-02-5 Show GitHub Exploit DB Packet Storm
224446 4.3 MEDIUM
Network 		nextcloud nextcloud_server Dangling remote share attempts in Nextcloud 16 allow a DNS pollution when running long. CWE-74
Injection 		CVE-2019-15616 2024-11-21 13:29 2020-02-5 Show GitHub Exploit DB Packet Storm
224447 6.1 MEDIUM
Physics 		nextcloud nextcloud A wrong check for the system time in the Android App 3.9.0 causes a bypass of the lock protection when changing the time of the system to the past. CWE-287
Improper Authentication 		CVE-2019-15615 2024-11-21 13:29 2020-02-5 Show GitHub Exploit DB Packet Storm
224448 5.4 MEDIUM
Network 		nextcloud nextcloud Missing sanitization in the iOS App 2.24.4 causes an XSS when opening malicious HTML files. CWE-79
Cross-site Scripting 		CVE-2019-15614 2024-11-21 13:29 2020-02-5 Show GitHub Exploit DB Packet Storm
224449 8.0 HIGH
Network 		nextcloud
opensuse 		nextcloud_server
backports 		A bug in Nextcloud Server 17.0.1 causes the workflow rules to depend their behaviour on the file extension when checking file mimetypes. CWE-345
 Insufficient Verification of Data Authenticity 		CVE-2019-15613 2024-11-21 13:29 2020-02-5 Show GitHub Exploit DB Packet Storm
224450 5.9 MEDIUM
Physics 		nextcloud nextcloud_server A bug in Nextcloud Server 15.0.2 causes pending 2FA logins to not be correctly expired when the password of the user is reset. CWE-384
 Session Fixation 		CVE-2019-15612 2024-11-21 13:29 2020-02-5 Show GitHub Exploit DB Packet Storm