Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
229251 5 警告 prototypejs - prototypejs フレームワークにおけるデータを取得される脆弱性 CWE-DesignError
CVE-2007-2383 2012-12-20 18:19 2007-04-24 Show GitHub Exploit DB Packet Storm
229252 10 危険 シマンテック - Symantec ESM のエージェントリモート更新インターフェースにおける任意のコードを実行される脆弱性 - CVE-2007-2375 2012-12-20 18:19 2007-04-5 Show GitHub Exploit DB Packet Storm
229253 7.5 危険 XOOPS - XOOPS 用の John Mordo モジュールにおける SQL インジェクションの脆弱性 - CVE-2007-2370 2012-12-20 18:19 2007-04-30 Show GitHub Exploit DB Packet Storm
229254 5 警告 webSPELL - WebSPELL の picture.php における任意のファイルを読まれる脆弱性 - CVE-2007-2368 2012-12-20 18:19 2007-04-30 Show GitHub Exploit DB Packet Storm
229255 10 危険 wserve http server - whttp の wserve_console.exe におけるバッファオーバーフローの脆弱性 - CVE-2007-2367 2012-12-20 18:19 2007-04-30 Show GitHub Exploit DB Packet Storm
229256 4.9 警告 シマンテック - Symantec Norton Ghost などの製品における資格情報を取得される脆弱性 - CVE-2007-2361 2012-12-20 18:19 2007-04-26 Show GitHub Exploit DB Packet Storm
229257 6.8 警告 シマンテック - Symantec Norton Ghost などの製品における資格情報を取得される脆弱性 - CVE-2007-2360 2012-12-20 18:19 2007-04-26 Show GitHub Exploit DB Packet Storm
229258 7.2 危険 シマンテック - Symantec Norton Ghost などの製品で使用される Ghost Service Manager におけるバッファオーバーフローの脆弱性 - CVE-2007-2359 2012-12-20 18:19 2007-04-26 Show GitHub Exploit DB Packet Storm
229259 6.8 警告 sinecms - SineCms の mods/Core/result.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2357 2012-12-20 18:19 2007-04-30 Show GitHub Exploit DB Packet Storm
229260 7.8 危険 Progress Software Corporation - Progress Webspeed Messenger における重要な情報を取得される脆弱性 - CVE-2007-2354 2012-12-20 18:19 2007-04-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
222881 7.5 HIGH
Network
nodejs
debian
opensuse
redhat
oracle
node.js
debian_linux
leap
software_collections
enterprise_linux_eus
enterprise_linux_server_tus
enterprise_linux_server_aus
enterprise_linux
graalvm
communications_cloud_na…
Improper Certificate Validation in Node.js 10, 12, and 13 causes the process to abort when sending a crafted X.509 certificate CWE-295
Improper Certificate Validation 
CVE-2019-15604 2024-11-21 13:29 2020-02-8 Show GitHub Exploit DB Packet Storm
222882 7.8 HIGH
Local
fortinet forticlient A privilege escalation vulnerability in FortiClient for Linux 6.2.1 and below may allow an user with low privilege to run system commands under root privilege via injecting specially crafted "ExportL… NVD-CWE-noinfo
CVE-2019-15711 2024-11-21 13:29 2020-02-7 Show GitHub Exploit DB Packet Storm
222883 4.9 MEDIUM
Network
nextcloud
opensuse
suse
nextcloud_server
backports
suse_linux_enterprise_server
Improper Input Validation in Nextcloud Server 15.0.7 allows group admins to create users with IDs of system folders. CWE-20
 Improper Input Validation 
CVE-2019-15624 2024-11-21 13:29 2020-02-5 Show GitHub Exploit DB Packet Storm
222884 5.3 MEDIUM
Network
nextcloud
suse
opensuse
nextcloud_server
package_hub
backports_sle
Exposure of Private Information in Nextcloud Server 16.0.1 causes the server to send it's domain and user IDs to the Nextcloud Lookup Server without any further data when the Lookup server is disable… NVD-CWE-noinfo
CVE-2019-15623 2024-11-21 13:29 2020-02-5 Show GitHub Exploit DB Packet Storm
222885 2.4 LOW
Physics
nextcloud nextcloud Not strictly enough sanitization in the Nextcloud Android app 3.6.0 allowed an attacker to get content information from protected tables when using custom queries. CWE-89
SQL Injection
CVE-2019-15622 2024-11-21 13:29 2020-02-5 Show GitHub Exploit DB Packet Storm
222886 6.5 MEDIUM
Network
nextcloud nextcloud_server Improper permissions preservation in Nextcloud Server 16.0.1 causes sharees to be able to reshare with write permissions when sharing the mount point of a share they received, as a public link. CWE-281
 Improper Preservation of Permissions
CVE-2019-15621 2024-11-21 13:29 2020-02-5 Show GitHub Exploit DB Packet Storm
222887 2.7 LOW
Network
nextcloud talk Improper access control in Nextcloud Talk 6.0.3 leaks the existance and the name of private conversations when linked them to another shared item via the projects feature. NVD-CWE-Other
CVE-2019-15620 2024-11-21 13:29 2020-02-5 Show GitHub Exploit DB Packet Storm
222888 4.8 MEDIUM
Network
nextcloud talk
deck
nextcloud_server
Improper neutralization of file names, conversation names and board names in Nextcloud Server 16.0.3, Nextcloud Talk 6.0.3 and Nextcloud Deck 0.6.5 causes an XSS when linking them with each others in… CWE-79
Cross-site Scripting
CVE-2019-15619 2024-11-21 13:29 2020-02-5 Show GitHub Exploit DB Packet Storm
222889 4.8 MEDIUM
Network
nextcloud nextcloud_server Missing escaping of HTML in the Updater of Nextcloud 15.0.5 allowed a reflected XSS when starting the updater from a malicious location. CWE-79
Cross-site Scripting
CVE-2019-15618 2024-11-21 13:29 2020-02-5 Show GitHub Exploit DB Packet Storm
222890 5.4 MEDIUM
Network
nextcloud nextcloud_server A missing check in Nextcloud Server 17.0.0 allowed an attacker to set up a new second factor when trying to login. NVD-CWE-noinfo
CVE-2019-15617 2024-11-21 13:29 2020-02-5 Show GitHub Exploit DB Packet Storm