Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229261 7.5 危険 php-generics - PHP-Generics における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2346 2012-12-20 18:19 2007-04-27 Show GitHub Exploit DB Packet Storm
229262 7.5 危険 phpbandmanager - phpBandManager の suite/index.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2341 2012-12-20 18:19 2007-04-27 Show GitHub Exploit DB Packet Storm
229263 6.8 警告 phporacleview - phporacleview の inc/include_all.inc.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-2340 2012-12-20 18:19 2007-04-27 Show GitHub Exploit DB Packet Storm
229264 7.5 危険 shop-script - Shop-Script の cart.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2331 2012-12-20 18:19 2007-04-26 Show GitHub Exploit DB Packet Storm
229265 7.5 危険 searchactivity - Searchactivity の searchbot.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2329 2012-12-20 18:19 2007-04-26 Show GitHub Exploit DB Packet Storm
229266 7.5 危険 phpmytgp - phpMYTGP の addvip.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2328 2012-12-20 18:19 2007-04-26 Show GitHub Exploit DB Packet Storm
229267 10 危険 SilverStripe - SilverStripe の検索機能における脆弱性 - CVE-2007-2321 2012-12-20 18:19 2007-04-17 Show GitHub Exploit DB Packet Storm
229268 7.5 危険 VWar - PHP-Nuke 用の VWar モジュールにおける SQL インジェクションの脆弱性 - CVE-2007-2312 2012-12-20 18:19 2007-04-26 Show GitHub Exploit DB Packet Storm
229269 7.5 危険 webkalk2 - WebKalk2 の engine/engine.inc.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2307 2012-12-20 18:19 2007-04-26 Show GitHub Exploit DB Packet Storm
229270 4.3 警告 VWar - PHP-Nuke 用の VWar モジュールにおけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2306 2012-12-20 18:19 2007-04-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
222881 7.5 HIGH
Network 		nodejs
debian
opensuse
redhat
oracle 		node.js
debian_linux
leap
software_collections
enterprise_linux_eus
enterprise_linux_server_tus
enterprise_linux_server_aus
enterprise_linux
graalvm
communications_cloud_na… 		Improper Certificate Validation in Node.js 10, 12, and 13 causes the process to abort when sending a crafted X.509 certificate CWE-295
Improper Certificate Validation  		CVE-2019-15604 2024-11-21 13:29 2020-02-8 Show GitHub Exploit DB Packet Storm
222882 7.8 HIGH
Local 		fortinet forticlient A privilege escalation vulnerability in FortiClient for Linux 6.2.1 and below may allow an user with low privilege to run system commands under root privilege via injecting specially crafted "ExportL… NVD-CWE-noinfo
CVE-2019-15711 2024-11-21 13:29 2020-02-7 Show GitHub Exploit DB Packet Storm
222883 4.9 MEDIUM
Network 		nextcloud
opensuse
suse 		nextcloud_server
backports
suse_linux_enterprise_server 		Improper Input Validation in Nextcloud Server 15.0.7 allows group admins to create users with IDs of system folders. CWE-20
 Improper Input Validation  		CVE-2019-15624 2024-11-21 13:29 2020-02-5 Show GitHub Exploit DB Packet Storm
222884 5.3 MEDIUM
Network 		nextcloud
suse
opensuse 		nextcloud_server
package_hub
backports_sle 		Exposure of Private Information in Nextcloud Server 16.0.1 causes the server to send it's domain and user IDs to the Nextcloud Lookup Server without any further data when the Lookup server is disable… NVD-CWE-noinfo
CVE-2019-15623 2024-11-21 13:29 2020-02-5 Show GitHub Exploit DB Packet Storm
222885 2.4 LOW
Physics 		nextcloud nextcloud Not strictly enough sanitization in the Nextcloud Android app 3.6.0 allowed an attacker to get content information from protected tables when using custom queries. CWE-89
SQL Injection 		CVE-2019-15622 2024-11-21 13:29 2020-02-5 Show GitHub Exploit DB Packet Storm
222886 6.5 MEDIUM
Network 		nextcloud nextcloud_server Improper permissions preservation in Nextcloud Server 16.0.1 causes sharees to be able to reshare with write permissions when sharing the mount point of a share they received, as a public link. CWE-281
 Improper Preservation of Permissions 		CVE-2019-15621 2024-11-21 13:29 2020-02-5 Show GitHub Exploit DB Packet Storm
222887 2.7 LOW
Network 		nextcloud talk Improper access control in Nextcloud Talk 6.0.3 leaks the existance and the name of private conversations when linked them to another shared item via the projects feature. NVD-CWE-Other
CVE-2019-15620 2024-11-21 13:29 2020-02-5 Show GitHub Exploit DB Packet Storm
222888 4.8 MEDIUM
Network 		nextcloud talk
deck
nextcloud_server 		Improper neutralization of file names, conversation names and board names in Nextcloud Server 16.0.3, Nextcloud Talk 6.0.3 and Nextcloud Deck 0.6.5 causes an XSS when linking them with each others in… CWE-79
Cross-site Scripting 		CVE-2019-15619 2024-11-21 13:29 2020-02-5 Show GitHub Exploit DB Packet Storm
222889 4.8 MEDIUM
Network 		nextcloud nextcloud_server Missing escaping of HTML in the Updater of Nextcloud 15.0.5 allowed a reflected XSS when starting the updater from a malicious location. CWE-79
Cross-site Scripting 		CVE-2019-15618 2024-11-21 13:29 2020-02-5 Show GitHub Exploit DB Packet Storm
222890 5.4 MEDIUM
Network 		nextcloud nextcloud_server A missing check in Nextcloud Server 17.0.0 allowed an attacker to set up a new second factor when trying to login. NVD-CWE-noinfo
CVE-2019-15617 2024-11-21 13:29 2020-02-5 Show GitHub Exploit DB Packet Storm