Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
256061	4.3	警告	サイバートラスト株式会社レッドハット	-	Red Hat および MIRACLE LINUX の sendmail におけるメール送信元を偽装される脆弱性	-	CVE-2006-7176	2010-04-27 15:18	2007-03-27	Show	GitHub Exploit DB Packet Storm

256062	6.9	警告	アップル	-	Windows 上で稼働する Apple iTunes のインストールパッケージにおける権限昇格の脆弱性	CWE-362 競合状態	CVE-2010-0532	2010-04-26 16:59	2010-03-31	Show	GitHub Exploit DB Packet Storm

256063	4.3	警告	アップル	-	Apple iTunes におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-0531	2010-04-26 16:59	2010-03-31	Show	GitHub Exploit DB Packet Storm

256064	9.3	危険	アップル	-	Windows 上で稼働する Apple QuickTime における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0536	2010-04-26 16:59	2010-03-31	Show	GitHub Exploit DB Packet Storm

256065	9.3	危険	アップル	-	Windows 上で稼働する Apple QuickTime の QuickTime.qts における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0529	2010-04-26 16:59	2010-03-31	Show	GitHub Exploit DB Packet Storm

256066	9.3	危険	アップル	-	Windows 上で稼働する Apple QuickTime における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0528	2010-04-26 16:58	2010-03-31	Show	GitHub Exploit DB Packet Storm

256067	9.3	危険	アップル	-	Apple QuickTime における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-0527	2010-04-26 16:58	2010-03-31	Show	GitHub Exploit DB Packet Storm

256068	5	警告	アップルサイバートラスト株式会社 Ruby-lang.org レッドハット	-	Ruby の BigDecimal ライブラリにおけるサービス運用妨害 (DoS) の脆弱性	CWE-189 数値処理の問題	CVE-2009-1904	2010-04-26 16:46	2009-06-9	Show	GitHub Exploit DB Packet Storm

256069	6.9	警告	アップル Vim	-	Vim の Python インターフェースの src/if_python.c における信頼性のない検索パスの脆弱性	CWE-Other その他	CVE-2009-0316	2010-04-26 16:45	2009-01-28	Show	GitHub Exploit DB Packet Storm

256070	9.3	危険	アップルサイバートラスト株式会社 Vim レッドハット	-	Vim におけるエスケープ文字を適切に処理しないことに関する任意のコマンドを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2008-4101	2010-04-26 16:45	2008-10-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
225171	2.7	LOW Network	nextcloud	talk	Improper access control in Nextcloud Talk 6.0.3 leaks the existance and the name of private conversations when linked them to another shared item via the projects feature.	NVD-CWE-Other	CVE-2019-15620	2024-11-21 13:29	2020-02-5	Show	GitHub Exploit DB Packet Storm

225172	4.8	MEDIUM Network	nextcloud	talk deck nextcloud_server	Improper neutralization of file names, conversation names and board names in Nextcloud Server 16.0.3, Nextcloud Talk 6.0.3 and Nextcloud Deck 0.6.5 causes an XSS when linking them with each others in…	CWE-79 Cross-site Scripting	CVE-2019-15619	2024-11-21 13:29	2020-02-5	Show	GitHub Exploit DB Packet Storm

225173	4.8	MEDIUM Network	nextcloud	nextcloud_server	Missing escaping of HTML in the Updater of Nextcloud 15.0.5 allowed a reflected XSS when starting the updater from a malicious location.	CWE-79 Cross-site Scripting	CVE-2019-15618	2024-11-21 13:29	2020-02-5	Show	GitHub Exploit DB Packet Storm

225174	5.4	MEDIUM Network	nextcloud	nextcloud_server	A missing check in Nextcloud Server 17.0.0 allowed an attacker to set up a new second factor when trying to login.	NVD-CWE-noinfo	CVE-2019-15617	2024-11-21 13:29	2020-02-5	Show	GitHub Exploit DB Packet Storm

225175	4.3	MEDIUM Network	nextcloud	nextcloud_server	Dangling remote share attempts in Nextcloud 16 allow a DNS pollution when running long.	CWE-74 Injection	CVE-2019-15616	2024-11-21 13:29	2020-02-5	Show	GitHub Exploit DB Packet Storm

225176	6.1	MEDIUM Physics	nextcloud	nextcloud	A wrong check for the system time in the Android App 3.9.0 causes a bypass of the lock protection when changing the time of the system to the past.	CWE-287 Improper Authentication	CVE-2019-15615	2024-11-21 13:29	2020-02-5	Show	GitHub Exploit DB Packet Storm

225177	5.4	MEDIUM Network	nextcloud	nextcloud	Missing sanitization in the iOS App 2.24.4 causes an XSS when opening malicious HTML files.	CWE-79 Cross-site Scripting	CVE-2019-15614	2024-11-21 13:29	2020-02-5	Show	GitHub Exploit DB Packet Storm

225178	8.0	HIGH Network	nextcloud opensuse	nextcloud_server backports	A bug in Nextcloud Server 17.0.1 causes the workflow rules to depend their behaviour on the file extension when checking file mimetypes.	CWE-345 Insufficient Verification of Data Authenticity	CVE-2019-15613	2024-11-21 13:29	2020-02-5	Show	GitHub Exploit DB Packet Storm

225179	5.9	MEDIUM Physics	nextcloud	nextcloud_server	A bug in Nextcloud Server 15.0.2 causes pending 2FA logins to not be correctly expired when the password of the user is reset.	CWE-384 Session Fixation	CVE-2019-15612	2024-11-21 13:29	2020-02-5	Show	GitHub Exploit DB Packet Storm

225180	4.9	MEDIUM Network	nextcloud	nextcloud	Violation of Secure Design Principles in the iOS App 2.23.0 causes the app to leak its login and token to other Nextcloud services when search e.g. for federated users or registering for push notific…	NVD-CWE-Other	CVE-2019-15611	2024-11-21 13:29	2020-02-5	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed