Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 7, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
208911 5 警告 Kentico - Kentico CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2015-7822 2015-10-26 11:01 2015-10-15 Show GitHub Exploit DB Packet Storm
208912 9 危険 ownCloud - icewind1991 SMB における任意の SMB コマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2015-7698 2015-10-23 17:30 2015-09-30 Show GitHub Exploit DB Packet Storm
208913 4 警告 ownCloud - ownCloud Server の仮想ファイルシステムにおけるアクセス制限を回避される脆弱性 CWE-Other
その他 		CVE-2015-5954 2015-10-23 17:30 2015-08-3 Show GitHub Exploit DB Packet Storm
208914 3.5 注意 ownCloud - ownCloud Server の activity アプリケーションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2015-5953 2015-10-23 17:30 2015-08-3 Show GitHub Exploit DB Packet Storm
208915 9 危険 ownCloud - ownCloud Server の外部の SMB ストレージドライバにおける任意の SMB コマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2015-4718 2015-10-23 17:30 2015-06-24 Show GitHub Exploit DB Packet Storm
208916 7.8 危険 ownCloud - ownCloud Server のファイル名のサニタイゼーションコンポーネントにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2015-4717 2015-10-23 17:30 2015-06-24 Show GitHub Exploit DB Packet Storm
208917 10 危険 ownCloud - ownCloud Server のルーティングコンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2015-4716 2015-10-23 17:30 2015-06-24 Show GitHub Exploit DB Packet Storm
208918 7.5 危険 マイクロソフト - SharePoint 用 K2 blackpearl、smartforms および K2 の Runtime/Runtime/AjaxCall.ashx における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2015-7299 2015-10-23 17:25 2015-10-13 Show GitHub Exploit DB Packet Storm
208919 2.1 注意 オラクル - Oracle MySQL の MySQL Server における Server : Memcached に関する脆弱性 CWE-noinfo
情報不足 		CVE-2015-4910 2015-10-23 17:08 2015-10-20 Show GitHub Exploit DB Packet Storm
208920 4 警告 オラクル - Oracle MySQL の MySQL Server における Server : DML に関する脆弱性 CWE-noinfo
情報不足 		CVE-2015-4905 2015-10-23 17:08 2015-10-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
297921 - paypal
oscommerce 		payflow_pro_express_checkout
oscommerce 		The PayPal Pro PayFlow EC module in osCommerce does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which… CWE-20
 Improper Input Validation  		CVE-2012-5798 2024-11-21 10:45 2012-11-5 Show GitHub Exploit DB Packet Storm
297922 - brian_burton
oscommerce 		paypal_pro_payflow_module
oscommerce 		The PayPal Pro PayFlow module in osCommerce does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which al… CWE-20
 Improper Input Validation  		CVE-2012-5797 2024-11-21 10:45 2012-11-5 Show GitHub Exploit DB Packet Storm
297923 - paypal
oscommerce 		paypal_pro
oscommerce 		The PayPal Pro module in osCommerce does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man… CWE-20
 Improper Input Validation  		CVE-2012-5796 2024-11-21 10:45 2012-11-5 Show GitHub Exploit DB Packet Storm
297924 - akunamachata
oscommerce 		paypal_express_module
oscommerce 		The PayPal Express module in osCommerce does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows… CWE-20
 Improper Input Validation  		CVE-2012-5795 2024-11-21 10:45 2012-11-5 Show GitHub Exploit DB Packet Storm
297925 - moneybookers
oscommerce 		moneybookers
oscommerce 		The MoneyBookers module in osCommerce does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows m… CWE-20
 Improper Input Validation  		CVE-2012-5794 2024-11-21 10:45 2012-11-5 Show GitHub Exploit DB Packet Storm
297926 - oscommerce
harald_ponce_de_leon 		oscommerce
authorize.net 		The Authorize.Net module in osCommerce does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows … CWE-20
 Improper Input Validation  		CVE-2012-5793 2024-11-21 10:45 2012-11-5 Show GitHub Exploit DB Packet Storm
297927 - oscommerce
sagepay 		oscommerce
sage_pay_direct_module 		The Sage Pay Direct module in osCommerce does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allow… CWE-20
 Improper Input Validation  		CVE-2012-5792 2024-11-21 10:45 2012-11-5 Show GitHub Exploit DB Packet Storm
297928 - paypal invoicing PayPal Invoicing does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle atta… CWE-20
 Improper Input Validation  		CVE-2012-5791 2024-11-21 10:45 2012-11-5 Show GitHub Exploit DB Packet Storm
297929 - paypal payments_standard PayPal Payments Standard PHP Library 20120427 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which … CWE-20
 Improper Input Validation  		CVE-2012-5790 2024-11-21 10:45 2012-11-5 Show GitHub Exploit DB Packet Storm
297930 - paypal payments_standard PayPal Payments Standard PHP Library before 20120427 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate,… CWE-20
 Improper Input Validation  		CVE-2012-5789 2024-11-21 10:45 2012-11-5 Show GitHub Exploit DB Packet Storm