Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 8, 2026, 2:12 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251331 7.5 危険 joomtraders - Joomla! の com_allcinevid コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2011-0511 2012-03-27 18:42 2011-01-20 Show GitHub Exploit DB Packet Storm
251332 7.5 危険 awbs - AWBS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2011-0510 2012-03-27 18:42 2011-01-20 Show GitHub Exploit DB Packet Storm
251333 4.3 警告 vaadin - Vaadin におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-0509 2012-03-27 18:42 2011-01-20 Show GitHub Exploit DB Packet Storm
251334 4.3 警告 Contao - Contao CMS の system/modules/comments/Comments.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-0508 2012-03-27 18:42 2011-01-20 Show GitHub Exploit DB Packet Storm
251335 4.3 警告 blackmoonftpserver - Blackmoon FTP の FTPService.exe におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2011-0507 2012-03-27 18:42 2011-01-20 Show GitHub Exploit DB Packet Storm
251336 6.8 警告 tsixm - AxDCMS の modules/profile/user.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2011-0506 2012-03-27 18:42 2011-01-20 Show GitHub Exploit DB Packet Storm
251337 5.1 警告 remi jean - Zwii の system/system.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2011-0505 2012-03-27 18:42 2011-01-20 Show GitHub Exploit DB Packet Storm
251338 4.3 警告 vamshop - VaM Shop におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-0504 2012-03-27 18:42 2011-01-20 Show GitHub Exploit DB Packet Storm
251339 6.8 警告 vamshop - VaM Shop におけるクロスサイトフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2011-0503 2012-03-27 18:42 2011-01-20 Show GitHub Exploit DB Packet Storm
251340 9.3 危険 musanim - Music Animation Machine MIDI Player におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2011-0502 2012-03-27 18:42 2011-01-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
265691 6.1 MEDIUM
Network
owncloud
nextcloud
owncloud
nextcloud_server
Nextcloud Server before 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from Reflected XSS in the Gallery application. The gallery app was not properly sanitizing exception messages from the N… CWE-79
Cross-site Scripting
CVE-2016-9466 2024-11-21 12:01 2017-03-28 Show GitHub Exploit DB Packet Storm
265692 5.4 MEDIUM
Network
owncloud
nextcloud
owncloud
nextcloud_server
Nextcloud Server before 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from Stored XSS in CardDAV image export. The CardDAV image export functionality as implemented in Nextcloud/ownCloud all… CWE-79
Cross-site Scripting
CVE-2016-9465 2024-11-21 12:01 2017-03-28 Show GitHub Exploit DB Packet Storm
265693 4.3 MEDIUM
Network
nextcloud nextcloud_server Nextcloud Server before 9.0.54 and 10.0.0 suffers from an improper authorization check on removing shares. The Sharing Backend as implemented in Nextcloud does differentiate between shares to users a… CWE-285
Improper Authorization
CVE-2016-9464 2024-11-21 12:01 2017-03-28 Show GitHub Exploit DB Packet Storm
265694 8.1 HIGH
Network
owncloud
nextcloud
owncloud
nextcloud_server
Nextcloud Server before 9.0.54 and 10.0.1 & ownCloud Server before 9.1.2, 9.0.6, and 8.2.9 suffer from SMB User Authentication Bypass. Nextcloud/ownCloud include an optional and not by default enable… CWE-287
Improper Authentication
CVE-2016-9463 2024-11-21 12:01 2017-03-28 Show GitHub Exploit DB Packet Storm
265695 4.3 MEDIUM
Network
owncloud
nextcloud
owncloud
nextcloud_server
Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are not properly verifying restore privileges when restoring a file. The restore capability of Nextcloud/ownCloud was not verifying wheth… CWE-284
Improper Access Control
CVE-2016-9462 2024-11-21 12:01 2017-03-28 Show GitHub Exploit DB Packet Storm
265696 4.3 MEDIUM
Network
owncloud
nextcloud
owncloud
nextcloud_server
Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are not properly verifying edit check permissions on WebDAV copy actions. The WebDAV endpoint was not properly checking the permission on… CWE-284
Improper Access Control
CVE-2016-9461 2024-11-21 12:01 2017-03-28 Show GitHub Exploit DB Packet Storm
265697 5.3 MEDIUM
Network
nextcloud
owncloud
nextcloud
owncloud
Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are vulnerable to a content-spoofing attack in the files app. The location bar in the files app was not verifying the passed parameters. … CWE-284
Improper Access Control
CVE-2016-9460 2024-11-21 12:01 2017-03-28 Show GitHub Exploit DB Packet Storm
265698 6.1 MEDIUM
Network
owncloud
nextcloud
owncloud
nextcloud_server
Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are vulnerable to a log pollution vulnerability potentially leading to a local XSS. The download log functionality in the admin screen is… CWE-79
Cross-site Scripting
CVE-2016-9459 2024-11-21 12:01 2017-03-28 Show GitHub Exploit DB Packet Storm
265699 5.4 MEDIUM
Network
revive-adserver revive_adserver Revive Adserver before 3.2.3 suffers from Reflected XSS. `www/admin/stats.php` is vulnerable to reflected XSS attacks via multiple parameters that are not properly sanitised or escaped when displayed… CWE-79
Cross-site Scripting
CVE-2016-9457 2024-11-21 12:01 2017-03-28 Show GitHub Exploit DB Packet Storm
265700 8.8 HIGH
Network
revive-adserver revive_adserver Revive Adserver before 3.2.3 suffers from Cross-Site Request Forgery (CSRF). The Revive Adserver team conducted a security audit of the admin interface scripts in order to identify and fix other pote… CWE-352
 Origin Validation Error
CVE-2016-9456 2024-11-21 12:01 2017-03-28 Show GitHub Exploit DB Packet Storm