Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227811 6.4 警告 MoinMoin - MoinMoin の AttachFile アクションにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2012-6080 2013-01-7 15:53 2013-01-3 Show GitHub Exploit DB Packet Storm
227812 4.3 警告 ownCloud - ownCloud の bookmarks/js/bookmarks.js におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-5666 2013-01-7 15:52 2012-12-18 Show GitHub Exploit DB Packet Storm
227813 4.3 警告 ownCloud - ownCloud における user_webdavauth および user_ldap の設定を変更される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-5665 2013-01-7 15:40 2012-12-18 Show GitHub Exploit DB Packet Storm
227814 5 警告 Steven Jones - Drupal 用 Context モジュールにおける重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-5655 2013-01-7 15:35 2012-12-19 Show GitHub Exploit DB Packet Storm
227815 4.3 警告 Nodewords - Drupal 用 Nodewords: D6 Meta Tags モジュールにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2012-5654 2013-01-7 15:22 2012-12-5 Show GitHub Exploit DB Packet Storm
227816 6 警告 Drupal - Drupal のファイルアップロード機能における保護メカニズムを回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-5653 2013-01-7 15:14 2012-12-19 Show GitHub Exploit DB Packet Storm
227817 5 警告 Drupal - Drupal におけるアップロードされたファイルに関する重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2012-5652 2013-01-7 15:09 2012-12-19 Show GitHub Exploit DB Packet Storm
227818 5 警告 Drupal - Drupal における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-5651 2013-01-7 15:09 2012-12-19 Show GitHub Exploit DB Packet Storm
227819 5.1 警告 ELinks - ELinks の protocol/http/http_negotiate.c におけるクライアントとして認証される脆弱性 CWE-287
不適切な認証 		CVE-2012-4545 2013-01-7 11:45 2012-10-28 Show GitHub Exploit DB Packet Storm
227820 5 警告 WP PHP widget - WordPress 用 WP PHP widget プラグインにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2013-0721 2013-01-7 11:38 2013-01-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
194751 7.8 HIGH
Local 		avaya aura_device_services An arbitrary code execution vulnerability was discovered in Avaya Aura Device Services that may potentially allow a local user to execute specially crafted scripts. Affects 7.0 through 8.1.4.0 versio… NVD-CWE-noinfo
CVE-2021-25654 2024-11-21 14:55 2021-06-26 Show GitHub Exploit DB Packet Storm
194752 8.1 HIGH
Network 		open-emr openemr In OpenEMR, versions 5.0.0 to 6.0.0.1 are vulnerable to weak password requirements as it does not enforce a maximum password length limit. If a malicious user is aware of the first 72 characters of t… CWE-521
Weak Password Requirements  		CVE-2021-25923 2024-11-21 14:55 2021-06-24 Show GitHub Exploit DB Packet Storm
194753 5.4 MEDIUM
Network 		avaya aura_experience_portal Stored XSS injection vulnerabilities were discovered in the Avaya Aura Experience Portal Web management which could allow an authenticated user to potentially disclose sensitive information. Affected… CWE-79
Cross-site Scripting 		CVE-2021-25656 2024-11-21 14:55 2021-06-24 Show GitHub Exploit DB Packet Storm
194754 6.1 MEDIUM
Network 		avaya aura_experience_portal A vulnerability in the system Service Menu component of Avaya Aura Experience Portal may allow URL Redirection to any untrusted site through a crafted attack. Affected versions include 7.0 through 7.… CWE-601
Open Redirect 		CVE-2021-25655 2024-11-21 14:55 2021-06-24 Show GitHub Exploit DB Packet Storm
194755 7.8 HIGH
Local 		avaya aura_appliance_virtualization_platform A privilege escalation vulnerability was discovered in Avaya Aura Appliance Virtualization Platform Utilities (AVPU) that may potentially allow a local user to escalate privileges. Affects 8.0.0.0 th… NVD-CWE-noinfo
CVE-2021-25653 2024-11-21 14:55 2021-06-24 Show GitHub Exploit DB Packet Storm
194756 5.5 MEDIUM
Local 		avaya aura_appliance_virtualization_platform An information disclosure vulnerability was discovered in the directory and file management of Avaya Aura Appliance Virtualization Platform Utilities (AVPU). This vulnerability may potentially allow … CWE-668
 Exposure of Resource to Wrong Sphere 		CVE-2021-25652 2024-11-21 14:55 2021-06-24 Show GitHub Exploit DB Packet Storm
194757 7.8 HIGH
Local 		avaya aura_utility_services A privilege escalation vulnerability was discovered in Avaya Aura Utility Services that may potentially allow a local user to escalate privileges. Affects all 7.x versions of Avaya Aura Utility Servi… CWE-269
 Improper Privilege Management 		CVE-2021-25651 2024-11-21 14:55 2021-06-24 Show GitHub Exploit DB Packet Storm
194758 8.8 HIGH
Local 		avaya aura_utility_services A privilege escalation vulnerability was discovered in Avaya Aura Utility Services that may potentially allow a local user to execute specially crafted scripts as a privileged user. Affects all 7.x v… CWE-269
 Improper Privilege Management 		CVE-2021-25650 2024-11-21 14:55 2021-06-24 Show GitHub Exploit DB Packet Storm
194759 5.5 MEDIUM
Local 		avaya aura_utility_services An information disclosure vulnerability was discovered in the directory and file management of Avaya Aura Utility Services. This vulnerability may potentially allow any local user to access system fu… NVD-CWE-Other
CVE-2021-25649 2024-11-21 14:55 2021-06-24 Show GitHub Exploit DB Packet Storm
194760 7.8 HIGH
Local 		canonical apport It was discovered that apport in data/apport did not properly open a report file to prevent hanging reads on a FIFO. CWE-20
 Improper Input Validation  		CVE-2021-25684 2024-11-21 14:55 2021-06-11 Show GitHub Exploit DB Packet Storm