Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 11, 2026, 6:13 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228151 4.3 警告 Piwik - Piwik におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-1844 2013-03-25 16:34 2013-03-8 Show GitHub Exploit DB Packet Storm
228152 7.2 危険 Canonical - Ubuntu で使用される pam-xdg-support における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-1052 2013-03-25 16:21 2013-03-18 Show GitHub Exploit DB Packet Storm
228153 4.3 警告 Debian
Canonical		 - apt におけるパッケージを変更される脆弱性 CWE-20
不適切な入力確認 		CVE-2013-1051 2013-03-25 16:20 2013-03-14 Show GitHub Exploit DB Packet Storm
228154 6.8 警告 Google - Google Chrome で使用される Google V8 におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2013-2632 2013-03-25 16:04 2013-03-18 Show GitHub Exploit DB Packet Storm
228155 6.9 警告 XFree86 Project - XFree86 x11perf の x11perfcomp における権限を取得される脆弱性 CWE-Other
その他 		CVE-2011-2504 2013-03-25 16:02 2011-07-27 Show GitHub Exploit DB Packet Storm
228156 5.8 警告 Apache Software Foundation - Apache CXF の URIMappingInterceptor における SOAP サービスへのアクセス権を取得される脆弱性 - CVE-2012-5633 2013-03-25 16:00 2012-11-14 Show GitHub Exploit DB Packet Storm
228157 7.5 危険 tg0 - Ruby 用 Curl Gem における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2013-2617 2013-03-25 14:21 2013-03-12 Show GitHub Exploit DB Packet Storm
228158 7.5 危険 Hampton Catlin - Ruby 用 MiniMagick Gem における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2013-2616 2013-03-25 14:20 2013-03-12 Show GitHub Exploit DB Packet Storm
228159 7.5 危険 Daniel Choi - Ruby 用 fastreader Gem における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2013-2615 2013-03-25 14:20 2013-03-12 Show GitHub Exploit DB Packet Storm
228160 7.5 危険 Stefaan Colman - Ruby 用 command_wrap Gem における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2013-1875 2013-03-25 14:19 2013-03-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
194341 7.2 HIGH
Network 		synology diskstation_manager Improper neutralization of special elements used in an OS command in SYNO.Core.Network.PPPoE in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote authenticated users to execute ar… CWE-78
OS Command  		CVE-2021-29083 2024-11-21 15:00 2021-04-1 Show GitHub Exploit DB Packet Storm
194342 6.5 MEDIUM
Network 		btcpayserver btcpay_server BTCPay Server before 1.0.7.1 mishandles the policy setting in which users can register (in Server Settings > Policies). This affects Docker use cases in which a mail server is configured. NVD-CWE-noinfo
CVE-2021-29251 2024-11-21 15:00 2021-04-1 Show GitHub Exploit DB Packet Storm
194343 6.5 MEDIUM
Network 		mahara mahara Mahara 20.10 is affected by Cross Site Request Forgery (CSRF) that allows a remote attacker to remove inbox-mail on the server. The application fails to validate the CSRF token for a POST request. An… CWE-352
 Origin Validation Error 		CVE-2021-29349 2024-11-21 15:00 2021-04-1 Show GitHub Exploit DB Packet Storm
194344 7.5 HIGH
Network 		kopano
zarafa 		groupware_core
zarafa 		kopano-ical (formerly zarafa-ical) in Kopano Groupware Core through 8.7.16, 9.x through 9.1.0, 10.x through 10.0.7, and 11.x through 11.0.1 and Zarafa 6.30.x through 7.2.x allows memory exhaustion vi… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2021-28994 2024-11-21 15:00 2021-04-1 Show GitHub Exploit DB Packet Storm
194345 5.5 MEDIUM
Local 		apache
oracle 		tika
webcenter_portal
primavera_unifier
healthcare_foundation
communications_messaging_server 		A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25. Apache Tika users should upgrade to 1.26 or later. CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2021-28657 2024-11-21 15:00 2021-03-31 Show GitHub Exploit DB Packet Storm
194346 5.4 MEDIUM
Network 		ovidentia ovidentia Ovidentia CMS 6.x contains a SQL injection vulnerability in the "id" parameter of index.php. The "checkbox" property into "text" data can be extracted and displayed in the text region or in source co… CWE-89
SQL Injection 		CVE-2021-29343 2024-11-21 15:00 2021-03-30 Show GitHub Exploit DB Packet Storm
194347 5.4 MEDIUM
Network 		cmsmadesimple cms_made_simple CMS Made Simple (CMSMS) 2.2.15 allows authenticated XSS via the /admin/addbookmark.php script through the Site Admin > My Preferences > Title field. CWE-79
Cross-site Scripting 		CVE-2021-28935 2024-11-21 15:00 2021-03-30 Show GitHub Exploit DB Packet Storm
194348 9.8 CRITICAL
Network 		xerox phaser_6510_firmware
workcentre_6515_firmware
versalink_b400_firmware
versalink_b405_firmware
versalink_b600_firmware
versalink_b610_firmware
versalink_b605_firmware
versalink_b6… 		Xerox Phaser 6510 before 64.65.51 and 64.59.11 (Bridge), WorkCentre 6515 before 65.65.51 and 65.59.11 (Bridge), VersaLink B400 before 37.65.51 and 37.59.01 (Bridge), B405 before 38.65.51 and 38.59.01… CWE-120
Classic Buffer Overflow 		CVE-2021-28672 2024-11-21 15:00 2021-03-30 Show GitHub Exploit DB Packet Storm
194349 9.8 CRITICAL
Network 		xerox phaser_6510_firmware
workcentre_6515_firmware
versalink_b400_firmware
versalink_b405_firmware
versalink_b600_firmware
versalink_b610_firmware
versalink_b605_firmware
versalink_b6… 		Xerox Phaser 6510 before 64.65.51 and 64.59.11 (Bridge), WorkCentre 6515 before 65.65.51 and 65.59.11 (Bridge), VersaLink B400 before 37.65.51 and 37.59.01 (Bridge), B405 before 38.65.51 and 38.59.01… NVD-CWE-noinfo
CVE-2021-28671 2024-11-21 15:00 2021-03-30 Show GitHub Exploit DB Packet Storm
194350 7.5 HIGH
Network 		xerox altalink_b8045_firmware
altalink_b8055_firmware
altalink_b8065_firmware
altalink_b8075_firmware
altalink_b8090_firmware
altalink_c8030_firmware
altalink_c8035_firmware
altalink_c… 		Xerox AltaLink B80xx before 103.008.020.23120, C8030/C8035 before 103.001.020.23120, C8045/C8055 before 103.002.020.23120 and C8070 before 103.003.020.23120 provide the ability to set configuration a… CWE-862
 Missing Authorization 		CVE-2021-28669 2024-11-21 15:00 2021-03-30 Show GitHub Exploit DB Packet Storm