Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 29, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228391	1.7	注意	sitekiosk	-	SiteKiosk の不特定の ActiveX コントロールにおける任意のファイルを読まれる脆弱性	-	CVE-2006-6510	2012-12-20 18:02	2006-12-13	Show	GitHub Exploit DB Packet Storm

228392	4.1	警告	sitekiosk	-	SiteKiosk のスキニング機能におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-6509	2012-12-20 18:02	2006-12-13	Show	GitHub Exploit DB Packet Storm

228393	6	警告	phpBB	-	phpBB におけるクロスサイトリクエストフォージェリの脆弱性	-	CVE-2006-6508	2012-12-20 18:02	2006-12-13	Show	GitHub Exploit DB Packet Storm

228394	6.8	警告	shopsite	-	ShopSite におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-6485	2012-12-20 18:02	2006-12-12	Show	GitHub Exploit DB Packet Storm

228395	5	警告	scriptphp	-	AnnonceScriptHP の admin/admin_membre/fiche_membre.php における重要な情報を取得される脆弱性	-	CVE-2006-6480	2012-12-20 18:02	2006-12-11	Show	GitHub Exploit DB Packet Storm

228396	6.8	警告	scriptphp	-	AnnonceScriptHP におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-6479	2012-12-20 18:02	2006-12-11	Show	GitHub Exploit DB Packet Storm

228397	7.5	危険	scriptphp	-	AnnonceScriptHP における SQL インジェクションの脆弱性	-	CVE-2006-6478	2012-12-20 18:02	2006-12-11	Show	GitHub Exploit DB Packet Storm

228398	10	危険	Xerox	-	Xerox WorkCentre および WorkCentre Pro における脆弱性	-	CVE-2006-6473	2012-12-20 18:02	2006-11-30	Show	GitHub Exploit DB Packet Storm

228399	10	危険	Xerox	-	Xerox WorkCentre および WorkCentre Pro の httpd.conf ファイルにおける脆弱性	-	CVE-2006-6472	2012-12-20 18:02	2006-11-30	Show	GitHub Exploit DB Packet Storm

228400	10	危険	Xerox	-	Xerox WorkCentre および WorkCentre Pro における不特定のファイルアクセス権を許可される脆弱性	-	CVE-2006-6471	2012-12-20 18:02	2006-11-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 29, 2026, 4:51 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
941	5.3	MEDIUM Network	hcltech	aion	HCL AION versión 2 está afectado por una vulnerabilidad de revelación de errores técnicos. Esto puede exponer detalles técnicos sensibles, lo que podría resultar en revelación de información o facili…	CWE-209 Information Exposure Through an Error Message	CVE-2025-55250	2026-04-26 03:04	2026-01-20	Show	GitHub Exploit DB Packet Storm

942	5.3	MEDIUM Network	hcltech	aion	HCL AION version 2 is affected by a JWT Token Expiry Too Long vulnerability. This may increase the risk of token misuse, potentially resulting in unauthorized access if the token is compromised.	CWE-613 Insufficient Session Expiration	CVE-2025-52661	2026-04-26 03:04	2026-01-20	Show	GitHub Exploit DB Packet Storm

943	5.3	MEDIUM Network	hcltech	aion	HCL AION versión 2 está afectada por una vulnerabilidad de JWT Token Expiry Too Long. Esto puede aumentar el riesgo de uso indebido del token, lo que podría resultar en acceso no autorizado si el tok…	CWE-613 Insufficient Session Expiration	CVE-2025-52661	2026-04-26 03:04	2026-01-20	Show	GitHub Exploit DB Packet Storm

944	7.5	HIGH Network	hcltech	aion	HCL AION version 2 is affected by a Cacheable HTTP Response vulnerability. This may lead to unintended storage of sensitive or dynamic content, potentially resulting in unauthorized access or informa…	CWE-525 Use of Web Browser Cache Containing Sensitive Information	CVE-2025-52659	2026-04-26 03:04	2026-01-20	Show	GitHub Exploit DB Packet Storm

945	7.5	HIGH Network	hcltech	aion	HCL AION versión 2 está afectada por una vulnerabilidad de respuesta HTTP cacheable. Esto puede llevar al almacenamiento no intencionado de contenido sensible o dinámico, lo que podría resultar en ac…	CWE-525 Use of Web Browser Cache Containing Sensitive Information	CVE-2025-52659	2026-04-26 03:04	2026-01-20	Show	GitHub Exploit DB Packet Storm

946	5.3	MEDIUM Network	hcltech	aion	HCL AION is affected by a vulnerability where certain identifiers may be predictable in nature. Predictable identifiers may allow an attacker to infer or guess system-generated values, potentially le…	CWE-200 Information Exposure	CVE-2025-52649	2026-04-26 03:04	2026-03-17	Show	GitHub Exploit DB Packet Storm

947	5.3	MEDIUM Network	hcltech	aion	HCL AION se ve afectado por una vulnerabilidad donde ciertos identificadores pueden ser predecibles por naturaleza. Los identificadores predecibles pueden permitir a un atacante inferir o adivinar va…	CWE-200 Information Exposure	CVE-2025-52649	2026-04-26 03:04	2026-03-17	Show	GitHub Exploit DB Packet Storm

948	5.3	MEDIUM Network	hcltech	aion	HCL AION is affected by a vulnerability where model packaging and distribution mechanisms may not include sufficient authenticity verification. This may allow the possibility of unverified or modifie…	CWE-345 Insufficient Verification of Data Authenticity	CVE-2025-52645	2026-04-26 03:04	2026-03-17	Show	GitHub Exploit DB Packet Storm

949	5.3	MEDIUM Network	hcltech	aion	HCL AION está afectado por una vulnerabilidad donde los mecanismos de empaquetado y distribución de modelos podrían no incluir suficiente verificación de autenticidad. Esto podría permitir la posibil…	CWE-345 Insufficient Verification of Data Authenticity	CVE-2025-52645	2026-04-26 03:04	2026-03-17	Show	GitHub Exploit DB Packet Storm

950	7.8	HIGH Local	hcltech	aion	HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environment. This may expose the application to potential security …	CWE-693 Protection Mechanism Failure	CVE-2025-52643	2026-04-26 03:04	2026-03-17	Show	GitHub Exploit DB Packet Storm