Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 13, 2026, 2 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 228981 | 5 | 警告 | Imthiaz | - | WordPress 用 Organizer プラグインにおけるインストールパスを取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2012-6512 | 2013-01-25 14:27 | 2013-01-24 | Show | GitHub Exploit DB Packet Storm |
| 228982 | 4.3 | 警告 | Imthiaz | - | WordPress 用 Organizer プラグインにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2012-6511 | 2013-01-25 14:26 | 2013-01-24 | Show | GitHub Exploit DB Packet Storm |
| 228983 | 4.3 | 警告 | NetArt Media | - | NetArt Media Car Portal におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2012-6510 | 2013-01-25 14:25 | 2013-01-24 | Show | GitHub Exploit DB Packet Storm |
| 228984 | 7.5 | 危険 | NetArt Media | - | NetArt Media Car Portal における任意の PHP コードを実行される脆弱性 |
CWE-Other
その他 |
CVE-2012-6509 | 2013-01-25 14:25 | 2013-01-24 | Show | GitHub Exploit DB Packet Storm |
| 228985 | 6.8 | 警告 | NetArt Media | - | NetArt Media Car Portal におけるクロスサイトリクエストフォージェリの脆弱性 |
CWE-352
同一生成元ポリシー違反 |
CVE-2012-6508 | 2013-01-25 14:24 | 2013-01-24 | Show | GitHub Exploit DB Packet Storm |
| 228986 | 7.5 | 危険 | Jason Sexauer | - | ChurchCMS の admin.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2012-6507 | 2013-01-25 14:23 | 2013-01-24 | Show | GitHub Exploit DB Packet Storm |
| 228987 | 4.3 | 警告 | Zingiri | - | WordPress 用 Zingiri Web Shop プラグインにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2012-6506 | 2013-01-25 14:22 | 2012-04-28 | Show | GitHub Exploit DB Packet Storm |
| 228988 | 4.3 | 警告 | Shawn Bradley | - | PHP Volunteer Management におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2012-6505 | 2013-01-25 14:20 | 2013-01-24 | Show | GitHub Exploit DB Packet Storm |
| 228989 | 7.5 | 危険 | Shawn Bradley | - | PHP Volunteer Management における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2012-6504 | 2013-01-25 14:20 | 2013-01-24 | Show | GitHub Exploit DB Packet Storm |
| 228990 | 10 | 危険 | Ninja Forge | - | Joomla! 用 NinjaXplorer コンポーネントにおける脆弱性 |
CWE-noinfo
情報不足 |
CVE-2012-6503 | 2013-01-25 14:19 | 2012-04-26 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 13, 2026, 4:20 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 194611 | 5.4 |
MEDIUM
Network |
ovidentia | ovidentia | Ovidentia CMS 6.x contains a SQL injection vulnerability in the "id" parameter of index.php. The "checkbox" property into "text" data can be extracted and displayed in the text region or in source co… |
CWE-89
SQL Injection |
CVE-2021-29343 | 2024-11-21 15:00 | 2021-03-30 | Show | GitHub Exploit DB Packet Storm |
| 194612 | 5.4 |
MEDIUM
Network |
cmsmadesimple | cms_made_simple | CMS Made Simple (CMSMS) 2.2.15 allows authenticated XSS via the /admin/addbookmark.php script through the Site Admin > My Preferences > Title field. |
CWE-79
Cross-site Scripting |
CVE-2021-28935 | 2024-11-21 15:00 | 2021-03-30 | Show | GitHub Exploit DB Packet Storm |
| 194613 | 9.8 |
CRITICAL
Network |
xerox |
phaser_6510_firmware workcentre_6515_firmware versalink_b400_firmware versalink_b405_firmware versalink_b600_firmware versalink_b610_firmware versalink_b605_firmware versalink_b6… |
Xerox Phaser 6510 before 64.65.51 and 64.59.11 (Bridge), WorkCentre 6515 before 65.65.51 and 65.59.11 (Bridge), VersaLink B400 before 37.65.51 and 37.59.01 (Bridge), B405 before 38.65.51 and 38.59.01… |
CWE-120
Classic Buffer Overflow |
CVE-2021-28672 | 2024-11-21 15:00 | 2021-03-30 | Show | GitHub Exploit DB Packet Storm |
| 194614 | 9.8 |
CRITICAL
Network |
xerox |
phaser_6510_firmware workcentre_6515_firmware versalink_b400_firmware versalink_b405_firmware versalink_b600_firmware versalink_b610_firmware versalink_b605_firmware versalink_b6… |
Xerox Phaser 6510 before 64.65.51 and 64.59.11 (Bridge), WorkCentre 6515 before 65.65.51 and 65.59.11 (Bridge), VersaLink B400 before 37.65.51 and 37.59.01 (Bridge), B405 before 38.65.51 and 38.59.01… |
NVD-CWE-noinfo
|
CVE-2021-28671 | 2024-11-21 15:00 | 2021-03-30 | Show | GitHub Exploit DB Packet Storm |
| 194615 | 7.5 |
HIGH
Network |
xerox |
altalink_b8045_firmware altalink_b8055_firmware altalink_b8065_firmware altalink_b8075_firmware altalink_b8090_firmware altalink_c8030_firmware altalink_c8035_firmware altalink_c… |
Xerox AltaLink B80xx before 103.008.020.23120, C8030/C8035 before 103.001.020.23120, C8045/C8055 before 103.002.020.23120 and C8070 before 103.003.020.23120 provide the ability to set configuration a… |
CWE-862
Missing Authorization |
CVE-2021-28669 | 2024-11-21 15:00 | 2021-03-30 | Show | GitHub Exploit DB Packet Storm |
| 194616 | 9.8 |
CRITICAL
Network |
xerox |
altalink_b8045_firmware altalink_b8055_firmware altalink_b8065_firmware altalink_b8075_firmware altalink_b8090_firmware altalink_c8030_firmware altalink_c8035_firmware altalink_c… |
Xerox AltaLink B80xx before 103.008.020.23120, C8030/C8035 before 103.001.020.23120, C8045/C8055 before 103.002.020.23120 and C8070 before 103.003.020.23120 has several SQL injection vulnerabilities. |
CWE-89
SQL Injection |
CVE-2021-28668 | 2024-11-21 15:00 | 2021-03-30 | Show | GitHub Exploit DB Packet Storm |
| 194617 | 9.8 |
CRITICAL
Network |
xerox |
phaser_6510_firmware workcentre_6515_firmware versalink_b400_firmware versalink_b405_firmware versalink_b600_firmware versalink_b610_firmware versalink_b605_firmware versalink_b6… |
Xerox Phaser 6510 before 64.61.23 and 64.59.11 (Bridge), WorkCentre 6515 before 65.61.23 and 65.59.11 (Bridge), VersaLink B400 before 37.61.23 and 37.59.01 (Bridge), B405 before 38.61.23 and 38.59.01… |
NVD-CWE-noinfo
|
CVE-2021-28673 | 2024-11-21 15:00 | 2021-03-30 | Show | GitHub Exploit DB Packet Storm |
| 194618 | 9.1 |
CRITICAL
Network |
xerox |
altalink_b8045_firmware altalink_b8055_firmware altalink_b8065_firmware altalink_b8075_firmware altalink_b8090_firmware altalink_c8030_firmware altalink_c8035_firmware altalink_c… |
Xerox AltaLink B8045/B8090 before 103.008.030.32000, C8030/C8035 before 103.001.030.32000, C8045/C8055 before 103.002.030.32000 and C8070 before 103.003.030.32000 allow unauthorized users, by leverag… |
NVD-CWE-noinfo
|
CVE-2021-28670 | 2024-11-21 15:00 | 2021-03-30 | Show | GitHub Exploit DB Packet Storm |
| 194619 | 6.1 |
MEDIUM
Network |
sherlockim | sherlockim | Sherlock SherlockIM through 2021-03-29 allows Cross Site Scripting (XSS) by leveraging the api/Files/Attachment URI to attack help-desk staff via the chatbot feature. |
CWE-79
Cross-site Scripting |
CVE-2021-29267 | 2024-11-21 15:00 | 2021-03-30 | Show | GitHub Exploit DB Packet Storm |
| 194620 | 7.5 |
HIGH
Network |
acexy | wireless-n_wifi_repeater_firmware | The /password.html page of the Web management interface of the Acexy Wireless-N WiFi Repeater REV 1.0 (28.08.06.1) contains the administrator account password in plaintext. The page can be intercepte… |
CWE-312
Cleartext Storage of Sensitive Information |
CVE-2021-28937 | 2024-11-21 15:00 | 2021-03-29 | Show | GitHub Exploit DB Packet Storm |