Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 10, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
249201 3.5 注意 enthrallweb - Enthrallweb eNews の myprofile.asp における profile フィールドを変更される脆弱性 - CVE-2006-6821 2012-06-26 15:38 2006-12-29 Show GitHub Exploit DB Packet Storm
249202 3.5 注意 enthrallweb - Enthrallweb eCoupons の myprofile.asp における profile フィールドを変更される脆弱性 - CVE-2006-6820 2012-06-26 15:38 2006-12-29 Show GitHub Exploit DB Packet Storm
249203 6.4 警告 AlstraSoft - AlstraSoft Web Host Directory におけるバックアップのデータベースをダウンロードされる脆弱性 - CVE-2006-6819 2012-06-26 15:38 2006-12-29 Show GitHub Exploit DB Packet Storm
249204 7.5 危険 AlstraSoft - AlstraSoft Web Host Directory における admin パスワードを変更される脆弱性 - CVE-2006-6818 2012-06-26 15:38 2006-12-29 Show GitHub Exploit DB Packet Storm
249205 5 警告 AlstraSoft - AlstraSoft Web Host Directory における重要な情報を取得される脆弱性 - CVE-2006-6817 2012-06-26 15:38 2006-12-29 Show GitHub Exploit DB Packet Storm
249206 7.5 危険 DMXReady - DMXReady Secure Login Manager における SQL インジェクションの脆弱性 - CVE-2006-6816 2012-06-26 15:38 2006-12-29 Show GitHub Exploit DB Packet Storm
249207 6 警告 DMXReady - DMXReady Secure Login Manager におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6815 2012-06-26 15:38 2006-12-29 Show GitHub Exploit DB Packet Storm
249208 5 警告 db hub - DB Hub の src/main.c の clear_user_list 関数におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-6810 2012-06-26 15:38 2006-12-29 Show GitHub Exploit DB Packet Storm
249209 7.5 危険 enthrallweb - Enthrallweb eMates の newsdetail.asp における SQL インジェクションの脆弱性 - CVE-2006-6806 2012-06-26 15:38 2006-12-28 Show GitHub Exploit DB Packet Storm
249210 7.5 危険 enthrallweb - Enthrallweb eJobs の newsdetail.asp における SQL インジェクションの脆弱性 - CVE-2006-6805 2012-06-26 15:38 2006-12-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
196131 3.5 LOW
Network
atlassian data_center
jira
jira_server
jira_data_center
The SetFeatureEnabled.jspa resource in Jira Server and Data Center before version 8.5.13, from version 8.6.0 before version 8.13.5, and from version 8.14.0 before version 8.15.1 allows remote anonymo… CWE-352
 Origin Validation Error
CVE-2021-26071 2024-11-21 14:55 2021-04-1 Show GitHub Exploit DB Packet Storm
196132 6.1 MEDIUM
Network
open-emr openemr In OpenEMR, versions 4.2.0 to 6.0.0 are vulnerable to Reflected Cross-Site-Scripting (XSS) due to user input not being validated properly. An attacker could trick a user to click on a malicious url a… CWE-79
Cross-site Scripting
CVE-2021-25922 2024-11-21 14:55 2021-03-23 Show GitHub Exploit DB Packet Storm
196133 5.4 MEDIUM
Network
open-emr openemr In OpenEMR, versions 2.7.3-rc1 to 6.0.0 are vulnerable to Stored Cross-Site-Scripting (XSS) due to user input not being validated properly in the `Allergies` section. An attacker could lure an admin … CWE-79
Cross-site Scripting
CVE-2021-25921 2024-11-21 14:55 2021-03-23 Show GitHub Exploit DB Packet Storm
196134 6.5 MEDIUM
Network
open-emr openemr In OpenEMR, versions v2.7.2-rc1 to 6.0.0 are vulnerable to Improper Access Control when creating a new user, which leads to a malicious user able to read and send sensitive messages on behalf of the … CWE-178
 Improper Handling of Case Sensitivity
CVE-2021-25920 2024-11-21 14:55 2021-03-23 Show GitHub Exploit DB Packet Storm
196135 4.8 MEDIUM
Network
open-emr openemr In OpenEMR, versions 5.0.2 to 6.0.0 are vulnerable to Stored Cross-Site-Scripting (XSS) due to user input not being validated properly. A highly privileged attacker could inject arbitrary code into i… CWE-79
Cross-site Scripting
CVE-2021-25919 2024-11-21 14:55 2021-03-23 Show GitHub Exploit DB Packet Storm
196136 4.8 MEDIUM
Network
open-emr openemr In OpenEMR, versions 5.0.2 to 6.0.0 are vulnerable to Stored Cross-Site-Scripting (XSS) due to user input not being validated properly and rendered in the TOTP Authentication method page. A highly pr… CWE-79
Cross-site Scripting
CVE-2021-25918 2024-11-21 14:55 2021-03-23 Show GitHub Exploit DB Packet Storm
196137 4.8 MEDIUM
Network
open-emr openemr In OpenEMR, versions 5.0.2 to 6.0.0 are vulnerable to Stored Cross-Site-Scripting (XSS) due to user input not being validated properly and rendered in the U2F USB Device authentication method page. A… CWE-79
Cross-site Scripting
CVE-2021-25917 2024-11-21 14:55 2021-03-23 Show GitHub Exploit DB Packet Storm
196138 7.2 HIGH
Network
atlassian data_center
jira
jira_server
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to evade behind-the-firewall protection of app-linked resources via a Broken Authentication vulnerability in the `mak… CWE-287
Improper Authentication
CVE-2021-26070 2024-11-21 14:55 2021-03-22 Show GitHub Exploit DB Packet Storm
196139 5.3 MEDIUM
Network
atlassian jira
data_center
jira_server
jira_data_center
Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to download temporary files and enumerate project keys via an Information Disclosure vulnerability in… CWE-74
Injection
CVE-2021-26069 2024-11-21 14:55 2021-03-22 Show GitHub Exploit DB Packet Storm
196140 5.3 MEDIUM
Network
jetbrains phpstorm In JetBrains PhpStorm before 2020.3, source code could be added to debug logs. NVD-CWE-noinfo
CVE-2021-25764 2024-11-21 14:55 2021-03-19 Show GitHub Exploit DB Packet Storm