Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 7, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
256611 6.8 警告 アップル - Apple Mac OS X の Apple Filing Protocol Server におけるパスワード要求を回避される脆弱性 CWE-287
不適切な認証 		CVE-2010-1820 2010-10-8 17:08 2010-09-21 Show GitHub Exploit DB Packet Storm
256612 5 警告 マイクロソフト - Microsoft .NET Framework における View State フォームデータを復号または変更される脆弱性 CWE-310
暗号の問題 		CVE-2010-3332 2010-10-8 17:07 2010-09-17 Show GitHub Exploit DB Packet Storm
256613 2.6 注意 IBM - IBM WebSphere Application Server の Web コンテナにおける重要な情報を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-0777 2010-10-8 17:05 2010-05-8 Show GitHub Exploit DB Packet Storm
256614 5 警告 IBM - IBM WebSphere Application Server の Web コンテナ におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-0776 2010-10-8 17:04 2010-05-8 Show GitHub Exploit DB Packet Storm
256615 5 警告 Drupal
サイバートラスト株式会社		 - Drupal の OpenID モジュールにおける認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2010-3686 2010-10-7 16:40 2010-08-11 Show GitHub Exploit DB Packet Storm
256616 5 警告 Drupal
サイバートラスト株式会社		 - Drupal の OpenID モジュールにおける認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2010-3685 2010-10-7 16:39 2010-08-11 Show GitHub Exploit DB Packet Storm
256617 5 警告 Drupal
サイバートラスト株式会社		 - Drupal の OpenID モジュールにおける認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2010-3091 2010-10-7 16:39 2010-08-11 Show GitHub Exploit DB Packet Storm
256618 2.1 注意 Drupal
サイバートラスト株式会社		 - Drupal におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-3094 2010-10-7 16:39 2010-08-11 Show GitHub Exploit DB Packet Storm
256619 3.5 注意 Drupal
サイバートラスト株式会社		 - Drupal の comment モジュールにおけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-3093 2010-10-7 16:38 2010-08-11 Show GitHub Exploit DB Packet Storm
256620 5.5 警告 Drupal
サイバートラスト株式会社		 - Drupal の upload モジュールにおけるファイルのダウンロード制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-3092 2010-10-7 16:37 2010-08-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
194851 8.1 HIGH
Network 		open-emr openemr In OpenEMR, versions 5.0.0 to 6.0.0.1 are vulnerable to weak password requirements as it does not enforce a maximum password length limit. If a malicious user is aware of the first 72 characters of t… CWE-521
Weak Password Requirements  		CVE-2021-25923 2024-11-21 14:55 2021-06-24 Show GitHub Exploit DB Packet Storm
194852 5.4 MEDIUM
Network 		avaya aura_experience_portal Stored XSS injection vulnerabilities were discovered in the Avaya Aura Experience Portal Web management which could allow an authenticated user to potentially disclose sensitive information. Affected… CWE-79
Cross-site Scripting 		CVE-2021-25656 2024-11-21 14:55 2021-06-24 Show GitHub Exploit DB Packet Storm
194853 6.1 MEDIUM
Network 		avaya aura_experience_portal A vulnerability in the system Service Menu component of Avaya Aura Experience Portal may allow URL Redirection to any untrusted site through a crafted attack. Affected versions include 7.0 through 7.… CWE-601
Open Redirect 		CVE-2021-25655 2024-11-21 14:55 2021-06-24 Show GitHub Exploit DB Packet Storm
194854 7.8 HIGH
Local 		avaya aura_appliance_virtualization_platform A privilege escalation vulnerability was discovered in Avaya Aura Appliance Virtualization Platform Utilities (AVPU) that may potentially allow a local user to escalate privileges. Affects 8.0.0.0 th… NVD-CWE-noinfo
CVE-2021-25653 2024-11-21 14:55 2021-06-24 Show GitHub Exploit DB Packet Storm
194855 5.5 MEDIUM
Local 		avaya aura_appliance_virtualization_platform An information disclosure vulnerability was discovered in the directory and file management of Avaya Aura Appliance Virtualization Platform Utilities (AVPU). This vulnerability may potentially allow … CWE-668
 Exposure of Resource to Wrong Sphere 		CVE-2021-25652 2024-11-21 14:55 2021-06-24 Show GitHub Exploit DB Packet Storm
194856 7.8 HIGH
Local 		avaya aura_utility_services A privilege escalation vulnerability was discovered in Avaya Aura Utility Services that may potentially allow a local user to escalate privileges. Affects all 7.x versions of Avaya Aura Utility Servi… CWE-269
 Improper Privilege Management 		CVE-2021-25651 2024-11-21 14:55 2021-06-24 Show GitHub Exploit DB Packet Storm
194857 8.8 HIGH
Local 		avaya aura_utility_services A privilege escalation vulnerability was discovered in Avaya Aura Utility Services that may potentially allow a local user to execute specially crafted scripts as a privileged user. Affects all 7.x v… CWE-269
 Improper Privilege Management 		CVE-2021-25650 2024-11-21 14:55 2021-06-24 Show GitHub Exploit DB Packet Storm
194858 5.5 MEDIUM
Local 		avaya aura_utility_services An information disclosure vulnerability was discovered in the directory and file management of Avaya Aura Utility Services. This vulnerability may potentially allow any local user to access system fu… NVD-CWE-Other
CVE-2021-25649 2024-11-21 14:55 2021-06-24 Show GitHub Exploit DB Packet Storm
194859 7.8 HIGH
Local 		canonical apport It was discovered that apport in data/apport did not properly open a report file to prevent hanging reads on a FIFO. CWE-20
 Improper Input Validation  		CVE-2021-25684 2024-11-21 14:55 2021-06-11 Show GitHub Exploit DB Packet Storm
194860 7.8 HIGH
Local 		canonical apport It was discovered that the get_starttime() function in data/apport did not properly parse the /proc/pid/stat file from the kernel. CWE-20
 Improper Input Validation  		CVE-2021-25683 2024-11-21 14:55 2021-06-11 Show GitHub Exploit DB Packet Storm