Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 22, 2026, 6:01 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 238861 | 6.8 | 警告 | OpenSolution | - | Quick.CMS および Quick.CMS.Lite におけるクロスサイトリクエストフォージェリの脆弱性 |
CWE-352
同一生成元ポリシー違反 |
CVE-2009-4121 | 2012-09-25 17:38 | 2009-11-30 | Show | GitHub Exploit DB Packet Storm |
| 238862 | 6.8 | 警告 | OpenSolution | - | Quick.Cart におけるクロスサイトリクエストフォージェリの脆弱性 |
CWE-352
同一生成元ポリシー違反 |
CVE-2009-4120 | 2012-09-25 17:38 | 2009-11-30 | Show | GitHub Exploit DB Packet Storm |
| 238863 | 4.9 | 警告 | カスペルスキー | - | Kaspersky Anti-Virus の kl1.sys におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2009-4114 | 2012-09-25 17:38 | 2009-11-30 | Show | GitHub Exploit DB Packet Storm |
| 238864 | 6.8 | 警告 | PEAR | - | PEAR の Mail パッケージにおける任意のファイルを読み書きされる脆弱性 |
CWE-94
コード・インジェクション |
CVE-2009-4111 | 2012-09-25 17:38 | 2009-05-7 | Show | GitHub Exploit DB Packet Storm |
| 238865 | 7.5 | 危険 | ohloh | - | Agoko CMS の admintools/editpage-2.php における任意の PHP コードを実行される脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2009-4106 | 2012-09-25 17:38 | 2009-11-29 | Show | GitHub Exploit DB Packet Storm |
| 238866 | 7.5 | 危険 | lyften | - | Joomla! 用の lyftenbloggie コンポーネントにおける SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2009-4104 | 2012-09-25 17:38 | 2009-11-29 | Show | GitHub Exploit DB Packet Storm |
| 238867 | 6 | 警告 | OpenX | - | OpenX adserver の banner-edit.php における任意のコードを実行される脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2009-4098 | 2012-09-25 17:38 | 2009-11-29 | Show | GitHub Exploit DB Packet Storm |
| 238868 | 9.3 | 危険 | malsmith | - | Serenity Audio Player におけるスタックベースのバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2009-4097 | 2012-09-25 17:38 | 2009-11-29 | Show | GitHub Exploit DB Packet Storm |
| 238869 | 5 | 警告 | javascript | - | Xerver HTTP Server における CRLF インジェクションの脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2009-4086 | 2012-09-25 17:38 | 2009-11-29 | Show | GitHub Exploit DB Packet Storm |
| 238870 | 7.5 | 危険 | jabba laci | - | PHP Traverser における PHP リモートファイルインクルージョンの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2009-4085 | 2012-09-25 17:38 | 2009-11-29 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 22, 2026, 4 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 285271 | 9.8 |
CRITICAL
Network |
opensuse_project opensuse canonical imagemagick |
suse_linux_enterprise_workstation_extension leap suse_linux_enterprise_server suse_linux_enterprise_desktop suse_linux_enterprise_software_development_kit opensuse ubuntu_linux i… |
The ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors, related to "throwing of exceptions." |
CWE-388
7PK - Errors |
CVE-2014-9841 | 2024-11-21 11:21 | 2017-03-21 | Show | GitHub Exploit DB Packet Storm |
| 285272 | 7.5 |
HIGH
Network |
imagemagick opensuse suse canonical |
imagemagick leap linux_enterprise_server linux_enterprise_software_development_kit opensuse suse_linux_enterprise_server ubuntu_linux |
coders/tiff.c in ImageMagick allows remote attackers to cause a denial of service (application crash) via vectors related to the "identification of image." |
CWE-399
Resource Management Errors |
CVE-2014-9854 | 2024-11-21 11:21 | 2017-03-17 | Show | GitHub Exploit DB Packet Storm |
| 285273 | 5.5 |
MEDIUM
Local |
imagemagick suse novell opensuse_project opensuse canonical |
imagemagick linux_enterprise_server leap linux_enterprise_software_development_kit suse_linux_enterprise_software_development_kit linux_enterprise_debuginfo linux_enterprise_worksta… |
Memory leak in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service (memory consumption) via a crafted rle file. |
CWE-399
Resource Management Errors |
CVE-2014-9853 | 2024-11-21 11:21 | 2017-03-17 | Show | GitHub Exploit DB Packet Storm |
| 285274 | 9.8 |
CRITICAL
Network |
imagemagick suse opensuse |
imagemagick linux_enterprise_software_development_kit linux_enterprise_server linux_enterprise_workstation_extension linux_enterprise_desktop opensuse leap |
distribute-cache.c in ImageMagick re-uses objects after they have been destroyed, which allows remote attackers to have unspecified impact via unspecified vectors. |
CWE-913
Improper Control of Dynamically-Managed Code Resources |
CVE-2014-9852 | 2024-11-21 11:21 | 2017-03-17 | Show | GitHub Exploit DB Packet Storm |
| 285275 | 9.8 |
CRITICAL
Network |
mcafee | cloud_analysis_and_deconstructive_services | Information disclosure vulnerability in McAfee (now Intel Security) Cloud Analysis and Deconstructive Services (CADS) 1.0.0.3x, 1.0.0.4d and earlier allows remote unauthenticated users to view, add, … |
CWE-264
Permissions, Privileges, and Access Controls |
CVE-2014-9921 | 2024-11-21 11:21 | 2017-03-15 | Show | GitHub Exploit DB Packet Storm |
| 285276 | 5.9 |
MEDIUM
Network |
mcafee | application_control | Unauthorized execution of binary vulnerability in McAfee (now Intel Security) McAfee Application Control (MAC) 6.0.0 before hotfix 9726, 6.0.1 before hotfix 9068, 6.1.0 before hotfix 692, 6.1.1 befor… |
CWE-284
Improper Access Control |
CVE-2014-9920 | 2024-11-21 11:21 | 2017-03-15 | Show | GitHub Exploit DB Packet Storm |
| 285277 | 5.5 |
MEDIUM
Local |
busybox | busybox | The add_probe function in modutils/modprobe.c in BusyBox before 1.23.0 allows local users to bypass intended restrictions on loading kernel modules via a / (slash) character in a module name, as demo… |
CWE-20
Improper Input Validation |
CVE-2014-9645 | 2024-11-21 11:21 | 2017-03-12 | Show | GitHub Exploit DB Packet Storm |
| 285278 | 6.1 |
MEDIUM
Network |
bilboplanet | bilboplanet | Multiple cross-site scripting (XSS) vulnerabilities in Bilboplanet 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) tribe_name or (2) tags parameter in a tribes page requ… |
CWE-79
Cross-site Scripting |
CVE-2014-9916 | 2024-11-21 11:21 | 2017-02-24 | Show | GitHub Exploit DB Packet Storm |
| 285279 | 6.1 |
MEDIUM
Network |
alinto | sogo | Multiple cross-site scripting (XSS) vulnerabilities in the Web Calendar in SOGo before 2.2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) title of an appointment or (2) c… |
CWE-79
Cross-site Scripting |
CVE-2014-9905 | 2024-11-21 11:21 | 2017-02-18 | Show | GitHub Exploit DB Packet Storm |
| 285280 | 6.1 |
MEDIUM
Network |
gosa_project | gosa | Cross-site scripting (XSS) vulnerability in the displayLogin function in html/index.php in GOsa allows remote attackers to inject arbitrary web script or HTML via the username. |
CWE-79
Cross-site Scripting |
CVE-2014-9760 | 2024-11-21 11:21 | 2017-02-14 | Show | GitHub Exploit DB Packet Storm |