Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 5, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 251021 | 9 | 危険 | OpenVAS | - | OpenVAS Manager の email 関数における任意のコマンドを実行される脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2011-0018 | 2012-03-27 18:42 | 2011-01-18 | Show | GitHub Exploit DB Packet Storm |
| 251022 | 2.1 | 注意 | The Tor Project | - | Tor における重要な情報を取得される脆弱性 |
CWE-399
リソース管理の問題 |
CVE-2011-0016 | 2012-03-27 18:42 | 2011-01-17 | Show | GitHub Exploit DB Packet Storm |
| 251023 | 5 | 警告 | The Tor Project | - | Tor におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2011-0015 | 2012-03-27 18:42 | 2011-01-17 | Show | GitHub Exploit DB Packet Storm |
| 251024 | 4.3 | 警告 | Best Practical Solutions | - | Best Practical Solutions RT における平分パスワードを判定される脆弱性 |
CWE-310
暗号の問題 |
CVE-2011-0009 | 2012-03-27 18:42 | 2011-01-25 | Show | GitHub Exploit DB Packet Storm |
| 251025 | 6.9 | 警告 | Todd C. Miller レッドハット |
- | Fedora の sudo の parse.c における root 権限を取得される脆弱性 |
CWE-DesignError
|
CVE-2011-0008 | 2012-03-27 18:42 | 2011-01-18 | Show | GitHub Exploit DB Packet Storm |
| 251026 | 3.3 | 注意 | troglobit | - | pimd における任意のファイルを上書きされる脆弱性 |
CWE-59
リンク解釈の問題 |
CVE-2011-0007 | 2012-03-27 18:42 | 2011-01-10 | Show | GitHub Exploit DB Packet Storm |
| 251027 | 4.3 | 警告 | Joomla! | - | Joomla! の com_search モジュールにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2011-0005 | 2012-03-27 18:42 | 2011-01-10 | Show | GitHub Exploit DB Packet Storm |
| 251028 | 4.3 | 警告 | Piwik | - | Piwik におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2011-0004 | 2012-03-27 18:42 | 2011-01-10 | Show | GitHub Exploit DB Packet Storm |
| 251029 | 6.9 | 警告 | Exim Development | - | Exim の open_log 機能における任意のファイルにログデータをアペンドさせる脆弱性 |
CWE-20 CWE-59 |
CVE-2011-0017 | 2012-03-27 18:42 | 2010-06-12 | Show | GitHub Exploit DB Packet Storm |
| 251030 | 5.8 | 警告 | MediaWiki | - | MediaWiki におけるクリックジャッキング攻撃を実行される脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2011-0003 | 2012-03-27 18:42 | 2011-01-10 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 5, 2026, 4:11 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 282421 | - |
opensuse oracle canonical debian redhat fedoraproject freetype |
opensuse solaris ubuntu_linux debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server_eus enterprise_linux_server enterprise_linux_hpc_node<… |
The tt_sbit_decoder_init function in sfnt/ttsbit.c in FreeType before 2.5.4 proceeds with a count-to-size association without restricting the count value, which allows remote attackers to cause a den… |
CWE-189
Numeric Errors |
CVE-2014-9666 | 2024-11-21 11:21 | 2015-02-8 | Show | GitHub Exploit DB Packet Storm | |
| 282422 | - |
fedoraproject canonical freetype opensuse |
fedora ubuntu_linux freetype opensuse |
The Load_SBit_Png function in sfnt/pngshim.c in FreeType before 2.5.4 does not restrict the rows and pitch values of PNG data, which allows remote attackers to cause a denial of service (integer over… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2014-9665 | 2024-11-21 11:21 | 2015-02-8 | Show | GitHub Exploit DB Packet Storm | |
| 282423 | - |
redhat debian opensuse canonical fedoraproject freetype oracle |
enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server_eus enterprise_linux_server enterprise_linux_hpc_node enterprise_linux_hpc_node_eus debian_linux ope… |
FreeType before 2.5.4 does not check for the end of the data during certain parsing actions, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecifi… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2014-9664 | 2024-11-21 11:21 | 2015-02-8 | Show | GitHub Exploit DB Packet Storm | |
| 282424 | - |
opensuse debian canonical fedoraproject freetype |
opensuse debian_linux ubuntu_linux fedora freetype |
cff/cf2ft.c in FreeType before 2.5.4 does not validate the return values of point-allocation functions, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or poss… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2014-9662 | 2024-11-21 11:21 | 2015-02-8 | Show | GitHub Exploit DB Packet Storm | |
| 282425 | - |
canonical debian redhat freetype opensuse fedoraproject |
ubuntu_linux debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server_eus enterprise_linux_server enterprise_linux_hpc_node enterprise_linux_hpc… |
type42/t42parse.c in FreeType before 2.5.4 does not consider that scanning can be incomplete without triggering an error, which allows remote attackers to cause a denial of service (use-after-free) o… |
NVD-CWE-Other
|
CVE-2014-9661 | 2024-11-21 11:21 | 2015-02-8 | Show | GitHub Exploit DB Packet Storm | |
| 282426 | - |
opensuse canonical debian oracle fedoraproject redhat freetype |
opensuse ubuntu_linux debian_linux solaris fedora enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server_eus enterprise_linux_server enterprise_linux… |
The _bdf_parse_glyphs function in bdf/bdflib.c in FreeType before 2.5.4 does not properly handle a missing ENDCHAR record, which allows remote attackers to cause a denial of service (NULL pointer der… |
CWE-476
NULL Pointer Dereference |
CVE-2014-9660 | 2024-11-21 11:21 | 2015-02-8 | Show | GitHub Exploit DB Packet Storm | |
| 282427 | - |
freetype debian opensuse fedoraproject oracle canonical redhat |
freetype debian_linux opensuse fedora solaris ubuntu_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server_eus enterprise_linux_server ente… |
The tt_cmap4_validate function in sfnt/ttcmap.c in FreeType before 2.5.4 validates a certain length field before that field's value is completely calculated, which allows remote attackers to cause a … |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2014-9663 | 2024-11-21 11:21 | 2015-02-8 | Show | GitHub Exploit DB Packet Storm | |
| 282428 | - |
oracle freetype fedoraproject opensuse canonical |
solaris freetype fedora opensuse ubuntu_linux |
cff/cf2intrp.c in the CFF CharString interpreter in FreeType before 2.5.4 proceeds with additional hints after the hint mask has been computed, which allows remote attackers to execute arbitrary code… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2014-9659 | 2024-11-21 11:21 | 2015-02-8 | Show | GitHub Exploit DB Packet Storm | |
| 282429 | - |
oracle canonical fedoraproject freetype debian opensuse redhat |
solaris ubuntu_linux fedora freetype debian_linux opensuse enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server_eus enterprise_linux_server ente… |
The tt_face_load_kern function in sfnt/ttkern.c in FreeType before 2.5.4 enforces an incorrect minimum table length, which allows remote attackers to cause a denial of service (out-of-bounds read) or… |
CWE-125
Out-of-bounds Read |
CVE-2014-9658 | 2024-11-21 11:21 | 2015-02-8 | Show | GitHub Exploit DB Packet Storm | |
| 282430 | - |
opensuse redhat oracle fedoraproject freetype debian canonical |
opensuse enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server_eus enterprise_linux_server enterprise_linux_hpc_node enterprise_linux_hpc_node_eus solaris… |
The tt_face_load_hdmx function in truetype/ttpload.c in FreeType before 2.5.4 does not establish a minimum record size, which allows remote attackers to cause a denial of service (out-of-bounds read)… |
CWE-125
Out-of-bounds Read |
CVE-2014-9657 | 2024-11-21 11:21 | 2015-02-8 | Show | GitHub Exploit DB Packet Storm |