|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
Update Date":June 8, 2026, 10 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 251031 | 7.5 | 危険 | Digital Junkies | - | dompdf の dompdf.php における任意の PHP コードを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2010-4879 | 2012-03-27 18:42 | 2011-10-7 | Show | GitHub Exploit DB Packet Storm |
| 251032 | 7.5 | 危険 | WordPress.org edgetechweb |
- | Event Registration プラグインにおける SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-4839 | 2012-03-27 18:42 | 2011-09-13 | Show | GitHub Exploit DB Packet Storm |
| 251033 | 6 | 警告 | extensiondepot Joomla! |
- | Joomla! の JSupport (com_jsupport) コンポーネントにおける SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-4838 | 2012-03-27 18:42 | 2011-09-13 | Show | GitHub Exploit DB Packet Storm |
| 251034 | 4.3 | 警告 | extensiondepot | - | Joomla! の JSupport (com_jsupport) コンポーネントにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング(XSS) |
CVE-2010-4837 | 2012-03-27 18:42 | 2011-09-13 | Show | GitHub Exploit DB Packet Storm |
| 251035 | 4.3 | 警告 | phpshop | - | PHPShop の register.html におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング(XSS) |
CVE-2010-4836 | 2012-03-27 18:42 | 2011-09-13 | Show | GitHub Exploit DB Packet Storm |
| 251036 | 4 | 警告 | OneOrZero | - | OneOrZero AIMS の index.php におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2010-4835 | 2012-03-27 18:42 | 2011-09-13 | Show | GitHub Exploit DB Packet Storm |
| 251037 | 6.5 | 警告 | OneOrZero | - | OneOrZero AIMS の index.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-4834 | 2012-03-27 18:42 | 2011-09-13 | Show | GitHub Exploit DB Packet Storm |
| 251038 | 9.3 | 危険 | GTK+ | - | GTK+ の modules/engines/ms-windows/xp_theme.c における権限を取得される脆弱性 |
CWE-Other
その他 |
CVE-2010-4833 | 2012-03-27 18:42 | 2011-09-6 | Show | GitHub Exploit DB Packet Storm |
| 251039 | 7.5 | 危険 | t-dreams | - | T-Dreams Job Career Package の Resumes/TD_RESUME_Indlist.asp における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-4830 | 2012-03-27 18:42 | 2011-08-24 | Show | GitHub Exploit DB Packet Storm |
| 251040 | 7.5 | 危険 | t-dreams | - | T-Dreams Cars Ads Package の processview.asp における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-4829 | 2012-03-27 18:42 | 2011-08-24 | Show | GitHub Exploit DB Packet Storm |
Update Date:June 8, 2026, 4:09 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 255011 | 9.8 |
CRITICAL
Network |
tcpdump | tcpdump | The OTV parser in tcpdump before 4.9.0 has a buffer overflow in print-otv.c:otv_print(). |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2017-5341 | 2024-11-21 12:27 | 2017-01-28 | Show | GitHub Exploit DB Packet Storm |
| 255012 | 9.8 |
CRITICAL
Network |
tcpdump debian redhat |
tcpdump debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus enterprise_linux_server… |
The ISAKMP parser in tcpdump before 4.9.0 has a buffer overflow in print-isakmp.c:ikev2_e_print(). |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2017-5205 | 2024-11-21 12:27 | 2017-01-28 | Show | GitHub Exploit DB Packet Storm |
| 255013 | 9.8 |
CRITICAL
Network |
tcpdump debian redhat |
tcpdump debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus enterprise_linux_server… |
The IPv6 parser in tcpdump before 4.9.0 has a buffer overflow in print-ip6.c:ip6_print(). |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2017-5204 | 2024-11-21 12:27 | 2017-01-28 | Show | GitHub Exploit DB Packet Storm |
| 255014 | 9.8 |
CRITICAL
Network |
tcpdump debian redhat |
tcpdump debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus enterprise_linux_server… |
The BOOTP parser in tcpdump before 4.9.0 has a buffer overflow in print-bootp.c:bootp_print(). |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2017-5203 | 2024-11-21 12:27 | 2017-01-28 | Show | GitHub Exploit DB Packet Storm |
| 255015 | 9.8 |
CRITICAL
Network |
tcpdump debian redhat |
tcpdump debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus enterprise_linux_server… |
The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnp_print(). |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2017-5202 | 2024-11-21 12:27 | 2017-01-28 | Show | GitHub Exploit DB Packet Storm |
| 255016 | 7.5 |
HIGH
Network |
libarchive | libarchive | An error in the lha_read_file_header_1() function (archive_read_support_format_lha.c) in libarchive 3.2.2 allows remote attackers to trigger an out-of-bounds read memory access and subsequently cause… |
CWE-125
Out-of-bounds Read |
CVE-2017-5601 | 2024-11-21 12:27 | 2017-01-28 | Show | GitHub Exploit DB Packet Storm |
| 255017 | 7.8 |
HIGH
Local |
paloaltonetworks | terminal_services_agent | Palo Alto Networks Terminal Services Agent before 7.0.7 allows local users to gain privileges via vectors that trigger an out-of-bounds write operation. |
CWE-787
Out-of-bounds Write |
CVE-2017-5329 | 2024-11-21 12:27 | 2017-01-28 | Show | GitHub Exploit DB Packet Storm |
| 255018 | 7.5 |
HIGH
Network |
paloaltonetworks | terminal_services_agent | Palo Alto Networks Terminal Services Agent before 7.0.7 allows attackers to spoof arbitrary users via unspecified vectors. |
NVD-CWE-noinfo
|
CVE-2017-5328 | 2024-11-21 12:27 | 2017-01-28 | Show | GitHub Exploit DB Packet Storm |
| 255019 | 7.5 |
HIGH
Network |
eclinicalworks | patient_portal | An issue was discovered in eClinicalWorks healow@work 8.0 build 8. This is a blind SQL injection within the EmployeePortalServlet, which can be exploited by un-authenticated users via an HTTP POST re… |
CWE-89
SQL Injection |
CVE-2017-5598 | 2024-11-21 12:27 | 2017-01-27 | Show | GitHub Exploit DB Packet Storm |
| 255020 | 7.5 |
HIGH
Network |
wireshark | wireshark | In Wireshark 2.2.0 to 2.2.3 and 2.0.0 to 2.0.9, the DHCPv6 dissector could go into a large loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packe… |
CWE-190
Integer Overflow or Wraparound |
CVE-2017-5597 | 2024-11-21 12:27 | 2017-01-26 | Show | GitHub Exploit DB Packet Storm |