Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 27, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 251221 | 5 | 警告 | アップル サイバートラスト株式会社 PNG Development Group オラクル VMware レッドハット |
- | libpng に含まれる pngrutil.c におけるメモリリークの脆弱性 |
CWE-399
リソース管理の問題 |
CVE-2010-2249 | 2012-03-27 10:32 | 2010-06-26 | Show | GitHub Exploit DB Packet Storm |
| 251222 | 7.5 | 危険 | アップル サイバートラスト株式会社 Mozilla Foundation PNG Development Group オラクル VMware フェンリル株式会社 レッドハット |
- | libpng に脆弱性 |
CWE-119
バッファエラー |
CVE-2010-1205 | 2012-03-27 10:29 | 2010-07-6 | Show | GitHub Exploit DB Packet Storm |
| 251223 | 7.8 | 危険 | アップル サイバートラスト株式会社 PNG Development Group Lunascape オラクル VMware フェンリル株式会社 レッドハット |
- | libpng における圧縮された補助チャンクの処理に脆弱性 |
CWE-399
リソース管理の問題 |
CVE-2010-0205 | 2012-03-27 10:22 | 2010-03-4 | Show | GitHub Exploit DB Packet Storm |
| 251224 | 7.5 | 危険 | クアンタム デル IBM |
- | 複数のテープライブラリ製品におけるアクセス権を取得される脆弱性 |
CWE-255
証明書・パスワード管理 |
CVE-2012-1844 | 2012-03-26 18:12 | 2012-03-22 | Show | GitHub Exploit DB Packet Storm |
| 251225 | 5 | 警告 | クアンタム デル |
- | Quantum Scalar i500 および Dell ML6000 における絶対パストラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2012-1841 | 2012-03-26 18:08 | 2012-03-22 | Show | GitHub Exploit DB Packet Storm |
| 251226 | 5 | 警告 | LG-Nortel | - | LG-Nortel ELO GS24M に複数の脆弱性 |
CWE-287
不適切な認証 |
CVE-2012-1838 | 2012-03-26 16:29 | 2012-03-22 | Show | GitHub Exploit DB Packet Storm |
| 251227 | 7.5 | 危険 | Webglimpse | - | WebGlimpse に OS コマンドインジェクションの脆弱性 |
CWE-78
OSコマンド・インジェクション |
CVE-2012-1795 | 2012-03-26 16:24 | 2012-03-20 | Show | GitHub Exploit DB Packet Storm |
| 251228 | 7.5 | 危険 | Pydio | - | AjaXplorer におけるログインのアクセス権を取得される脆弱性 |
CWE-287
不適切な認証 |
CVE-2012-1840 | 2012-03-26 16:08 | 2012-03-22 | Show | GitHub Exploit DB Packet Storm |
| 251229 | 7.5 | 危険 | Pydio | - | AjaXplorer の Get Template 機能におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2012-1839 | 2012-03-26 16:08 | 2012-03-22 | Show | GitHub Exploit DB Packet Storm |
| 251230 | 5 | 警告 | IBM | - | IBM Tivoli Endpoint Manager における重要な情報を取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2012-1837 | 2012-03-26 16:07 | 2012-03-22 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 27, 2026, 4:52 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 257521 | 8.8 |
HIGH
Network |
dasinfomedia | wpgym_gym_management_system | Mojoomla WPGYM WordPress Gym Management System allows SQL Injection via the id parameter. |
CWE-89
SQL Injection |
CVE-2017-14844 | 2024-11-21 12:13 | 2017-09-28 | Show | GitHub Exploit DB Packet Storm |
| 257522 | 8.8 |
HIGH
Network |
dasinfomedia | school_management_system | Mojoomla School Management System for WordPress allows SQL Injection via the id parameter. |
CWE-89
SQL Injection |
CVE-2017-14843 | 2024-11-21 12:13 | 2017-09-28 | Show | GitHub Exploit DB Packet Storm |
| 257523 | 8.8 |
HIGH
Network |
dasinfomedia | smsmaster_multipurpose_sms_gateway | Mojoomla SMSmaster Multipurpose SMS Gateway for WordPress allows SQL Injection via the id parameter. |
CWE-89
SQL Injection |
CVE-2017-14842 | 2024-11-21 12:13 | 2017-09-28 | Show | GitHub Exploit DB Packet Storm |
| 257524 | 6.5 |
MEDIUM
Network |
dasinfomedia | annual_maintenance_contract_management_system | Mojoomla Annual Maintenance Contract (AMC) Management System allows Arbitrary File Upload in profilesetting image handling. |
CWE-434
Unrestricted Upload of File with Dangerous Type |
CVE-2017-14841 | 2024-11-21 12:13 | 2017-09-28 | Show | GitHub Exploit DB Packet Storm |
| 257525 | 8.8 |
HIGH
Network |
teamworktec | ticketplus | TeamWork TicketPlus allows Arbitrary File Upload in updateProfile. |
CWE-434
Unrestricted Upload of File with Dangerous Type |
CVE-2017-14840 | 2024-11-21 12:13 | 2017-09-28 | Show | GitHub Exploit DB Packet Storm |
| 257526 | 8.8 |
HIGH
Network |
teamworktec | photo_fusion | TeamWork Photo Fusion allows Arbitrary File Upload in changeAvatar and changeCover. |
CWE-434
Unrestricted Upload of File with Dangerous Type |
CVE-2017-14839 | 2024-11-21 12:13 | 2017-09-28 | Show | GitHub Exploit DB Packet Storm |
| 257527 | 8.8 |
HIGH
Network |
teamworktec | job_links | TeamWork Job Links allows Arbitrary File Upload in profileChange and coverChange. |
CWE-434
Unrestricted Upload of File with Dangerous Type |
CVE-2017-14838 | 2024-11-21 12:13 | 2017-09-28 | Show | GitHub Exploit DB Packet Storm |
| 257528 | 8.8 |
HIGH
Network |
libbpg_project | libbpg | The hevc_write_frame function in libbpg.c in libbpg 0.9.7 allows remote attackers to cause a denial of service (integer underflow and application crash) or possibly have unspecified other impact via … |
CWE-191
Integer Underflow (Wrap or Wraparound) |
CVE-2017-14796 | 2024-11-21 12:13 | 2017-09-28 | Show | GitHub Exploit DB Packet Storm |
| 257529 | 8.8 |
HIGH
Network |
libbpg_project | libbpg | The hevc_write_frame function in libbpg.c in libbpg 0.9.7 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) or possibly have unspecified other impact via… |
CWE-125
Out-of-bounds Read |
CVE-2017-14795 | 2024-11-21 12:13 | 2017-09-28 | Show | GitHub Exploit DB Packet Storm |
| 257530 | 5.9 |
MEDIUM
Network |
laravel | laravel | Laravel before 5.5.10 mishandles the remember_me token verification process because DatabaseUserProvider does not have constant-time token comparison. |
CWE-200
Information Exposure |
CVE-2017-14775 | 2024-11-21 12:13 | 2017-09-28 | Show | GitHub Exploit DB Packet Storm |