Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 25, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251551 7.5 危険 Dev-Team Typoheads - TYPO3 用 Webkit PDFs エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4961 2012-02-29 14:49 2011-10-9 Show GitHub Exploit DB Packet Storm
251552 4.3 警告 Martin Hesse - TYPO3 用 Branchenbuch エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4960 2012-02-29 14:43 2011-10-9 Show GitHub Exploit DB Packet Storm
251553 7.5 危険 PreProject.com - Pre Projects Pre Podcast Portal の login 機能における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4959 2012-02-29 14:35 2011-10-9 Show GitHub Exploit DB Packet Storm
251554 7.5 危険 Prado Portal - Prado Portal の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4958 2012-02-29 14:23 2011-10-9 Show GitHub Exploit DB Packet Storm
251555 7.5 危険 php-programs - APBoard Developers APBoard の board/board.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4955 2012-02-29 14:06 2011-10-9 Show GitHub Exploit DB Packet Storm
251556 7.5 危険 Gambio - xt:Commerce Gambio 2008 の product_reviews_info.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4954 2012-02-29 14:05 2011-10-9 Show GitHub Exploit DB Packet Storm
251557 10 危険 Jens Witt - TYPO3 用 JW Calendar エクステンションにおける任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2010-4953 2012-02-29 11:55 2011-10-9 Show GitHub Exploit DB Packet Storm
251558 7.5 危険 Joachim Ruhs - TYPO3 用 FE user statistic エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4952 2012-02-29 11:51 2011-10-9 Show GitHub Exploit DB Packet Storm
251559 5 警告 Thomas Mammitzsch - TYPO3 用 xaJax Shoutbox エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4951 2012-02-29 11:48 2011-10-9 Show GitHub Exploit DB Packet Storm
251560 7.5 危険 Joachim Ruhs - TYPO3 用 Event エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4950 2012-02-29 11:42 2011-10-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
247531 5.9 MEDIUM
Network 		gnupg libgcrypt In Libgcrypt before 1.7.7, an attacker who learns the EdDSA session key (from side-channel observation during the signing process) can easily recover the long-term secret key. 1.7.7 makes a cipher/ec… CWE-200
Information Exposure 		CVE-2017-9526 2024-11-21 12:36 2017-06-11 Show GitHub Exploit DB Packet Storm
247532 6.7 MEDIUM
Local 		cron_project
debian 		cron
debian_linux 		In the cron package through 3.0pl1-128 on Debian, and through 3.0pl1-128ubuntu2 on Ubuntu, the postinst maintainer script allows for group-crontab-to-root privilege escalation via symlink attacks aga… CWE-59
Link Following 		CVE-2017-9525 2024-11-21 12:36 2017-06-10 Show GitHub Exploit DB Packet Storm
247533 6.1 MEDIUM
Network 		sophos web_appliance The Sophos Web Appliance before 4.3.2 has XSS in the FTP redirect page, aka NSWA-1342. CWE-79
Cross-site Scripting 		CVE-2017-9523 2024-11-21 12:36 2017-06-9 Show GitHub Exploit DB Packet Storm
247534 5.5 MEDIUM
Local 		radare radare2 The r_config_set function in libr/config/config.c in radare2 1.5.0 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted DEX file. CWE-416
 Use After Free 		CVE-2017-9520 2024-11-21 12:36 2017-06-8 Show GitHub Exploit DB Packet Storm
247535 8.8 HIGH
Network 		atmail atmail atmail before 7.8.0.2 has CSRF, allowing an attacker to create a user account. CWE-352
 Origin Validation Error 		CVE-2017-9519 2024-11-21 12:36 2017-06-8 Show GitHub Exploit DB Packet Storm
247536 8.8 HIGH
Network 		atmail atmail atmail before 7.8.0.2 has CSRF, allowing an attacker to change the SMTP hostname and hijack all emails. CWE-352
 Origin Validation Error 		CVE-2017-9518 2024-11-21 12:36 2017-06-8 Show GitHub Exploit DB Packet Storm
247537 8.8 HIGH
Network 		atmail atmail atmail before 7.8.0.2 has CSRF, allowing an attacker to upload and import users via CSV. CWE-352
 Origin Validation Error 		CVE-2017-9517 2024-11-21 12:36 2017-06-8 Show GitHub Exploit DB Packet Storm
247538 5.4 MEDIUM
Network 		craftcms craft_cms Craft CMS before 2.6.2982 allows for a potential XSS attack vector by uploading a malicious SVG file. CWE-79
Cross-site Scripting 		CVE-2017-9516 2024-11-21 12:36 2017-06-8 Show GitHub Exploit DB Packet Storm
247539 6.5 MEDIUM
Network 		imagemagick imagemagick In ImageMagick 7.0.5-7 Q16, an assertion failure was found in the function LockSemaphoreInfo, which allows attackers to cause a denial of service via a crafted file. CWE-617
 Reachable Assertion 		CVE-2017-9501 2024-11-21 12:36 2017-06-7 Show GitHub Exploit DB Packet Storm
247540 6.5 MEDIUM
Network 		imagemagick imagemagick In ImageMagick 7.0.5-8 Q16, an assertion failure was found in the function ResetImageProfileIterator, which allows attackers to cause a denial of service via a crafted file. CWE-617
 Reachable Assertion 		CVE-2017-9500 2024-11-21 12:36 2017-06-7 Show GitHub Exploit DB Packet Storm