Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 20, 2026, 4 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 251751 | 5 | 警告 | Plone Foundation | - | Plone におけるサービス運用妨害 (CPU 資源の消費) の脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2011-4462 | 2012-01-4 16:38 | 2011-12-30 | Show | GitHub Exploit DB Packet Storm |
| 251752 | 9.3 | 危険 | マイクロソフト | - | Microsoft .NET Framework における任意のユーザアカウントへアクセスされる脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2011-3417 | 2012-01-4 16:34 | 2011-12-29 | Show | GitHub Exploit DB Packet Storm |
| 251753 | 8.5 | 危険 | マイクロソフト | - | Microsoft .NET Framework における任意のユーザアカウントへアクセスされる脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2011-3416 | 2012-01-4 16:33 | 2011-12-29 | Show | GitHub Exploit DB Packet Storm |
| 251754 | 9.3 | 危険 | Google Hex-Rays |
- | IDA Pro の IDAPython プラグインにおける任意のコードを実行される脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2011-4783 | 2011-12-28 16:47 | 2011-07-27 | Show | GitHub Exploit DB Packet Storm |
| 251755 | 7.2 | 危険 | NVIDIA | - | NVIDIA Stereoscopic 3D ドライバにおける権限を取得される脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2011-4784 | 2011-12-28 16:44 | 2011-12-27 | Show | GitHub Exploit DB Packet Storm |
| 251756 | 4.3 | 警告 | WP Symposium | - | WordPress 用の WP Symposium プラグインにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2011-3841 | 2011-12-28 16:40 | 2011-12-7 | Show | GitHub Exploit DB Packet Storm |
| 251757 | 7.8 | 危険 | IBM | - | IBM Lotus Domino の認証機能におけるサービス運用妨害 (DoS) 状態となる脆弱性 |
CWE-noinfo
情報不足 |
CVE-2011-1393 | 2011-12-28 16:40 | 2011-12-27 | Show | GitHub Exploit DB Packet Storm |
| 251758 | 5.5 | 警告 | zFTPServer | - | zFTPServer Suite におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2011-4717 | 2011-12-28 16:31 | 2011-12-20 | Show | GitHub Exploit DB Packet Storm |
| 251759 | 5 | 警告 | Stichting NLnet Labs | - | Unbound にサービス運用妨害 (DoS) の脆弱性 |
CWE-399
リソース管理の問題 |
CVE-2011-4528 | 2011-12-28 16:26 | 2011-12-20 | Show | GitHub Exploit DB Packet Storm |
| 251760 | 7.5 | 危険 | 7-Technologies | - | 7-Technologies Interactive Graphical SCADA System におけるバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2011-4537 | 2011-12-28 15:58 | 2011-12-27 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 20, 2026, 4:14 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 258161 | 8.8 |
HIGH
Network |
imagemagick | imagemagick | ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteINLINEImage in coders/inline.c. |
CWE-772
Missing Release of Resource after Effective Lifetime |
CVE-2017-12666 | 2024-11-21 12:09 | 2017-08-8 | Show | GitHub Exploit DB Packet Storm |
| 258162 | 8.8 |
HIGH
Network |
imagemagick | imagemagick | ImageMagick 7.0.6-2 has a memory leak vulnerability in WritePICTImage in coders/pict.c. |
CWE-772
Missing Release of Resource after Effective Lifetime |
CVE-2017-12665 | 2024-11-21 12:09 | 2017-08-8 | Show | GitHub Exploit DB Packet Storm |
| 258163 | 8.8 |
HIGH
Network |
imagemagick | imagemagick | ImageMagick 7.0.6-2 has a memory leak vulnerability in WritePALMImage in coders/palm.c. |
CWE-772
Missing Release of Resource after Effective Lifetime |
CVE-2017-12664 | 2024-11-21 12:09 | 2017-08-8 | Show | GitHub Exploit DB Packet Storm |
| 258164 | 8.8 |
HIGH
Network |
imagemagick | imagemagick | ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteMAPImage in coders/map.c. |
CWE-772
Missing Release of Resource after Effective Lifetime |
CVE-2017-12663 | 2024-11-21 12:09 | 2017-08-8 | Show | GitHub Exploit DB Packet Storm |
| 258165 | 8.8 |
HIGH
Network |
imagemagick | imagemagick | ImageMagick 7.0.6-2 has a memory leak vulnerability in WritePDFImage in coders/pdf.c. |
CWE-772
Missing Release of Resource after Effective Lifetime |
CVE-2017-12662 | 2024-11-21 12:09 | 2017-08-8 | Show | GitHub Exploit DB Packet Storm |
| 258166 | 6.1 |
MEDIUM
Network |
nexusphp_project | nexusphp | Cross-Site Scripting (XSS) exists in NexusPHP version v1.5 via the query parameter to log.php in a dailylog action. |
CWE-79
Cross-site Scripting |
CVE-2017-12655 | 2024-11-21 12:09 | 2017-08-8 | Show | GitHub Exploit DB Packet Storm |
| 258167 | 6.5 |
MEDIUM
Network |
imagemagick | imagemagick | The ReadPICTImage function in coders/pict.c in ImageMagick 7.0.6-3 allows attackers to cause a denial of service (memory leak) via a crafted file. |
CWE-772
Missing Release of Resource after Effective Lifetime |
CVE-2017-12654 | 2024-11-21 12:09 | 2017-08-8 | Show | GitHub Exploit DB Packet Storm |
| 258168 | 7.8 |
HIGH
Local |
360totalsecurity | 360_total_security | 360 Total Security 9.0.0.1202 before 2017-07-07 allows Privilege Escalation via a Trojan horse Shcore.dll file in any directory in the PATH, as demonstrated by the C:\Python27 directory. |
CWE-427
Uncontrolled Search Path Element |
CVE-2017-12653 | 2024-11-21 12:09 | 2017-08-8 | Show | GitHub Exploit DB Packet Storm |
| 258169 | 8.8 |
HIGH
Network |
loginizer | loginizer | Cross Site Request Forgery (CSRF) exists in the Blacklist and Whitelist IP Wizard in init.php in the Loginizer plugin before 1.3.6 for WordPress because the HTTP Referer header is not checked. |
CWE-352
Origin Validation Error |
CVE-2017-12651 | 2024-11-21 12:09 | 2017-08-8 | Show | GitHub Exploit DB Packet Storm |
| 258170 | 9.8 |
CRITICAL
Network |
loginizer | loginizer | SQL Injection exists in the Loginizer plugin before 1.3.6 for WordPress via the X-Forwarded-For HTTP header. |
CWE-89
SQL Injection |
CVE-2017-12650 | 2024-11-21 12:09 | 2017-08-8 | Show | GitHub Exploit DB Packet Storm |