Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 31, 2026, 2 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 251911 | 7.5 | 危険 | Saurused | - | Saurus CMS における PHP リモートファイルインクルージョンの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2010-4943 | 2012-02-29 11:08 | 2011-10-9 | Show | GitHub Exploit DB Packet Storm |
| 251912 | 7.5 | 危険 | E-Xoopport | - | E-Xoopport Samsara の location.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-4942 | 2012-02-29 11:06 | 2011-10-9 | Show | GitHub Exploit DB Packet Storm |
| 251913 | 7.5 | 危険 | Joomla Mo | - | Joomla! 用 Teams (com_teams) コンポーネントにおける SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-4941 | 2012-02-29 11:02 | 2011-10-9 | Show | GitHub Exploit DB Packet Storm |
| 251914 | 7.5 | 危険 | Wanewsletter | - | Wanewsletter の index.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-4940 | 2012-02-29 11:01 | 2011-10-9 | Show | GitHub Exploit DB Packet Storm |
| 251915 | 7.5 | 危険 | Scripts bdr130 | - | MailForm の index.php におけるリモートファイルインクルージョンの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2010-4939 | 2012-02-29 10:58 | 2011-10-9 | Show | GitHub Exploit DB Packet Storm |
| 251916 | 2.6 | 注意 | クックパッド株式会社 | - | 複数のクックパッド製 Android アプリケーションにおける WebView クラスに関する脆弱性 |
CWE-Other
その他 |
CVE-2012-0316 | 2012-02-29 10:52 | 2012-02-22 | Show | GitHub Exploit DB Packet Storm |
| 251917 | 9 | 危険 | シスコシステムズ | - | 複数の Cisco 製品の Local TFTP file-upload アプリケーションにおけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2012-0365 | 2012-02-28 16:24 | 2012-02-23 | Show | GitHub Exploit DB Packet Storm |
| 251918 | 7.8 | 危険 | シスコシステムズ | - | 複数の Cisco 製品における設定ファイルを置き換えられる脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2012-0364 | 2012-02-28 16:16 | 2012-02-23 | Show | GitHub Exploit DB Packet Storm |
| 251919 | 9 | 危険 | シスコシステムズ | - | 複数の Cisco 製品の Web インタフェースにおける任意のコマンドを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2012-0363 | 2012-02-28 16:13 | 2012-02-23 | Show | GitHub Exploit DB Packet Storm |
| 251920 | 7.5 | 危険 | Joomla! | - | Joomla! の Weblinks コンポーネントにおける SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-4938 | 2012-02-28 16:04 | 2011-10-9 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 31, 2026, 4:16 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 246821 | 6.5 |
MEDIUM
Network |
miniupnp_project | ngiflib | GifIndexToTrueColor in ngiflib.c in MiniUPnP ngiflib 0.4 has a Segmentation fault. |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2018-11578 | 2024-11-21 12:43 | 2018-05-31 | Show | GitHub Exploit DB Packet Storm |
| 246822 | 8.8 |
HIGH
Network |
liblouis canonical opensuse |
liblouis ubuntu_linux leap |
Liblouis 3.5.0 has a Segmentation fault in lou_logPrint in logging.c. |
CWE-120
Classic Buffer Overflow |
CVE-2018-11577 | 2024-11-21 12:43 | 2018-05-31 | Show | GitHub Exploit DB Packet Storm |
| 246823 | 9.8 |
CRITICAL
Network |
miniupnp_project | ngiflib | ngiflib.c in MiniUPnP ngiflib 0.4 has a heap-based buffer over-read in GifIndexToTrueColor. |
CWE-125
Out-of-bounds Read |
CVE-2018-11576 | 2024-11-21 12:43 | 2018-05-31 | Show | GitHub Exploit DB Packet Storm |
| 246824 | 9.8 |
CRITICAL
Network |
miniupnp_project | ngiflib | ngiflib.c in MiniUPnP ngiflib 0.4 has a stack-based buffer overflow in DecodeGifImg. |
CWE-787
Out-of-bounds Write |
CVE-2018-11575 | 2024-11-21 12:43 | 2018-05-31 | Show | GitHub Exploit DB Packet Storm |
| 246825 | 5.4 |
MEDIUM
Network |
clippercms | clippercms | ClipperCMS 1.3.3 has XSS in the "Module name" field in a "Modules -> Manage modules -> edit" action to the manager/ URI. |
CWE-79
Cross-site Scripting |
CVE-2018-11572 | 2024-11-21 12:43 | 2018-05-31 | Show | GitHub Exploit DB Packet Storm |
| 246826 | 8.8 |
HIGH
Network |
clippercms | clippercms | ClipperCMS 1.3.3 allows Session Fixation. |
CWE-384
Session Fixation |
CVE-2018-11571 | 2024-11-21 12:43 | 2018-05-31 | Show | GitHub Exploit DB Packet Storm |
| 246827 | 6.1 |
MEDIUM
Network |
cactusthemes | gameplan-event_and_gym_fitness | Reflected XSS is possible in the GamePlan theme through 1.5.13.2 for WordPress because of insufficient input sanitization, as demonstrated by the s parameter. In some (but not all) cases, the '<' and… |
CWE-79
Cross-site Scripting |
CVE-2018-11568 | 2024-11-21 12:43 | 2018-05-31 | Show | GitHub Exploit DB Packet Storm |
| 246828 | 5.3 |
MEDIUM
Network |
mahara | mahara | Mahara 17.04 before 17.04.8 and 17.10 before 17.10.5 and 18.04 before 18.04.1 are vulnerable to mentioning the usernames that are already taken by people registered in the system rather than masking … |
CWE-200
Information Exposure |
CVE-2018-11565 | 2024-11-21 12:43 | 2018-05-31 | Show | GitHub Exploit DB Packet Storm |
| 246829 | 9.8 |
CRITICAL
Network |
tp-link |
ipc_tl-ipc223\(p\)-6_firmware tl-ipc323k-d_firmware tl-ipc325\(kp\)_firmware tl-ipc40a-4_firmware |
/usr/lib/lua/luci/websys.lua on TP-LINK IPC TL-IPC223(P)-6, TL-IPC323K-D, TL-IPC325(KP)-*, and TL-IPC40A-4 devices has a hardcoded zMiVw8Kw0oxKXL0 password. |
CWE-798
Use of Hard-coded Credentials |
CVE-2018-11482 | 2024-11-21 12:43 | 2018-05-31 | Show | GitHub Exploit DB Packet Storm |
| 246830 | 8.8 |
HIGH
Network |
tp-link |
ipc_tl-ipc223\(p\)-6_firmware tl-ipc323k-d_firmware tl-ipc325\(kp\)_firmware tl-ipc40a-4_firmware |
TP-LINK IPC TL-IPC223(P)-6, TL-IPC323K-D, TL-IPC325(KP)-*, and TL-IPC40A-4 devices allow authenticated remote code execution via crafted JSON data because /usr/lib/lua/luci/torchlight/validator.lua d… |
CWE-20
Improper Input Validation |
CVE-2018-11481 | 2024-11-21 12:43 | 2018-05-31 | Show | GitHub Exploit DB Packet Storm |