Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251961 7.5 危険 BlueCms - BlueCMS の comment.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4897 2012-01-19 11:41 2011-10-8 Show GitHub Exploit DB Packet Storm
251962 4.3 警告 Expinion.net - Member Management System の admin/index.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4896 2012-01-19 11:39 2011-10-8 Show GitHub Exploit DB Packet Storm
251963 4.3 警告 chillyCMS - chillyCMS の core/showsite.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4895 2012-01-19 11:38 2011-10-8 Show GitHub Exploit DB Packet Storm
251964 7.5 危険 chillyCMS - chillyCMS の core/showsite.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4894 2012-01-19 11:37 2011-10-8 Show GitHub Exploit DB Packet Storm
251965 4.3 警告 Skypanther Studios - FestOS の foodvendors.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4893 2012-01-19 11:23 2011-10-8 Show GitHub Exploit DB Packet Storm
251966 4.3 警告 Alex Kellner - TYPO3 用の powermail におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4892 2012-01-19 11:20 2010-10-26 Show GitHub Exploit DB Packet Storm
251967 7.5 危険 Andreas Kiefer - TYPO3 用の Yet Another Calendar における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4891 2012-01-19 11:20 2010-09-2 Show GitHub Exploit DB Packet Storm
251968 4.3 警告 Andreas Kiefer - TYPO3 用の Yet Another Calendar におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4890 2012-01-19 11:19 2010-09-2 Show GitHub Exploit DB Packet Storm
251969 10 危険 Marco Hezel - TYPO3 用の Tiny Market における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2010-4889 2012-01-19 11:18 2010-09-2 Show GitHub Exploit DB Packet Storm
251970 7.5 危険 Marco Hezel - TYPO3 用の Tiny Market における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4888 2012-01-19 11:17 2010-09-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
258651 8.8 HIGH
Network 		imagemagick imagemagick ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadMPCImage in coders\mpc.c. CWE-772
 Missing Release of Resource after Effective Lifetime 		CVE-2017-12642 2024-11-21 12:09 2017-08-8 Show GitHub Exploit DB Packet Storm
258652 8.8 HIGH
Network 		imagemagick imagemagick ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadOneJNGImage in coders\png.c. CWE-772
 Missing Release of Resource after Effective Lifetime 		CVE-2017-12641 2024-11-21 12:09 2017-08-8 Show GitHub Exploit DB Packet Storm
258653 8.8 HIGH
Network 		imagemagick
debian 		imagemagick
debian_linux 		ImageMagick 7.0.6-1 has an out-of-bounds read vulnerability in ReadOneMNGImage in coders/png.c. CWE-125
Out-of-bounds Read 		CVE-2017-12640 2024-11-21 12:09 2017-08-8 Show GitHub Exploit DB Packet Storm
258654 8.8 HIGH
Network 		kaseya unitrends_backup It was discovered that an issue in the session logic in Unitrends Backup (UB) before 10.0.0 allowed using the LOGDIR environment variable during a web session to elevate an existing low-privilege use… NVD-CWE-noinfo
CVE-2017-12479 2024-11-21 12:09 2017-08-8 Show GitHub Exploit DB Packet Storm
258655 9.8 CRITICAL
Network 		kaseya unitrends_backup It was discovered that the api/storage web interface in Unitrends Backup (UB) before 10.0.0 has an issue in which one of its input parameters was not validated. A remote attacker could use this flaw … CWE-287
Improper Authentication 		CVE-2017-12478 2024-11-21 12:09 2017-08-8 Show GitHub Exploit DB Packet Storm
258656 9.8 CRITICAL
Network 		kaseya unitrends_backup It was discovered that the bpserverd proprietary protocol in Unitrends Backup (UB) before 10.0.0, as invoked through xinetd, has an issue in which its authentication can be bypassed. A remote attacke… CWE-287
Improper Authentication 		CVE-2017-12477 2024-11-21 12:09 2017-08-8 Show GitHub Exploit DB Packet Storm
258657 8.8 HIGH
Network 		opencv
debian 		opencv
debian_linux 		OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds write error in the function FillColorRow4 in utils.cpp when reading an image file by using cv::imread. CWE-787
 Out-of-bounds Write 		CVE-2017-12606 2024-11-21 12:09 2017-08-7 Show GitHub Exploit DB Packet Storm
258658 8.8 HIGH
Network 		opencv
debian 		opencv
debian_linux 		OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds write error in the FillColorRow8 function in utils.cpp when reading an image file by using cv::imread. CWE-787
 Out-of-bounds Write 		CVE-2017-12605 2024-11-21 12:09 2017-08-7 Show GitHub Exploit DB Packet Storm
258659 8.8 HIGH
Network 		opencv
debian 		opencv
debian_linux 		OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds write error in the FillUniColor function in utils.cpp when reading an image file by using cv::imread. CWE-787
 Out-of-bounds Write 		CVE-2017-12604 2024-11-21 12:09 2017-08-7 Show GitHub Exploit DB Packet Storm
258660 8.8 HIGH
Network 		opencv
debian 		opencv
debian_linux 		OpenCV (Open Source Computer Vision Library) through 3.3 has an invalid write in the cv::RLByteStream::getBytes function in modules/imgcodecs/src/bitstrm.cpp when reading an image file by using cv::i… CWE-787
 Out-of-bounds Write 		CVE-2017-12603 2024-11-21 12:09 2017-08-7 Show GitHub Exploit DB Packet Storm