Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 22, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 252031 | 5 | 警告 | MaraDNS | - | MaraDNS におけるサービス運用妨害 (CPU 資源の消費) の脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2012-0024 | 2012-01-11 11:00 | 2011-12-29 | Show | GitHub Exploit DB Packet Storm |
| 252032 | 2.1 | 注意 | MaraDNS | - | MaraDNS の権威サーバにおけるサービス運用妨害 (CPU 資源の消費) の脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2011-5056 | 2012-01-11 10:59 | 2011-12-29 | Show | GitHub Exploit DB Packet Storm |
| 252033 | 5 | 警告 | MaraDNS | - | MaraDNS におけるサービス運用妨害 (CPU 資源の消費) の脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2011-5055 | 2012-01-11 10:58 | 2011-12-30 | Show | GitHub Exploit DB Packet Storm |
| 252034 | 6.8 | 警告 | Invensys | - | Invensys Wonderware InBatch の ActiveX コントロールにおけるバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2011-4870 | 2012-01-11 10:25 | 2012-01-8 | Show | GitHub Exploit DB Packet Storm |
| 252035 | 5 | 警告 | シーメンス | - | Siemens ALM の ActiveX コントロールにおける絶対パストラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2011-4532 | 2012-01-11 10:23 | 2012-01-8 | Show | GitHub Exploit DB Packet Storm |
| 252036 | 5 | 警告 | シーメンス | - | Siemens Automation License Manager におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2011-4531 | 2012-01-11 10:21 | 2012-01-8 | Show | GitHub Exploit DB Packet Storm |
| 252037 | 5 | 警告 | シーメンス | - | Siemens Automation License Manager におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2011-4530 | 2012-01-11 10:20 | 2012-01-8 | Show | GitHub Exploit DB Packet Storm |
| 252038 | 7.5 | 危険 | シーメンス | - | Siemens Automation License Manager におけるバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2011-4529 | 2012-01-11 10:14 | 2011-01-8 | Show | GitHub Exploit DB Packet Storm |
| 252039 | 5.8 | 警告 | シーメンス | - | Siemens Tecnomatix FactoryLink における任意のファイルを作成される脆弱性 |
CWE-noinfo
情報不足 |
CVE-2011-4056 | 2012-01-11 10:07 | 2012-01-8 | Show | GitHub Exploit DB Packet Storm |
| 252040 | 9.3 | 危険 | シーメンス | - | Siemens Tecnomatix FactoryLink におけるバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2011-4055 | 2012-01-11 10:00 | 2012-01-8 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 23, 2026, 4:08 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 258641 | 8.8 |
HIGH
Network |
loginizer | loginizer | Cross Site Request Forgery (CSRF) exists in the Blacklist and Whitelist IP Wizard in init.php in the Loginizer plugin before 1.3.6 for WordPress because the HTTP Referer header is not checked. |
CWE-352
Origin Validation Error |
CVE-2017-12651 | 2024-11-21 12:09 | 2017-08-8 | Show | GitHub Exploit DB Packet Storm |
| 258642 | 9.8 |
CRITICAL
Network |
loginizer | loginizer | SQL Injection exists in the Loginizer plugin before 1.3.6 for WordPress via the X-Forwarded-For HTTP header. |
CWE-89
SQL Injection |
CVE-2017-12650 | 2024-11-21 12:09 | 2017-08-8 | Show | GitHub Exploit DB Packet Storm |
| 258643 | 6.1 |
MEDIUM
Network |
liferay | liferay_portal | XSS exists in Liferay Portal before 7.0 CE GA4 via a crafted title or summary that is mishandled in the Web Content Display. |
CWE-79
Cross-site Scripting |
CVE-2017-12649 | 2024-11-21 12:09 | 2017-08-8 | Show | GitHub Exploit DB Packet Storm |
| 258644 | 6.1 |
MEDIUM
Network |
liferay | liferay_portal | XSS exists in Liferay Portal before 7.0 CE GA4 via a bookmark URL. |
CWE-79
Cross-site Scripting |
CVE-2017-12648 | 2024-11-21 12:09 | 2017-08-8 | Show | GitHub Exploit DB Packet Storm |
| 258645 | 6.1 |
MEDIUM
Network |
liferay | liferay_portal | XSS exists in Liferay Portal before 7.0 CE GA4 via a Knowledge Base article title. |
CWE-79
Cross-site Scripting |
CVE-2017-12647 | 2024-11-21 12:09 | 2017-08-8 | Show | GitHub Exploit DB Packet Storm |
| 258646 | 6.1 |
MEDIUM
Network |
liferay | liferay_portal | XSS exists in Liferay Portal before 7.0 CE GA4 via a login name, password, or e-mail address. |
CWE-79
Cross-site Scripting |
CVE-2017-12646 | 2024-11-21 12:09 | 2017-08-8 | Show | GitHub Exploit DB Packet Storm |
| 258647 | 6.1 |
MEDIUM
Network |
liferay | liferay_portal | XSS exists in Liferay Portal before 7.0 CE GA4 via an invalid portletId. |
CWE-79
Cross-site Scripting |
CVE-2017-12645 | 2024-11-21 12:09 | 2017-08-8 | Show | GitHub Exploit DB Packet Storm |
| 258648 | 9.8 |
CRITICAL
Network |
quest |
kace_asset_management_appliance kace_systems_management_appliance k1000_as_a_service |
SQL injection exists in Quest KACE Asset Management Appliance 6.4.120822 through 7.2, Systems Management Appliance 6.4.120822 through 7.2.101, and K1000 as a Service 7.0 through 7.2. |
CWE-89
SQL Injection |
CVE-2017-12567 | 2024-11-21 12:09 | 2017-08-8 | Show | GitHub Exploit DB Packet Storm |
| 258649 | 8.8 |
HIGH
Network |
imagemagick | imagemagick | ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadDCMImage in coders\dcm.c. |
CWE-772
Missing Release of Resource after Effective Lifetime |
CVE-2017-12644 | 2024-11-21 12:09 | 2017-08-8 | Show | GitHub Exploit DB Packet Storm |
| 258650 | 6.5 |
MEDIUM
Network |
imagemagick debian |
imagemagick debian_linux |
ImageMagick 7.0.6-1 has a memory exhaustion vulnerability in ReadOneJNGImage in coders\png.c. |
CWE-770
Allocation of Resources Without Limits or Throttling |
CVE-2017-12643 | 2024-11-21 12:09 | 2017-08-8 | Show | GitHub Exploit DB Packet Storm |