Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 5, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 252371 | 4.3 | 警告 | アップル ターボリナックス FreeType Project |
- | FreeType の bdf/bdflib.c におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2010-3053 | 2010-12-2 16:28 | 2010-08-19 | Show | GitHub Exploit DB Packet Storm |
| 252372 | 5 | 警告 | アップル | - | Apple Mac OS X の Printing におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-Other
その他 |
CVE-2010-3784 | 2010-12-1 16:14 | 2010-11-16 | Show | GitHub Exploit DB Packet Storm |
| 252373 | 6.8 | 警告 | アップル | - | Apple Mac OS X のパスワードサーバにおけるパスワードの認証を回避される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2010-3783 | 2010-12-1 16:12 | 2010-11-16 | Show | GitHub Exploit DB Packet Storm |
| 252374 | 6.8 | 警告 | アップル ターボリナックス FreeType Project オラクル |
- | FreeType における任意のコードを実行される脆弱性 |
CWE-189
数値処理の問題 |
CVE-2010-2807 | 2010-12-1 16:00 | 2010-08-19 | Show | GitHub Exploit DB Packet Storm |
| 252375 | 6.8 | 警告 | アップル サイバートラスト株式会社 ターボリナックス FreeType Project オラクル レッドハット |
- | FreeType の t42_parse_sfnts 関数における任意のコードを実行される脆弱性 |
CWE-399
リソース管理の問題 |
CVE-2010-2806 | 2010-12-1 15:58 | 2010-08-19 | Show | GitHub Exploit DB Packet Storm |
| 252376 | 6.8 | 警告 | アップル ターボリナックス FreeType Project レッドハット オラクル |
- | FreeType の FT_Stream_EnterFrame 関数における任意のコードを実行される脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2010-2805 | 2010-12-1 15:55 | 2010-08-19 | Show | GitHub Exploit DB Packet Storm |
| 252377 | 5.1 | 警告 | アップル ターボリナックス FreeType Project オラクル |
- | FreeType の Ins_IUP 関数におけるヒープベースのバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2010-2520 | 2010-12-1 15:28 | 2010-08-19 | Show | GitHub Exploit DB Packet Storm |
| 252378 | 6.8 | 警告 | アップル サイバートラスト株式会社 ターボリナックス FreeType Project オラクル レッドハット |
- | FreeType の Mac_Read_POST_Resource 関数におけるヒープベースのバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2010-2519 | 2010-12-1 15:27 | 2010-07-12 | Show | GitHub Exploit DB Packet Storm |
| 252379 | 6.8 | 警告 | アップル サイバートラスト株式会社 ターボリナックス FreeType Project オラクル レッドハット |
- | FreeType の gray_render_span 関数における整数オーバーフローの脆弱性 |
CWE-189
数値処理の問題 |
CVE-2010-2500 | 2010-12-1 15:26 | 2010-07-12 | Show | GitHub Exploit DB Packet Storm |
| 252380 | 6.8 | 警告 | アップル サイバートラスト株式会社 ターボリナックス FreeType Project オラクル レッドハット |
- | FreeType の Mac_Read_POST_Resource 関数におけるバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2010-2499 | 2010-12-1 15:24 | 2010-07-12 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 5, 2026, 4:51 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 257151 | 5.9 |
MEDIUM
Network |
microsoft |
windows_server_2012 windows_10 windows_server_2016 windows_8.1 windows_server_2008 windows_7 |
Microsoft Server Message Block 1.0 (SMBv1) allows an information disclosure vulnerability in the way that Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012… |
CWE-200
Information Exposure |
CVE-2017-0267 | 2024-11-21 12:02 | 2017-05-12 | Show | GitHub Exploit DB Packet Storm |
| 257152 | 4.7 |
MEDIUM
Local |
microsoft |
windows_server_2012 windows_server_2008 windows_10 windows_server_2016 windows_8.1 windows_7 windows_rt_8.1 |
The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server … |
CWE-200
Information Exposure |
CVE-2017-0258 | 2024-11-21 12:02 | 2017-05-12 | Show | GitHub Exploit DB Packet Storm |
| 257153 | 5.4 |
MEDIUM
Network |
microsoft | sharepoint_foundation | Microsoft SharePoint Foundation 2013 SP1 allows an elevation of privilege vulnerability when it does not properly sanitize a specially crafted web request, aka "Microsoft SharePoint XSS Vulnerability… |
CWE-79
Cross-site Scripting |
CVE-2017-0255 | 2024-11-21 12:02 | 2017-05-12 | Show | GitHub Exploit DB Packet Storm |
| 257154 | 7.5 |
HIGH
Network |
microsoft | .net_framework | Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to bypass Enhanced Security Usage taggings when they present a certificate that is invalid for a specific … |
CWE-295
Improper Certificate Validation |
CVE-2017-0248 | 2024-11-21 12:02 | 2017-05-12 | Show | GitHub Exploit DB Packet Storm |
| 257155 | 4.7 |
MEDIUM
Local |
microsoft |
windows_7 windows_server_2008 windows_server_2012 |
The kernel-mode drivers in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1 and Windows Server 2012 Gold allow a local authenticated attacker to execute a specially crafted application to obtain ker… |
CWE-200
Information Exposure |
CVE-2017-0245 | 2024-11-21 12:02 | 2017-05-12 | Show | GitHub Exploit DB Packet Storm |
| 257156 | 6.7 |
MEDIUM
Local |
microsoft |
windows_server_2008 windows_7 |
The kernel in Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows locally authenticated attackers to gain privileges via a crafted application, or in Windows 7 for x64-based systems, cause d… |
NVD-CWE-noinfo
|
CVE-2017-0244 | 2024-11-21 12:02 | 2017-05-12 | Show | GitHub Exploit DB Packet Storm |
| 257157 | 5.3 |
MEDIUM
Network |
microsoft |
microsoft.aspnetcore.mvc.formatters.json microsoft.aspnetcore.mvc.cors microsoft.aspnetcore.mvc.apiexplorer microsoft.aspnetcore.mvc.localization microsoft.aspnetcore.mvc.taghelpers mi… |
A spoofing vulnerability exists when the ASP.NET Core fails to properly sanitize web requests. |
CWE-20
Improper Input Validation |
CVE-2017-0256 | 2024-11-21 12:02 | 2017-05-12 | Show | GitHub Exploit DB Packet Storm |
| 257158 | 7.8 |
HIGH
Local |
microsoft |
word office_web_apps office sharepoint_server word_rt office_compatibility_pack word_viewer |
Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Office for Mac 2011, Office for Mac 2016, Microsoft Office Web Apps 2010 SP2, Office Web Apps Server 2013 SP1, Word… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2017-0254 | 2024-11-21 12:02 | 2017-05-12 | Show | GitHub Exploit DB Packet Storm |
| 257159 | 7.3 |
HIGH
Network |
microsoft |
microsoft.aspnetcore.mvc.formatters.json microsoft.aspnetcore.mvc.cors microsoft.aspnetcore.mvc.apiexplorer microsoft.aspnetcore.mvc.localization microsoft.aspnetcore.mvc.taghelpers mi… |
An elevation of privilege vulnerability exists when the ASP.NET Core fails to properly sanitize web requests. |
CWE-20
Improper Input Validation |
CVE-2017-0249 | 2024-11-21 12:02 | 2017-05-12 | Show | GitHub Exploit DB Packet Storm |
| 257160 | 7.5 |
HIGH
Network |
microsoft |
microsoft.aspnetcore.mvc.formatters.json microsoft.aspnetcore.mvc.cors microsoft.aspnetcore.mvc.apiexplorer microsoft.aspnetcore.mvc.localization microsoft.aspnetcore.mvc.taghelpers mi… |
A denial of service vulnerability exists when the ASP.NET Core fails to properly validate web requests. NOTE: Microsoft has not commented on third-party claims that the issue is that the TextEncoder.… |
CWE-20
Improper Input Validation |
CVE-2017-0247 | 2024-11-21 12:02 | 2017-05-12 | Show | GitHub Exploit DB Packet Storm |