Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 17, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
252541 7.5 危険 Andy's PHP Knowledgebase Project - Aphpkb における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2011-1546 2012-03-27 18:43 2011-03-16 Show GitHub Exploit DB Packet Storm
252542 6.8 警告 ヒューレット・パッカード - HP Insight Control Performance Management におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2011-1545 2012-03-27 18:43 2011-05-3 Show GitHub Exploit DB Packet Storm
252543 6 警告 ヒューレット・パッカード - HP Insight Control Performance Management における権限を取得される脆弱性 CWE-noinfo
情報不足
CVE-2011-1544 2012-03-27 18:43 2011-05-3 Show GitHub Exploit DB Packet Storm
252544 4.3 警告 ヒューレット・パッカード - HP SIM におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2011-1543 2012-03-27 18:43 2011-04-29 Show GitHub Exploit DB Packet Storm
252545 4.3 警告 ヒューレット・パッカード - HP SIM におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-1542 2012-03-27 18:43 2011-04-29 Show GitHub Exploit DB Packet Storm
252546 10 危険 ヒューレット・パッカード - HP SMH におけるアクセス制限を回避される脆弱性 CWE-noinfo
情報不足
CVE-2011-1541 2012-03-27 18:43 2011-04-29 Show GitHub Exploit DB Packet Storm
252547 9 危険 ヒューレット・パッカード - HP SMH における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2011-1540 2012-03-27 18:43 2011-04-29 Show GitHub Exploit DB Packet Storm
252548 5 警告 ヒューレット・パッカード - HP PSP における重要な情報を取得される脆弱性 CWE-noinfo
情報不足
CVE-2011-1539 2012-03-27 18:43 2011-05-3 Show GitHub Exploit DB Packet Storm
252549 4.9 警告 ヒューレット・パッカード - HP PSP におけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認
CVE-2011-1538 2012-03-27 18:43 2011-05-3 Show GitHub Exploit DB Packet Storm
252550 4.3 警告 ヒューレット・パッカード - HP PSP におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-1537 2012-03-27 18:43 2011-05-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
264391 7.5 HIGH
Network
simplesamlphp
debian
infocard_module
debian_linux
The InfoCard module 1.0 for SimpleSAMLphp allows attackers to spoof XML messages by leveraging an incorrect check of return values in signature validation utilities. CWE-20
 Improper Input Validation 
CVE-2017-12874 2024-11-21 12:10 2017-09-2 Show GitHub Exploit DB Packet Storm
264392 9.8 CRITICAL
Network
simplesamlphp
debian
simplesamlphp
debian_linux
SimpleSAMLphp 1.7.0 through 1.14.10 might allow attackers to obtain sensitive information, gain unauthorized access, or have unspecified other impacts by leveraging incorrect persistent NameID genera… CWE-384
 Session Fixation
CVE-2017-12873 2024-11-21 12:10 2017-09-2 Show GitHub Exploit DB Packet Storm
264393 5.9 MEDIUM
Network
simplesamlphp
debian
simplesamlphp
debian_linux
The (1) Htpasswd authentication source in the authcrypt module and (2) SimpleSAML_Session class in SimpleSAMLphp 1.14.11 and earlier allow remote attackers to conduct timing side-channel attacks by l… CWE-200
Information Exposure
CVE-2017-12872 2024-11-21 12:10 2017-09-2 Show GitHub Exploit DB Packet Storm
264394 5.9 MEDIUM
Network
simplesamlphp simplesamlphp The aesEncrypt method in lib/SimpleSAML/Utils/Crypto.php in SimpleSAMLphp 1.14.x through 1.14.11 makes it easier for context-dependent attackers to bypass the encryption protection mechanism by lever… CWE-326
Inadequate Encryption Strength
CVE-2017-12871 2024-11-21 12:10 2017-09-2 Show GitHub Exploit DB Packet Storm
264395 6.5 MEDIUM
Network
imagemagick
canonical
imagemagick
ubuntu_linux
The ReadBMPImage function in coders/bmp.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (memory consumption) via a crafted BMP file. CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2017-12693 2024-11-21 12:10 2017-09-2 Show GitHub Exploit DB Packet Storm
264396 6.5 MEDIUM
Network
imagemagick
canonical
imagemagick
ubuntu_linux
The ReadVIFFImage function in coders/viff.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (memory consumption) via a crafted VIFF file. CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2017-12692 2024-11-21 12:10 2017-09-2 Show GitHub Exploit DB Packet Storm
264397 6.5 MEDIUM
Network
imagemagick
canonical
imagemagick
ubuntu_linux
The ReadOneLayer function in coders/xcf.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (memory consumption) via a crafted file. CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2017-12691 2024-11-21 12:10 2017-09-2 Show GitHub Exploit DB Packet Storm
264398 5.9 MEDIUM
Network
simplesamlphp simplesamlphp SimpleSAMLphp 1.14.12 and earlier make it easier for man-in-the-middle attackers to obtain sensitive information by leveraging use of the aesEncrypt and aesDecrypt methods in the SimpleSAML/Utils/Cry… CWE-200
Information Exposure
CVE-2017-12870 2024-11-21 12:10 2017-09-1 Show GitHub Exploit DB Packet Storm
264399 7.5 HIGH
Network
simplesamlphp
debian
simplesamlphp
debian_linux
The multiauth module in SimpleSAMLphp 1.14.13 and earlier allows remote attackers to bypass authentication context restrictions and use an authentication source defined in config/authsources.php via … CWE-20
 Improper Input Validation 
CVE-2017-12869 2024-11-21 12:10 2017-09-1 Show GitHub Exploit DB Packet Storm
264400 9.8 CRITICAL
Network
simplesamlphp simplesamlphp The secureCompare method in lib/SimpleSAML/Utils/Crypto.php in SimpleSAMLphp 1.14.13 and earlier, when used with PHP before 5.6, allows attackers to conduct session fixation attacks or possibly bypas… CWE-384
 Session Fixation
CVE-2017-12868 2024-11-21 12:10 2017-09-1 Show GitHub Exploit DB Packet Storm