Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252811 4.3 警告 Nicholas Berry - CANDID の image/view.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4978 2011-12-9 14:39 2011-11-1 Show GitHub Exploit DB Packet Storm
252812 7.5 危険 Nicholas Berry - CANDID の image/view.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4979 2011-12-9 14:38 2011-11-1 Show GitHub Exploit DB Packet Storm
252813 7.5 危険 iScripts - iScripts ReserveLogic の packagedetails.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4980 2011-12-9 14:38 2011-11-1 Show GitHub Exploit DB Packet Storm
252814 7.5 危険 YourFreeWorld.com - YourFreeWorld Banner Management における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4981 2011-12-9 14:37 2011-11-1 Show GitHub Exploit DB Packet Storm
252815 7.5 危険 My Kazaam - My Kazaam Address & Contact Organizer における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4982 2011-12-9 14:36 2011-11-1 Show GitHub Exploit DB Packet Storm
252816 7.5 危険 iScripts - iScripts CyberMatch における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4983 2011-12-9 14:36 2011-11-1 Show GitHub Exploit DB Packet Storm
252817 7.5 危険 My Kazaam - My Kazaam Notes Management System における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4984 2011-12-9 14:35 2011-11-1 Show GitHub Exploit DB Packet Storm
252818 4.3 警告 My Kazaam - My Kazaam Notes Management System におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4985 2011-12-9 14:35 2011-11-1 Show GitHub Exploit DB Packet Storm
252819 7.5 危険 Cafuego - Simple Document Management System における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4986 2011-12-9 14:34 2011-11-1 Show GitHub Exploit DB Packet Storm
252820 7.5 危険 KMSoft - KMSoft Guestbook の default.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4987 2011-12-9 14:34 2011-11-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
259231 5.5 MEDIUM
Local 		sleuthkit
debian 		the_sleuth_kit
debian_linux 		In The Sleuth Kit (TSK) 4.4.2, opening a crafted disk image triggers infinite recursion in dos_load_ext_table() in tsk/vs/dos.c in libtskvs.a, as demonstrated by mmls. CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2017-13756 2024-11-21 12:11 2017-08-30 Show GitHub Exploit DB Packet Storm
259232 5.5 MEDIUM
Local 		sleuthkit
debian 		the_sleuth_kit
debian_linux 		In The Sleuth Kit (TSK) 4.4.2, opening a crafted ISO 9660 image triggers an out-of-bounds read in iso9660_proc_dir() in tsk/fs/iso9660_dent.c in libtskfs.a, as demonstrated by fls. CWE-125
Out-of-bounds Read 		CVE-2017-13755 2024-11-21 12:11 2017-08-30 Show GitHub Exploit DB Packet Storm
259233 6.5 MEDIUM
Network 		qemu qemu The vga display update in mis-calculated the region for the dirty bitmap snapshot in case split screen mode is used causing a denial of service (assertion failure) in the cpu_physical_memory_snapshot… CWE-617
 Reachable Assertion 		CVE-2017-13673 2024-11-21 12:11 2017-08-30 Show GitHub Exploit DB Packet Storm
259234 7.5 HIGH
Network 		jasper_project
fedoraproject 		jasper
fedora 		There is a reachable assertion abort in the function jpc_dequantize() in jpc/jpc_dec.c in JasPer 2.0.12 that will lead to a remote denial of service attack. CWE-617
 Reachable Assertion 		CVE-2017-13752 2024-11-21 12:11 2017-08-29 Show GitHub Exploit DB Packet Storm
259235 7.5 HIGH
Network 		jasper_project
fedoraproject 		jasper
fedora 		There is a reachable assertion abort in the function calcstepsizes() in jpc/jpc_dec.c in JasPer 2.0.12 that will lead to a remote denial of service attack. CWE-617
 Reachable Assertion 		CVE-2017-13751 2024-11-21 12:11 2017-08-29 Show GitHub Exploit DB Packet Storm
259236 7.5 HIGH
Network 		jasper_project
fedoraproject 		jasper
fedora 		There is a reachable assertion abort in the function jpc_dec_process_siz() in jpc/jpc_dec.c:1296 in JasPer 2.0.12 that will lead to a remote denial of service attack. CWE-617
 Reachable Assertion 		CVE-2017-13750 2024-11-21 12:11 2017-08-29 Show GitHub Exploit DB Packet Storm
259237 7.5 HIGH
Network 		jasper_project
fedoraproject 		jasper
fedora 		There is a reachable assertion abort in the function jpc_pi_nextrpcl() in jpc/jpc_t2cod.c in JasPer 2.0.12 that will lead to a remote denial of service attack. CWE-617
 Reachable Assertion 		CVE-2017-13749 2024-11-21 12:11 2017-08-29 Show GitHub Exploit DB Packet Storm
259238 7.5 HIGH
Network 		jasper_project
fedoraproject
debian 		jasper
fedora
debian_linux 		There are lots of memory leaks in JasPer 2.0.12, triggered in the function jas_strdup() in base/jas_string.c, that will lead to a remote denial of service attack. CWE-772
 Missing Release of Resource after Effective Lifetime 		CVE-2017-13748 2024-11-21 12:11 2017-08-29 Show GitHub Exploit DB Packet Storm
259239 7.5 HIGH
Network 		jasper_project
fedoraproject 		jasper
fedora 		There is a reachable assertion abort in the function jpc_floorlog2() in jpc/jpc_math.c in JasPer 2.0.12 that will lead to a remote denial of service attack. CWE-617
 Reachable Assertion 		CVE-2017-13747 2024-11-21 12:11 2017-08-29 Show GitHub Exploit DB Packet Storm
259240 7.5 HIGH
Network 		jasper_project
fedoraproject 		jasper
fedora 		There is a reachable assertion abort in the function jpc_dec_process_siz() in jpc/jpc_dec.c:1297 in JasPer 2.0.12 that will lead to a remote denial of service attack. CWE-617
 Reachable Assertion 		CVE-2017-13746 2024-11-21 12:11 2017-08-29 Show GitHub Exploit DB Packet Storm