|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
Update Date":June 8, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 253081 | 3.5 | 注意 | OpenEMR | - | OpenEMR におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2012-0991 | 2012-02-9 15:57 | 2012-02-7 | Show | GitHub Exploit DB Packet Storm |
| 253082 | 3.5 | 注意 | DClassifieds | - | DClassifieds の admin/settings/update におけるクロスサイトリクエストフォージェリの脆弱性 |
CWE-352
同一生成元ポリシー違反 |
CVE-2012-0990 | 2012-02-9 15:56 | 2012-02-7 | Show | GitHub Exploit DB Packet Storm |
| 253083 | 4.3 | 警告 | Zenphoto | - | Zenphoto の zp-core/admin.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング(XSS) |
CVE-2010-4907 | 2012-02-9 11:18 | 2011-10-8 | Show | GitHub Exploit DB Packet Storm |
| 253084 | 7.5 | 危険 | Zenphoto | - | Zenphoto の zp-core/full-image.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-4906 | 2012-02-9 11:12 | 2011-10-8 | Show | GitHub Exploit DB Packet Storm |
| 253085 | 7.5 | 危険 | SoftbizScripts | - | Softbiz Article Directory Script における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-4905 | 2012-02-9 11:12 | 2011-10-8 | Show | GitHub Exploit DB Packet Storm |
| 253086 | 7.5 | 危険 | DrBenHur | - | DBHcms の index.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-4869 | 2012-02-9 11:10 | 2011-10-5 | Show | GitHub Exploit DB Packet Storm |
| 253087 | 4.3 | 警告 | W-Agora | - | W-Agora の search.php3 におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング(XSS) |
CVE-2010-4868 | 2012-02-9 11:10 | 2011-10-5 | Show | GitHub Exploit DB Packet Storm |
| 253088 | 7.5 | 危険 | W-Agora | - | W-Agora の search.php3 におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2010-4867 | 2012-02-9 11:10 | 2011-10-5 | Show | GitHub Exploit DB Packet Storm |
| 253089 | 7.5 | 危険 | Chipmunk Scripts | - | Chipmunk Board の index.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-4866 | 2012-02-9 11:09 | 2011-10-5 | Show | GitHub Exploit DB Packet Storm |
| 253090 | 7.5 | 危険 | Jextensions | - | Joomla! 用 JE Guestbook (com_jeguestbook) コンポーネントにおける SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-4865 | 2012-02-9 11:08 | 2011-10-5 | Show | GitHub Exploit DB Packet Storm |
Update Date:June 8, 2026, 4:09 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 246531 | 9.8 |
CRITICAL
Network |
mutt neomutt canonical debian redhat |
mutt neomutt ubuntu_linux debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_eus enterprise_linux_server_tus | An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c does not forbid characters that may have unsafe interaction with message-cache pathnames, as demonstrated by a '/' c… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2018-14362 | 2024-11-21 12:48 | 2018-07-18 | Show | GitHub Exploit DB Packet Storm |
| 246532 | 9.8 |
CRITICAL
Network |
debian neomutt |
debian_linux neomutt |
An issue was discovered in NeoMutt before 2018-07-16. nntp.c proceeds even if memory allocation fails for messages data. |
CWE-20
Improper Input Validation |
CVE-2018-14361 | 2024-11-21 12:48 | 2018-07-18 | Show | GitHub Exploit DB Packet Storm |
| 246533 | 9.8 |
CRITICAL
Network |
debian neomutt |
debian_linux neomutt |
An issue was discovered in NeoMutt before 2018-07-16. nntp_add_group in newsrc.c has a stack-based buffer overflow because of incorrect sscanf usage. |
CWE-787
Out-of-bounds Write |
CVE-2018-14360 | 2024-11-21 12:48 | 2018-07-18 | Show | GitHub Exploit DB Packet Storm |
| 246534 | 9.8 |
CRITICAL
Network |
mutt neomutt canonical debian |
mutt neomutt ubuntu_linux debian_linux |
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They have a buffer overflow via base64 data. |
CWE-120
Classic Buffer Overflow |
CVE-2018-14359 | 2024-11-21 12:48 | 2018-07-18 | Show | GitHub Exploit DB Packet Storm |
| 246535 | 9.8 |
CRITICAL
Network |
mutt neomutt canonical debian |
mutt neomutt ubuntu_linux debian_linux |
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/message.c has a stack-based buffer overflow for a FETCH response with a long RFC822.SIZE field. |
CWE-787
Out-of-bounds Write |
CVE-2018-14358 | 2024-11-21 12:48 | 2018-07-18 | Show | GitHub Exploit DB Packet Storm |
| 246536 | 9.8 |
CRITICAL
Network |
debian mutt neomutt canonical |
debian_linux mutt neomutt ubuntu_linux |
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c mishandles a zero-length UID. |
CWE-824
Access of Uninitialized Pointer |
CVE-2018-14356 | 2024-11-21 12:48 | 2018-07-18 | Show | GitHub Exploit DB Packet Storm |
| 246537 | 5.3 |
MEDIUM
Network |
debian mutt neomutt canonical |
debian_linux mutt neomutt ubuntu_linux |
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/util.c mishandles ".." directory traversal in a mailbox name. |
CWE-22
Path Traversal |
CVE-2018-14355 | 2024-11-21 12:48 | 2018-07-18 | Show | GitHub Exploit DB Packet Storm |
| 246538 | 9.8 |
CRITICAL
Network |
mutt neomutt canonical debian |
mutt neomutt ubuntu_linux debian_linux |
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap_quote_string in imap/util.c has an integer underflow. |
CWE-191
Integer Underflow (Wrap or Wraparound) |
CVE-2018-14353 | 2024-11-21 12:48 | 2018-07-18 | Show | GitHub Exploit DB Packet Storm |
| 246539 | 9.8 |
CRITICAL
Network |
mutt neomutt canonical debian |
mutt neomutt ubuntu_linux debian_linux |
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap_quote_string in imap/util.c does not leave room for quote characters, leading to a stack-based buffer overflow. |
CWE-787
Out-of-bounds Write |
CVE-2018-14352 | 2024-11-21 12:48 | 2018-07-18 | Show | GitHub Exploit DB Packet Storm |
| 246540 | 9.8 |
CRITICAL
Network |
mutt neomutt canonical debian |
mutt neomutt ubuntu_linux debian_linux |
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/command.c mishandles a long IMAP status mailbox literal count size. |
CWE-20
Improper Input Validation |
CVE-2018-14351 | 2024-11-21 12:48 | 2018-07-18 | Show | GitHub Exploit DB Packet Storm |