Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 22, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
254071 4.3 警告 santafox - SantaFox の modules/search/search.class.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-3463 2012-03-27 18:42 2010-09-17 Show GitHub Exploit DB Packet Storm
254072 4.3 警告 mollify - Mollify の backend/plugin/Registration/index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-3462 2012-03-27 18:42 2010-09-17 Show GitHub Exploit DB Packet Storm
254073 7.5 危険 endonesia - eNdonesia の Publisher モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-3461 2012-03-27 18:42 2010-09-17 Show GitHub Exploit DB Packet Storm
254074 5 警告 Gecad Technologies - AXIGEN Mail Server の HTTP インターフェースにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-3460 2012-03-27 18:42 2010-09-17 Show GitHub Exploit DB Packet Storm
254075 4.3 警告 Gecad Technologies - AXIGEN Mail Server の Ajax WebMail インターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-3459 2012-03-27 18:42 2010-09-17 Show GitHub Exploit DB Packet Storm
254076 4 警告 Linux - Linux kernel のdrivers/platform/x86/thinkpad_acpi.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-3448 2012-03-27 18:42 2011-01-3 Show GitHub Exploit DB Packet Storm
254077 4.3 警告 Horde - Horde Gollem の view.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-3447 2012-03-27 18:42 2011-04-4 Show GitHub Exploit DB Packet Storm
254078 7.5 危険 fribidi - PyFriBidi で使用される GNU FriBidi の log2vis_utf8 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-3444 2012-03-27 18:42 2011-01-10 Show GitHub Exploit DB Packet Storm
254079 7.5 危険 moinejf - abcm2ps における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-3441 2012-03-27 18:42 2011-02-18 Show GitHub Exploit DB Packet Storm
254080 1.9 注意 kernel.org - Linux-PAM の privilege-dropping 実装における重要情報を取得される脆弱性 CWE-DesignError
CVE-2010-3431 2012-03-27 18:42 2011-01-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 22, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
264171 6.5 MEDIUM
Network 		graphicsmagick graphicsmagick In GraphicsMagick 1.3.26, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c. CWE-772
 Missing Release of Resource after Effective Lifetime 		CVE-2017-13648 2024-11-21 12:11 2017-08-24 Show GitHub Exploit DB Packet Storm
264172 8.8 HIGH
Network 		graphicsmagick graphicsmagick In GraphicsMagick 1.3.26, an allocation failure vulnerability was found in the function ReadMNGImage in coders/png.c when a small MNG file has a MEND chunk with a large length value. CWE-20
 Improper Input Validation  		CVE-2017-13147 2024-11-21 12:11 2017-08-24 Show GitHub Exploit DB Packet Storm
264173 6.1 MEDIUM
Network 		qodeinteractive bridge DOM based Cross-site scripting (XSS) vulnerability in the Bridge theme before 11.2 for WordPress allows remote attackers to inject arbitrary JavaScript. CWE-79
Cross-site Scripting 		CVE-2017-13138 2024-11-21 12:11 2017-08-23 Show GitHub Exploit DB Packet Storm
264174 9.8 CRITICAL
Network 		formcrafts formcraft The FormCraft Basic plugin 1.0.5 for WordPress has SQL injection in the id parameter to form.php. CWE-89
SQL Injection 		CVE-2017-13137 2024-11-21 12:11 2017-08-23 Show GitHub Exploit DB Packet Storm
264175 8.8 HIGH
Network 		imagemagick imagemagick In ImageMagick before 6.9.8-5 and 7.x before 7.0.5-6, there is a memory leak in the ReadMATImage function in coders/mat.c. CWE-772
 Missing Release of Resource after Effective Lifetime 		CVE-2017-13146 2024-11-21 12:11 2017-08-23 Show GitHub Exploit DB Packet Storm
264176 6.5 MEDIUM
Network 		imagemagick
debian
canonical 		imagemagick
debian_linux
ubuntu_linux 		In ImageMagick before 6.9.8-8 and 7.x before 7.0.5-9, the ReadJP2Image function in coders/jp2.c does not properly validate the channel geometry, leading to a crash. CWE-20
 Improper Input Validation  		CVE-2017-13145 2024-11-21 12:11 2017-08-23 Show GitHub Exploit DB Packet Storm
264177 6.5 MEDIUM
Network 		imagemagick imagemagick In ImageMagick before 6.9.7-10, there is a crash (rather than a "width or height exceeds limit" error report) if the image dimensions are too large, as demonstrated by use of the mpc coder. CWE-20
 Improper Input Validation  		CVE-2017-13144 2024-11-21 12:11 2017-08-23 Show GitHub Exploit DB Packet Storm
264178 7.5 HIGH
Network 		imagemagick imagemagick In ImageMagick before 6.9.7-6 and 7.x before 7.0.4-6, the ReadMATImage function in coders/mat.c uses uninitialized data, which might allow remote attackers to obtain sensitive information from proces… CWE-200
Information Exposure 		CVE-2017-13143 2024-11-21 12:11 2017-08-23 Show GitHub Exploit DB Packet Storm
264179 6.5 MEDIUM
Network 		imagemagick imagemagick In ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1, a crafted PNG file could trigger a crash because there was an insufficient check for short files. CWE-754
 Improper Check for Unusual or Exceptional Conditions 		CVE-2017-13142 2024-11-21 12:11 2017-08-23 Show GitHub Exploit DB Packet Storm
264180 6.5 MEDIUM
Network 		imagemagick imagemagick In ImageMagick before 6.9.9-4 and 7.x before 7.0.6-4, a crafted file could trigger a memory leak in ReadOnePNGImage in coders/png.c. CWE-772
 Missing Release of Resource after Effective Lifetime 		CVE-2017-13141 2024-11-21 12:11 2017-08-23 Show GitHub Exploit DB Packet Storm