Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 23, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
254491 9.3 危険 VideoLAN - VideoLAN VLC Media Player の libdirectx_plugin.dll における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-3275 2012-03-27 18:42 2011-03-28 Show GitHub Exploit DB Packet Storm
254492 4.3 警告 Zoho Corporation - ZOHO ManageEngine ADSelfService Plus の Employee Search Engine におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-3274 2012-03-27 18:42 2011-02-17 Show GitHub Exploit DB Packet Storm
254493 5 警告 Zoho Corporation - ZOHO ManageEngine ADSelfService Plus における任意のユーザアカウントへのアクセスを取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-3273 2012-03-27 18:42 2011-02-17 Show GitHub Exploit DB Packet Storm
254494 4.3 警告 Zoho Corporation - ZOHO ManageEngine ADSelfService Plus の security-questions 実装における任意のユーザアカウントへのアクセスを取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-3272 2012-03-27 18:42 2011-02-17 Show GitHub Exploit DB Packet Storm
254495 6.8 警告 IBM - IBM WAS の Integrated Solutions Console におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2010-3271 2012-03-27 18:42 2011-07-18 Show GitHub Exploit DB Packet Storm
254496 6.8 警告 シスコシステムズ - Cisco WebEx Meeting Center T27LB におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-3270 2012-03-27 18:42 2011-02-1 Show GitHub Exploit DB Packet Storm
254497 9.3 危険 シスコシステムズ - Cisco WRF および ARF Player T27LB におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-3269 2012-03-27 18:42 2011-02-1 Show GitHub Exploit DB Packet Storm
254498 6.4 警告 orbeon - Orbeon Forms の XForms サービスの xforms-server コンポーネントにおけるイントラネットサーバへ HTTP リクエストを送信される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-3260 2012-03-27 18:42 2011-04-26 Show GitHub Exploit DB Packet Storm
254499 5 警告 シマンテック
インテル		 - Symantec Antivirus Corporate Edition などで使用される Intel AMS の GetStringAMSHandler 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-3268 2012-03-27 18:42 2010-12-22 Show GitHub Exploit DB Packet Storm
254500 6.5 警告 ifdefined - BugTracker.NET における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-3267 2012-03-27 18:42 2010-12-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 23, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
264181 6.5 MEDIUM
Network 		imagemagick imagemagick In ImageMagick before 6.9.9-1 and 7.x before 7.0.6-2, the ReadOnePNGImage function in coders/png.c allows remote attackers to cause a denial of service (application hang in LockSemaphoreInfo) via a P… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2017-13140 2024-11-21 12:11 2017-08-23 Show GitHub Exploit DB Packet Storm
264182 9.8 CRITICAL
Network 		imagemagick
debian
canonical 		imagemagick
debian_linux
ubuntu_linux 		In ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1, the ReadOneMNGImage function in coders/png.c has an out-of-bounds read with the MNG CLIP chunk. CWE-125
Out-of-bounds Read 		CVE-2017-13139 2024-11-21 12:11 2017-08-23 Show GitHub Exploit DB Packet Storm
264183 6.5 MEDIUM
Network 		imagemagick imagemagick In ImageMagick 7.0.6-6 and GraphicsMagick 1.3.26, a heap-based buffer over-read was found in the function SFWScan in coders/sfw.c, which allows attackers to cause a denial of service via a crafted fi… CWE-125
Out-of-bounds Read 		CVE-2017-13134 2024-11-21 12:11 2017-08-23 Show GitHub Exploit DB Packet Storm
264184 6.5 MEDIUM
Network 		imagemagick imagemagick In ImageMagick 7.0.6-8, the load_level function in coders/xcf.c lacks offset validation, which allows attackers to cause a denial of service (load_tile memory exhaustion) via a crafted file. CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2017-13133 2024-11-21 12:11 2017-08-23 Show GitHub Exploit DB Packet Storm
264185 7.5 HIGH
Network 		bitcoin bitcoin_core Bitcoin Core before 0.14 allows an attacker to create an ostensibly valid SPV proof for a payment to a victim who uses an SPV wallet, even if that payment did not actually occur. Completing the attac… CWE-20
 Improper Input Validation  		CVE-2017-12842 2024-11-21 12:10 2020-03-17 Show GitHub Exploit DB Packet Storm
264186 8.8 HIGH
Network 		mersive solstice_firmware Insufficient validation of user-supplied input for the Solstice Pod before 2.8.4 networking configuration enables authenticated attackers to execute arbitrary commands as root. CWE-78
OS Command  		CVE-2017-12945 2024-11-21 12:10 2019-11-28 Show GitHub Exploit DB Packet Storm
264187 7.5 HIGH
Network 		open-xchange open-xchange_appsuite OX Software GmbH App Suite 7.8.4 and earlier is affected by: Information Exposure. CWE-200
Information Exposure 		CVE-2017-12884 2024-11-21 12:10 2019-05-11 Show GitHub Exploit DB Packet Storm
264188 6.1 MEDIUM
Network 		open-xchange open-xchange_appsuite OX Software GmbH App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS). CWE-79
Cross-site Scripting 		CVE-2017-12885 2024-11-21 12:10 2019-05-11 Show GitHub Exploit DB Packet Storm
264189 9.8 CRITICAL
Network 		openmrs openmrs-module-htmlformentry OpenMRS openmrs-module-htmlformentry 3.3.2 is affected by: (Improper Input Validation). CWE-20
 Improper Input Validation  		CVE-2017-12795 2024-11-21 12:10 2019-05-11 Show GitHub Exploit DB Packet Storm
264190 8.8 HIGH
Network 		metinfo metinfo Metinfo 5.3.18 is affected by: Cross Site Request Forgery (CSRF). The impact is: Information Disclosure (remote). The component is: admin/interface/online/delete.php. The attack vector is: The admini… CWE-352
 Origin Validation Error 		CVE-2017-12789 2024-11-21 12:10 2019-05-11 Show GitHub Exploit DB Packet Storm