Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 15, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 254781 | 10 | 危険 | オラクル | - | Oracle WebLogic Server の WebLogic Server コンポーネントにおける脆弱性 |
CWE-noinfo
情報不足 |
CVE-2010-0073 | 2010-09-6 17:41 | 2010-02-4 | Show | GitHub Exploit DB Packet Storm |
| 254782 | 2.1 | 注意 | サイバートラスト株式会社 libvirt.org レッドハット |
- | libvirt における任意のファイルを読まれる脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2010-2242 | 2010-09-3 16:32 | 2010-08-4 | Show | GitHub Exploit DB Packet Storm |
| 254783 | 4.4 | 警告 | サイバートラスト株式会社 libvirt.org レッドハット |
- | libvirt における任意のファイルを読まれる脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2010-2239 | 2010-09-3 16:32 | 2010-08-10 | Show | GitHub Exploit DB Packet Storm |
| 254784 | 3.6 | 注意 | freedesktop.org サイバートラスト株式会社 レッドハット |
- | dbus-glib の GObject プロパティにおけるアクセス制限を回避される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2010-1172 | 2010-09-3 16:32 | 2010-08-10 | Show | GitHub Exploit DB Packet Storm |
| 254785 | 6.6 | 警告 | マイクロソフト | - | Microsoft Windows の win32k.sys 内にある Windows カーネルモードドライバにおける権限を取得される脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2010-1897 | 2010-09-3 12:00 | 2010-08-10 | Show | GitHub Exploit DB Packet Storm |
| 254786 | 6.8 | 警告 | マイクロソフト | - | Windows の Windows Service Isolation 機能における権限を取得される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2010-1886 | 2010-09-2 14:07 | 2010-08-10 | Show | GitHub Exploit DB Packet Storm |
| 254787 | 6.8 | 警告 | マイクロソフト | - | Windows のサービスのトレース機能における権限を取得される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2010-2554 | 2010-09-2 14:06 | 2010-08-10 | Show | GitHub Exploit DB Packet Storm |
| 254788 | 6.8 | 警告 | マイクロソフト | - | Windows のサービスのトレース機能における権限を取得される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2010-2555 | 2010-09-2 14:06 | 2010-08-10 | Show | GitHub Exploit DB Packet Storm |
| 254789 | 6.8 | 警告 | マイクロソフト | - | Windwos の TCP/IP スタックにおける整数オーバーフローの脆弱性 |
CWE-189
数値処理の問題 |
CVE-2010-1893 | 2010-09-2 14:06 | 2010-08-10 | Show | GitHub Exploit DB Packet Storm |
| 254790 | 9.3 | 危険 | マイクロソフト | - | Microsoft Office Excel および Open XML File Format Converter における任意のコードを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2010-2562 | 2010-09-2 14:05 | 2010-08-10 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 15, 2026, 4:28 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 257441 | 9.8 |
CRITICAL
Network |
loginizer | loginizer | SQL Injection exists in the Loginizer plugin before 1.3.6 for WordPress via the X-Forwarded-For HTTP header. |
CWE-89
SQL Injection |
CVE-2017-12650 | 2024-11-21 12:09 | 2017-08-8 | Show | GitHub Exploit DB Packet Storm |
| 257442 | 6.1 |
MEDIUM
Network |
liferay | liferay_portal | XSS exists in Liferay Portal before 7.0 CE GA4 via a crafted title or summary that is mishandled in the Web Content Display. |
CWE-79
Cross-site Scripting |
CVE-2017-12649 | 2024-11-21 12:09 | 2017-08-8 | Show | GitHub Exploit DB Packet Storm |
| 257443 | 6.1 |
MEDIUM
Network |
liferay | liferay_portal | XSS exists in Liferay Portal before 7.0 CE GA4 via a bookmark URL. |
CWE-79
Cross-site Scripting |
CVE-2017-12648 | 2024-11-21 12:09 | 2017-08-8 | Show | GitHub Exploit DB Packet Storm |
| 257444 | 6.1 |
MEDIUM
Network |
liferay | liferay_portal | XSS exists in Liferay Portal before 7.0 CE GA4 via a Knowledge Base article title. |
CWE-79
Cross-site Scripting |
CVE-2017-12647 | 2024-11-21 12:09 | 2017-08-8 | Show | GitHub Exploit DB Packet Storm |
| 257445 | 6.1 |
MEDIUM
Network |
liferay | liferay_portal | XSS exists in Liferay Portal before 7.0 CE GA4 via a login name, password, or e-mail address. |
CWE-79
Cross-site Scripting |
CVE-2017-12646 | 2024-11-21 12:09 | 2017-08-8 | Show | GitHub Exploit DB Packet Storm |
| 257446 | 6.1 |
MEDIUM
Network |
liferay | liferay_portal | XSS exists in Liferay Portal before 7.0 CE GA4 via an invalid portletId. |
CWE-79
Cross-site Scripting |
CVE-2017-12645 | 2024-11-21 12:09 | 2017-08-8 | Show | GitHub Exploit DB Packet Storm |
| 257447 | 9.8 |
CRITICAL
Network |
quest |
kace_asset_management_appliance kace_systems_management_appliance k1000_as_a_service |
SQL injection exists in Quest KACE Asset Management Appliance 6.4.120822 through 7.2, Systems Management Appliance 6.4.120822 through 7.2.101, and K1000 as a Service 7.0 through 7.2. |
CWE-89
SQL Injection |
CVE-2017-12567 | 2024-11-21 12:09 | 2017-08-8 | Show | GitHub Exploit DB Packet Storm |
| 257448 | 8.8 |
HIGH
Network |
imagemagick | imagemagick | ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadDCMImage in coders\dcm.c. |
CWE-772
Missing Release of Resource after Effective Lifetime |
CVE-2017-12644 | 2024-11-21 12:09 | 2017-08-8 | Show | GitHub Exploit DB Packet Storm |
| 257449 | 6.5 |
MEDIUM
Network |
imagemagick debian |
imagemagick debian_linux |
ImageMagick 7.0.6-1 has a memory exhaustion vulnerability in ReadOneJNGImage in coders\png.c. |
CWE-770
Allocation of Resources Without Limits or Throttling |
CVE-2017-12643 | 2024-11-21 12:09 | 2017-08-8 | Show | GitHub Exploit DB Packet Storm |
| 257450 | 8.8 |
HIGH
Network |
imagemagick | imagemagick | ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadMPCImage in coders\mpc.c. |
CWE-772
Missing Release of Resource after Effective Lifetime |
CVE-2017-12642 | 2024-11-21 12:09 | 2017-08-8 | Show | GitHub Exploit DB Packet Storm |