Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 23, 2026, noon
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 256441 | 9.3 | 危険 | マイクロソフト | - | Microsoft Internet Explorer における任意のコードを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2010-0490 | 2010-04-19 19:18 | 2010-03-30 | Show | GitHub Exploit DB Packet Storm |
| 256442 | 9.3 | 危険 | マイクロソフト | - | Microsoft Internet Explorer における任意のコードを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2010-0807 | 2010-04-19 19:18 | 2010-03-30 | Show | GitHub Exploit DB Packet Storm |
| 256443 | 9.3 | 危険 | マイクロソフト | - | Microsoft Internet Explorer における任意のコードを実行される脆弱性 |
CWE-362
競合状態 |
CVE-2010-0489 | 2010-04-19 19:18 | 2010-03-30 | Show | GitHub Exploit DB Packet Storm |
| 256444 | 9.3 | 危険 | マイクロソフト | - | Microsoft Internet Explorer における任意のコードを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2010-0267 | 2010-04-19 19:18 | 2010-03-30 | Show | GitHub Exploit DB Packet Storm |
| 256445 | 10 | 危険 | アップル | - | Apple Mac OS X の xar におけるパッケージ署名の検証処理に関する脆弱性 |
CWE-DesignError
|
CVE-2010-0055 | 2010-04-16 16:59 | 2010-03-29 | Show | GitHub Exploit DB Packet Storm |
| 256446 | 0 | 注意 | アップル | - | Apple Mac OS X の Wiki サーバにおけるコンテンツを公開される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2010-0534 | 2010-04-16 16:58 | 2010-03-29 | Show | GitHub Exploit DB Packet Storm |
| 256447 | 5 | 警告 | アップル | - | Apple Mac OS X の Wiki サーバにおける重要な情報を取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2010-0523 | 2010-04-16 16:58 | 2010-03-29 | Show | GitHub Exploit DB Packet Storm |
| 256448 | 9 | 危険 | アップル | - | Apple Mac OS X のサーバ管理における管理者権限の処理に関する脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2010-0522 | 2010-04-16 16:58 | 2010-03-29 | Show | GitHub Exploit DB Packet Storm |
| 256449 | 5 | 警告 | アップル | - | Apple Mac OS X のサーバ管理における重要な情報を取得される脆弱性 |
CWE-287
不適切な認証 |
CVE-2010-0521 | 2010-04-16 16:58 | 2010-03-29 | Show | GitHub Exploit DB Packet Storm |
| 256450 | 4.3 | 警告 | アップル Ruby on Rails project |
- | Ruby on Rails の strip_tags 関数におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2009-4214 | 2010-04-16 16:58 | 2009-12-7 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 23, 2026, 4:08 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 258641 | 8.8 |
HIGH
Network |
loginizer | loginizer | Cross Site Request Forgery (CSRF) exists in the Blacklist and Whitelist IP Wizard in init.php in the Loginizer plugin before 1.3.6 for WordPress because the HTTP Referer header is not checked. |
CWE-352
Origin Validation Error |
CVE-2017-12651 | 2024-11-21 12:09 | 2017-08-8 | Show | GitHub Exploit DB Packet Storm |
| 258642 | 9.8 |
CRITICAL
Network |
loginizer | loginizer | SQL Injection exists in the Loginizer plugin before 1.3.6 for WordPress via the X-Forwarded-For HTTP header. |
CWE-89
SQL Injection |
CVE-2017-12650 | 2024-11-21 12:09 | 2017-08-8 | Show | GitHub Exploit DB Packet Storm |
| 258643 | 6.1 |
MEDIUM
Network |
liferay | liferay_portal | XSS exists in Liferay Portal before 7.0 CE GA4 via a crafted title or summary that is mishandled in the Web Content Display. |
CWE-79
Cross-site Scripting |
CVE-2017-12649 | 2024-11-21 12:09 | 2017-08-8 | Show | GitHub Exploit DB Packet Storm |
| 258644 | 6.1 |
MEDIUM
Network |
liferay | liferay_portal | XSS exists in Liferay Portal before 7.0 CE GA4 via a bookmark URL. |
CWE-79
Cross-site Scripting |
CVE-2017-12648 | 2024-11-21 12:09 | 2017-08-8 | Show | GitHub Exploit DB Packet Storm |
| 258645 | 6.1 |
MEDIUM
Network |
liferay | liferay_portal | XSS exists in Liferay Portal before 7.0 CE GA4 via a Knowledge Base article title. |
CWE-79
Cross-site Scripting |
CVE-2017-12647 | 2024-11-21 12:09 | 2017-08-8 | Show | GitHub Exploit DB Packet Storm |
| 258646 | 6.1 |
MEDIUM
Network |
liferay | liferay_portal | XSS exists in Liferay Portal before 7.0 CE GA4 via a login name, password, or e-mail address. |
CWE-79
Cross-site Scripting |
CVE-2017-12646 | 2024-11-21 12:09 | 2017-08-8 | Show | GitHub Exploit DB Packet Storm |
| 258647 | 6.1 |
MEDIUM
Network |
liferay | liferay_portal | XSS exists in Liferay Portal before 7.0 CE GA4 via an invalid portletId. |
CWE-79
Cross-site Scripting |
CVE-2017-12645 | 2024-11-21 12:09 | 2017-08-8 | Show | GitHub Exploit DB Packet Storm |
| 258648 | 9.8 |
CRITICAL
Network |
quest |
kace_asset_management_appliance kace_systems_management_appliance k1000_as_a_service |
SQL injection exists in Quest KACE Asset Management Appliance 6.4.120822 through 7.2, Systems Management Appliance 6.4.120822 through 7.2.101, and K1000 as a Service 7.0 through 7.2. |
CWE-89
SQL Injection |
CVE-2017-12567 | 2024-11-21 12:09 | 2017-08-8 | Show | GitHub Exploit DB Packet Storm |
| 258649 | 8.8 |
HIGH
Network |
imagemagick | imagemagick | ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadDCMImage in coders\dcm.c. |
CWE-772
Missing Release of Resource after Effective Lifetime |
CVE-2017-12644 | 2024-11-21 12:09 | 2017-08-8 | Show | GitHub Exploit DB Packet Storm |
| 258650 | 6.5 |
MEDIUM
Network |
imagemagick debian |
imagemagick debian_linux |
ImageMagick 7.0.6-1 has a memory exhaustion vulnerability in ReadOneJNGImage in coders\png.c. |
CWE-770
Allocation of Resources Without Limits or Throttling |
CVE-2017-12643 | 2024-11-21 12:09 | 2017-08-8 | Show | GitHub Exploit DB Packet Storm |