Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
257311	10	危険	マイクロソフト	-	Microsoft Windows の License Logging Server (llssrv.exe) における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2009-2523	2010-01-4 15:24	2009-11-10	Show	GitHub Exploit DB Packet Storm

257312	9.3	危険	マイクロソフト	-	Microsoft Windows の Web Services on Devices API (WSDAPI) における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-2512	2010-01-4 15:23	2009-11-10	Show	GitHub Exploit DB Packet Storm

257313	10	危険	アップル VMware サン・マイクロシステムズ	-	Sun Java SE の Provider クラスにおける詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2009-2722	2010-01-4 14:56	2009-08-10	Show	GitHub Exploit DB Packet Storm

257314	10	危険	アップル VMware サン・マイクロシステムズ	-	Sun Java SE の Provider クラスにおける詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2009-2723	2010-01-4 14:55	2009-08-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
251631	5.5	MEDIUM Local	imagemagick	imagemagick	An issue was discovered in ImageMagick 6.9.7. A specially crafted xcf file could lead to a NULL pointer dereference.	CWE-476 NULL Pointer Dereference	CVE-2017-6501	2024-11-21 12:29	2017-03-6	Show	GitHub Exploit DB Packet Storm

251632	5.5	MEDIUM Local	imagemagick debian	imagemagick debian_linux	An issue was discovered in ImageMagick 6.9.7. A specially crafted sun file triggers a heap-based buffer over-read.	CWE-125 Out-of-bounds Read	CVE-2017-6500	2024-11-21 12:29	2017-03-6	Show	GitHub Exploit DB Packet Storm

251633	5.5	MEDIUM Local	imagemagick debian	imagemagick debian_linux	An issue was discovered in Magick++ in ImageMagick 6.9.7. A specially crafted file creating a nested exception could lead to a memory leak (thus, a DoS).	CWE-772 Missing Release of Resource after Effective Lifetime	CVE-2017-6499	2024-11-21 12:29	2017-03-6	Show	GitHub Exploit DB Packet Storm

251634	5.5	MEDIUM Local	imagemagick debian	imagemagick debian_linux	An issue was discovered in ImageMagick 6.9.7. Incorrect TGA files could trigger assertion failures, thus leading to DoS.	CWE-20 Improper Input Validation	CVE-2017-6498	2024-11-21 12:29	2017-03-6	Show	GitHub Exploit DB Packet Storm

251635	7.5	HIGH Network	imagemagick	imagemagick	An issue was discovered in ImageMagick 6.9.7. A specially crafted psd file could lead to a NULL pointer dereference (thus, a DoS).	CWE-476 NULL Pointer Dereference	CVE-2017-6497	2024-11-21 12:29	2017-03-6	Show	GitHub Exploit DB Packet Storm

251636	9.8	CRITICAL Network	flexense	sysgauge	An issue was discovered in SysGauge 1.5.18. A buffer overflow vulnerability in SMTP connection verification leads to arbitrary code execution. The attack vector is a crafted SMTP daemon that sends a …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-6416	2024-11-21 12:29	2017-03-6	Show	GitHub Exploit DB Packet Storm

251637	8.1	HIGH Network	wepresent	wipg-1500_firmware	The WePresent WiPG-1500 device with firmware 1.0.3.7 has a manufacturer account that has a hardcoded username / password. Once the device is set to DEBUG mode, an attacker can connect to the device u…	CWE-798 Use of Hard-coded Credentials	CVE-2017-6351	2024-11-21 12:29	2017-03-6	Show	GitHub Exploit DB Packet Storm

251638	6.1	MEDIUM Network	dotclear	dotclear	XSS was discovered in Dotclear v2.11.2, affecting admin/blogs.php and admin/users.php with the sortby and order parameters.	CWE-79 Cross-site Scripting	CVE-2017-6446	2024-11-21 12:29	2017-03-6	Show	GitHub Exploit DB Packet Storm

251639	7.2	HIGH Network	admidio	admidio	SQL Injection was discovered in adm_program/modules/dates/dates_function.php in Admidio 3.2.5. The POST parameter dat_cat_id is concatenated into a SQL query without any input validation/sanitization.	CWE-89 SQL Injection	CVE-2017-6492	2024-11-21 12:29	2017-03-6	Show	GitHub Exploit DB Packet Storm

251640	6.1	MEDIUM Network	epesi	epesi	Multiple Cross-Site Scripting (XSS) issues were discovered in EPESI 1.8.1.1. The vulnerabilities exist due to insufficient filtration of user-supplied data (tooltip_id, callback, args, cid) passed to…	CWE-79 Cross-site Scripting	CVE-2017-6491	2024-11-21 12:29	2017-03-6	Show	GitHub Exploit DB Packet Storm