Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
257981	9.3	危険	リアルネットワークス	-	RealNetworks RealPlayer および RealPlayer Enterprise における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-2948	2011-09-9 10:05	2011-08-16	Show	GitHub Exploit DB Packet Storm

257982	3.7	注意	オラクル	-	Oracle VM VirtualBox における Guest Additions for Windows の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-2300	2011-09-9 09:57	2011-07-19	Show	GitHub Exploit DB Packet Storm

257983	6.2	警告	オラクル	-	Oracle VM VirtualBox の脆弱性	CWE-noinfo 情報不足	CVE-2011-2305	2011-09-9 09:54	2011-07-19	Show	GitHub Exploit DB Packet Storm

257984	3.5	注意	オラクル	-	Oracle PeopleSoft Products の PeopleSoft Enterprise PeopleTools コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-2274	2011-09-9 09:52	2011-07-19	Show	GitHub Exploit DB Packet Storm

257985	3.5	注意	オラクル	-	Oracle PeopleSoft Products の PeopleSoft Enterprise PeopleTools コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-2282	2011-09-9 09:51	2011-07-19	Show	GitHub Exploit DB Packet Storm

257986	4	警告	オラクル	-	Oracle PeopleSoft Products の PeopleSoft Enterprise PeopleTools コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-2280	2011-09-9 09:50	2011-07-19	Show	GitHub Exploit DB Packet Storm

257987	4.3	警告	オラクル	-	Oracle PeopleSoft Products の PeopleSoft Enterprise PeopleTools コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-2275	2011-09-9 09:49	2011-07-19	Show	GitHub Exploit DB Packet Storm

257988	4.3	警告	リアルネットワークス	-	RealNetworks RealPlayer の ActiveX コントロールにおけるクロスゾーンスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-2947	2011-09-8 13:36	2011-08-16	Show	GitHub Exploit DB Packet Storm

257989	10	危険	リアルネットワークス	-	RealNetworks RealPlayer および RealPlayer Enterprise の ActiveX コントロールにおける任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2011-2946	2011-09-8 13:35	2011-08-16	Show	GitHub Exploit DB Packet Storm

257990	9.3	危険	リアルネットワークス	-	RealNetworks RealPlayer におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-2945	2011-09-8 13:34	2011-08-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 30, 2026, 4:22 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
266601	6.5	MEDIUM Network	graphicsmagick	graphicsmagick	In GraphicsMagick 1.3.26, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c.	CWE-772 Missing Release of Resource after Effective Lifetime	CVE-2017-13648	2024-11-21 12:11	2017-08-24	Show	GitHub Exploit DB Packet Storm

266602	8.8	HIGH Network	graphicsmagick	graphicsmagick	In GraphicsMagick 1.3.26, an allocation failure vulnerability was found in the function ReadMNGImage in coders/png.c when a small MNG file has a MEND chunk with a large length value.	CWE-20 Improper Input Validation	CVE-2017-13147	2024-11-21 12:11	2017-08-24	Show	GitHub Exploit DB Packet Storm

266603	6.1	MEDIUM Network	qodeinteractive	bridge	DOM based Cross-site scripting (XSS) vulnerability in the Bridge theme before 11.2 for WordPress allows remote attackers to inject arbitrary JavaScript.	CWE-79 Cross-site Scripting	CVE-2017-13138	2024-11-21 12:11	2017-08-23	Show	GitHub Exploit DB Packet Storm

266604	9.8	CRITICAL Network	formcrafts	formcraft	The FormCraft Basic plugin 1.0.5 for WordPress has SQL injection in the id parameter to form.php.	CWE-89 SQL Injection	CVE-2017-13137	2024-11-21 12:11	2017-08-23	Show	GitHub Exploit DB Packet Storm

266605	8.8	HIGH Network	imagemagick	imagemagick	In ImageMagick before 6.9.8-5 and 7.x before 7.0.5-6, there is a memory leak in the ReadMATImage function in coders/mat.c.	CWE-772 Missing Release of Resource after Effective Lifetime	CVE-2017-13146	2024-11-21 12:11	2017-08-23	Show	GitHub Exploit DB Packet Storm

266606	6.5	MEDIUM Network	imagemagick debian canonical	imagemagick debian_linux ubuntu_linux	In ImageMagick before 6.9.8-8 and 7.x before 7.0.5-9, the ReadJP2Image function in coders/jp2.c does not properly validate the channel geometry, leading to a crash.	CWE-20 Improper Input Validation	CVE-2017-13145	2024-11-21 12:11	2017-08-23	Show	GitHub Exploit DB Packet Storm

266607	6.5	MEDIUM Network	imagemagick	imagemagick	In ImageMagick before 6.9.7-10, there is a crash (rather than a "width or height exceeds limit" error report) if the image dimensions are too large, as demonstrated by use of the mpc coder.	CWE-20 Improper Input Validation	CVE-2017-13144	2024-11-21 12:11	2017-08-23	Show	GitHub Exploit DB Packet Storm

266608	7.5	HIGH Network	imagemagick	imagemagick	In ImageMagick before 6.9.7-6 and 7.x before 7.0.4-6, the ReadMATImage function in coders/mat.c uses uninitialized data, which might allow remote attackers to obtain sensitive information from proces…	CWE-200 Information Exposure	CVE-2017-13143	2024-11-21 12:11	2017-08-23	Show	GitHub Exploit DB Packet Storm

266609	6.5	MEDIUM Network	imagemagick	imagemagick	In ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1, a crafted PNG file could trigger a crash because there was an insufficient check for short files.	CWE-754 Improper Check for Unusual or Exceptional Conditions	CVE-2017-13142	2024-11-21 12:11	2017-08-23	Show	GitHub Exploit DB Packet Storm

266610	6.5	MEDIUM Network	imagemagick	imagemagick	In ImageMagick before 6.9.9-4 and 7.x before 7.0.6-4, a crafted file could trigger a memory leak in ReadOnePNGImage in coders/png.c.	CWE-772 Missing Release of Resource after Effective Lifetime	CVE-2017-13141	2024-11-21 12:11	2017-08-23	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed