Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 7, 2026, 4:01 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 227891 | 7.5 | 危険 | phpcredo | - | PHCDownload の search.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2007-6670 | 2012-12-20 18:34 | 2008-01-7 | Show | GitHub Exploit DB Packet Storm |
| 227892 | 4.3 | 警告 | phpcredo | - | PHCDownload の search.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2007-6669 | 2012-12-20 18:34 | 2008-01-7 | Show | GitHub Exploit DB Packet Storm |
| 227893 | 7.5 | 危険 | Zenphoto | - | Zenphoto の rss.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2007-6666 | 2012-12-20 18:34 | 2008-01-4 | Show | GitHub Exploit DB Packet Storm |
| 227894 | 7.5 | 危険 | webportal | - | WebPortal CMS の index.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2007-6664 | 2012-12-20 18:34 | 2008-01-4 | Show | GitHub Exploit DB Packet Storm |
| 227895 | 7.5 | 危険 | pragmaticutopia | - | Joomla! 用の Pragmatic Utopia PU Arcade コンポーネントにおける SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2007-6663 | 2012-12-20 18:34 | 2008-01-4 | Show | GitHub Exploit DB Packet Storm |
| 227896 | 7.5 | 危険 | xcms | - | XCMS の cpie.php における静的コードを直接挿入する攻撃を実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2007-6652 | 2012-12-20 18:34 | 2008-01-4 | Show | GitHub Exploit DB Packet Storm |
| 227897 | 5 | 警告 | sanybee gallery | - | SanyBee Gallery の index.php におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2007-6648 | 2012-12-20 18:34 | 2008-01-4 | Show | GitHub Exploit DB Packet Storm |
| 227898 | 7.5 | 危険 | W-Agora | - | w-Agora の index.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2007-6647 | 2012-12-20 18:34 | 2008-01-4 | Show | GitHub Exploit DB Packet Storm |
| 227899 | 6.8 | 警告 | xml2owl | - | xml2owl の showCode.php における任意のコマンドを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2007-6632 | 2012-12-20 18:34 | 2008-01-3 | Show | GitHub Exploit DB Packet Storm |
| 227900 | 6.8 | 警告 | pnphpbb | - | PNphpBB2 の printview.php におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2007-6624 | 2012-12-20 18:34 | 2008-01-3 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 7, 2026, 4:22 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 224181 | 7.8 |
HIGH
Local |
imagemagick debian canonical opensuse |
imagemagick debian_linux ubuntu_linux leap |
ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of a misplaced assignment. |
CWE-787
Out-of-bounds Write |
CVE-2019-13304 | 2024-11-21 13:24 | 2019-07-5 | Show | GitHub Exploit DB Packet Storm |
| 224182 | 8.8 |
HIGH
Network |
imagemagick opensuse |
imagemagick leap |
ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read in MagickCore/composite.c in CompositeImage. |
CWE-125
Out-of-bounds Read |
CVE-2019-13303 | 2024-11-21 13:24 | 2019-07-5 | Show | GitHub Exploit DB Packet Storm |
| 224183 | 8.8 |
HIGH
Network |
imagemagick opensuse |
imagemagick leap |
ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read in MagickCore/fourier.c in ComplexImages. |
CWE-125
Out-of-bounds Read |
CVE-2019-13302 | 2024-11-21 13:24 | 2019-07-5 | Show | GitHub Exploit DB Packet Storm |
| 224184 | 6.5 |
MEDIUM
Network |
imagemagick debian canonical opensuse |
imagemagick debian_linux ubuntu_linux leap |
ImageMagick 7.0.8-50 Q16 has memory leaks in AcquireMagickMemory because of an AnnotateImage error. |
CWE-401
Missing Release of Memory after Effective Lifetime |
CVE-2019-13301 | 2024-11-21 13:24 | 2019-07-5 | Show | GitHub Exploit DB Packet Storm |
| 224185 | 8.8 |
HIGH
Network |
imagemagick debian canonical opensuse |
imagemagick debian_linux ubuntu_linux leap |
ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages because of mishandling columns. |
CWE-787
Out-of-bounds Write |
CVE-2019-13300 | 2024-11-21 13:24 | 2019-07-5 | Show | GitHub Exploit DB Packet Storm |
| 224186 | 8.8 |
HIGH
Network |
imagemagick opensuse |
imagemagick leap |
ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/pixel-accessor.h in GetPixelChannel. |
CWE-125
Out-of-bounds Read |
CVE-2019-13299 | 2024-11-21 13:24 | 2019-07-5 | Show | GitHub Exploit DB Packet Storm |
| 224187 | 8.8 |
HIGH
Network |
imagemagick opensuse |
imagemagick leap |
ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow at MagickCore/pixel-accessor.h in SetPixelViaPixelInfo because of a MagickCore/enhance.c error. |
CWE-787
Out-of-bounds Write |
CVE-2019-13298 | 2024-11-21 13:24 | 2019-07-5 | Show | GitHub Exploit DB Packet Storm |
| 224188 | 8.8 |
HIGH
Network |
imagemagick debian canonical opensuse |
imagemagick debian_linux ubuntu_linux leap |
ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because a height of zero is mishandled. |
CWE-125
Out-of-bounds Read |
CVE-2019-13297 | 2024-11-21 13:24 | 2019-07-5 | Show | GitHub Exploit DB Packet Storm |
| 224189 | 6.5 |
MEDIUM
Network |
imagemagick opensuse |
imagemagick leap |
ImageMagick 7.0.8-50 Q16 has direct memory leaks in AcquireMagickMemory because of an error in CLIListOperatorImages in MagickWand/operation.c for a NULL value. |
CWE-401
Missing Release of Memory after Effective Lifetime |
CVE-2019-13296 | 2024-11-21 13:24 | 2019-07-5 | Show | GitHub Exploit DB Packet Storm |
| 224190 | 8.8 |
HIGH
Network |
imagemagick debian opensuse canonical |
imagemagick debian_linux leap ubuntu_linux |
ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because a width of zero is mishandled. |
CWE-125
Out-of-bounds Read |
CVE-2019-13295 | 2024-11-21 13:24 | 2019-07-5 | Show | GitHub Exploit DB Packet Storm |