|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
Update Date":May 5, 2026, 2 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 252531 | 9.3 | 危険 | アドビシステムズ | - | Adobe Shockwave Player の TextXtra.x32 におけるヒープベースのバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2010-2582 | 2010-11-17 16:49 | 2010-10-28 | Show | GitHub Exploit DB Packet Storm |
| 252532 | 9.3 | 危険 | アドビシステムズ | - | Adobe Shockwave Player の dirapi.dll における任意のコードを実行される脆弱性 |
CWE-119
バッファエラー |
CVE-2010-2581 | 2010-11-17 16:48 | 2010-10-28 | Show | GitHub Exploit DB Packet Storm |
| 252533 | 9.3 | 危険 | アドビシステムズ | - | Adobe Shockwave Player に脆弱性 |
CWE-119
バッファエラー |
CVE-2010-3653 | 2010-11-16 14:49 | 2010-10-25 | Show | GitHub Exploit DB Packet Storm |
| 252534 | 7.5 | 危険 | 富士通 | - | Interstage Application Server におけるバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2007-6258 | 2010-11-16 14:48 | 2008-02-19 | Show | GitHub Exploit DB Packet Storm |
| 252535 | 6.5 | 警告 | アップル サイバートラスト株式会社 MySQL AB ターボリナックス レッドハット |
- | MySQL におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2010-1848 | 2010-11-15 16:20 | 2010-05-5 | Show | GitHub Exploit DB Packet Storm |
| 252536 | 5 | 警告 | サイバートラスト株式会社 Zabbix |
- | Zabbix サーバの trapper/trapper.c 内にある process_trap 関数におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-119
バッファエラー |
CVE-2009-4500 | 2010-11-15 15:41 | 2009-07-21 | Show | GitHub Exploit DB Packet Storm |
| 252537 | 9.3 | 危険 | サイバートラスト株式会社 Zabbix |
- | Zabbix Agent の net.c 内にある NET_TCP_LISTEN 関数における任意のコマンドを実行される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2009-4502 | 2010-11-15 15:41 | 2009-09-10 | Show | GitHub Exploit DB Packet Storm |
| 252538 | 5 | 警告 | サイバートラスト株式会社 Zabbix |
- | Zabbix サーバの zbx_get_next_field 関数におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-119
バッファエラー |
CVE-2009-4501 | 2010-11-15 15:40 | 2009-11-25 | Show | GitHub Exploit DB Packet Storm |
| 252539 | 7.5 | 危険 | サイバートラスト株式会社 Zabbix |
- | Zabbix サーバの get_history_lastid 関数における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2009-4499 | 2010-11-15 15:40 | 2009-09-10 | Show | GitHub Exploit DB Packet Storm |
| 252540 | 6.8 | 警告 | サイバートラスト株式会社 Zabbix |
- | Zabbix サーバの node_process_command 関数における任意のコマンドを実行される脆弱性 |
CWE-78
OSコマンド・インジェクション |
CVE-2009-4498 | 2010-11-15 15:40 | 2009-09-10 | Show | GitHub Exploit DB Packet Storm |
Update Date:May 5, 2026, 4:51 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 213791 | 6.1 |
MEDIUM
Network |
rukovoditel | rukovoditel | Rukovoditel before 2.4.1 allows XSS. |
CWE-79
Cross-site Scripting |
CVE-2019-7400 | 2024-11-21 13:48 | 2019-02-5 | Show | GitHub Exploit DB Packet Storm |
| 213792 | 7.5 |
HIGH
Network |
imagemagick opensuse debian canonical |
imagemagick leap debian_linux ubuntu_linux |
In ImageMagick before 7.0.8-25, a memory leak exists in WriteDIBImage in coders/dib.c. |
CWE-401
Missing Release of Memory after Effective Lifetime |
CVE-2019-7398 | 2024-11-21 13:48 | 2019-02-5 | Show | GitHub Exploit DB Packet Storm |
| 213793 | 7.5 |
HIGH
Network |
imagemagick graphicsmagick opensuse debian canonical |
imagemagick graphicsmagick leap debian_linux ubuntu_linux |
In ImageMagick before 7.0.8-25 and GraphicsMagick through 1.3.31, several memory leaks exist in WritePDFImage in coders/pdf.c. |
CWE-401
Missing Release of Memory after Effective Lifetime |
CVE-2019-7397 | 2024-11-21 13:48 | 2019-02-5 | Show | GitHub Exploit DB Packet Storm |
| 213794 | 7.5 |
HIGH
Network |
imagemagick opensuse debian canonical |
imagemagick leap debian_linux ubuntu_linux |
In ImageMagick before 7.0.8-25, a memory leak exists in ReadSIXELImage in coders/sixel.c. |
CWE-401
Missing Release of Memory after Effective Lifetime |
CVE-2019-7396 | 2024-11-21 13:48 | 2019-02-5 | Show | GitHub Exploit DB Packet Storm |
| 213795 | 7.5 |
HIGH
Network |
imagemagick opensuse debian canonical |
imagemagick leap debian_linux ubuntu_linux |
In ImageMagick before 7.0.8-25, a memory leak exists in WritePSDChannel in coders/psd.c. |
CWE-401
Missing Release of Memory after Effective Lifetime |
CVE-2019-7395 | 2024-11-21 13:48 | 2019-02-5 | Show | GitHub Exploit DB Packet Storm |
| 213796 | 8.6 |
HIGH
Network |
dlink | dir-823g_firmware | An issue was discovered in /bin/goahead on D-Link DIR-823G devices with firmware 1.02B03. There is incorrect access control allowing remote attackers to hijack the DNS service configuration of all cl… |
CWE-306
Missing Authentication for Critical Function |
CVE-2019-7390 | 2024-11-21 13:48 | 2019-02-5 | Show | GitHub Exploit DB Packet Storm |
| 213797 | 7.5 |
HIGH
Network |
dlink | dir-823g_firmware | An issue was discovered in /bin/goahead on D-Link DIR-823G devices with the firmware 1.02B03. There is incorrect access control allowing remote attackers to reset the router without authentication vi… |
CWE-306
Missing Authentication for Critical Function |
CVE-2019-7389 | 2024-11-21 13:48 | 2019-02-5 | Show | GitHub Exploit DB Packet Storm |
| 213798 | 7.5 |
HIGH
Network |
dlink | dir-823g_firmware | An issue was discovered in /bin/goahead on D-Link DIR-823G devices with firmware 1.02B03. There is incorrect access control allowing remote attackers to get sensitive information (such as MAC address… |
CWE-200
Information Exposure |
CVE-2019-7388 | 2024-11-21 13:48 | 2019-02-5 | Show | GitHub Exploit DB Packet Storm |
| 213799 | 6.5 |
MEDIUM
Network |
systrome |
isg-600c_firmware isg-600h_firmware isg-800w_firmware |
A local file inclusion vulnerability exists in the web interface of Systrome Cumilon ISG-600C, ISG-600H, and ISG-800W 1.1-R2.1_TRUNK-20180914.bin devices. When the export function is called from syst… |
CWE-22
Path Traversal |
CVE-2019-7387 | 2024-11-21 13:48 | 2019-02-5 | Show | GitHub Exploit DB Packet Storm |
| 213800 | 6.1 |
MEDIUM
Network |
zoneminder | zoneminder | Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, as the view 'state' (aka Run State) (state.php) does no input validation to the value supplied to the 'New State' (aka ne… |
CWE-79
Cross-site Scripting |
CVE-2019-7352 | 2024-11-21 13:48 | 2019-02-5 | Show | GitHub Exploit DB Packet Storm |