Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 8, 2026, 4:01 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 201511 | 9.6 |
緊急
Network |
マイクロソフト | - | Microsoft Office 2016 における任意のコードを実行される脆弱性 |
CWE-119
バッファエラー |
CVE-2016-7277 | 2016-12-21 17:41 | 2016-12-13 | Show | GitHub Exploit DB Packet Storm |
| 201512 | 5.5 |
警告
Local |
マイクロソフト | - | 複数の Microsoft Office 製品におけるプロセスメモリから重要な情報を取得される脆弱性 |
CWE-125
境界外読み取り |
CVE-2016-7276 | 2016-12-21 17:41 | 2016-12-13 | Show | GitHub Exploit DB Packet Storm |
| 201513 | 7.8 |
重要
Local |
マイクロソフト | - | 複数の Microsoft Office 製品における権限昇格の脆弱性 |
CWE-19 CWE-264 |
CVE-2016-7275 | 2016-12-21 17:41 | 2016-12-13 | Show | GitHub Exploit DB Packet Storm |
| 201514 | 6.5 |
警告
Network |
マイクロソフト | - | 複数の Microsoft Windows および Office 製品の GDI コンポーネントにおける重要な情報を取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2016-7257 | 2016-12-21 17:27 | 2016-12-13 | Show | GitHub Exploit DB Packet Storm |
| 201515 | 8.8 |
重要
Network |
マイクロソフト | - | Microsoft Windows 10 および Windows Server 2016 の Graphics コンポーネントにおける任意のコードを実行される脆弱性 |
CWE-19
データ処理 |
CVE-2016-7273 | 2016-12-21 17:24 | 2016-12-13 | Show | GitHub Exploit DB Packet Storm |
| 201516 | 7.5 |
重要
Network |
マイクロソフト | - | Microsoft Internet Explorer 11 および Microsoft Edge のスクリプトエンジンにおける任意のコードを実行される脆弱性 |
CWE-119
バッファエラー |
CVE-2016-7287 | 2016-12-21 17:21 | 2016-12-13 | Show | GitHub Exploit DB Packet Storm |
| 201517 | 4.3 |
警告
Network |
マイクロソフト | - | Microsoft Internet Explorer 10 および 11 におけるプロセスメモリから重要な情報を取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2016-7284 | 2016-12-21 17:21 | 2016-12-13 | Show | GitHub Exploit DB Packet Storm |
| 201518 | 8.8 |
重要
Network |
マイクロソフト | - | Microsoft Internet Explorer 9 から 11 における任意のコードを実行される脆弱性 |
CWE-119
バッファエラー |
CVE-2016-7283 | 2016-12-21 17:21 | 2016-12-13 | Show | GitHub Exploit DB Packet Storm |
| 201519 | 6.1 |
警告
Network |
マイクロソフト | - | Microsoft Internet Explorer 9 から 11 および Microsoft Edge におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2016-7282 | 2016-12-21 17:21 | 2016-12-13 | Show | GitHub Exploit DB Packet Storm |
| 201520 | 5.3 |
警告
Network |
マイクロソフト | - | Microsoft Internet Explorer 10 から 11 および Microsoft Edge の Web ワーカーの実装における同一生成元ポリシーを回避される脆弱性 |
CWE-254
セキュリティ機能 |
CVE-2016-7281 | 2016-12-21 17:21 | 2016-12-13 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 8, 2026, 4:09 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 289711 | - |
fedoraproject mozilla oracle |
fedora firefox solaris |
Mozilla Firefox before 29.0 on Android allows remote attackers to spoof the address bar via crafted JavaScript code that uses DOM events to prevent the reemergence of the actual address bar after scr… |
NVD-CWE-noinfo
|
CVE-2014-1527 | 2024-11-21 11:04 | 2014-04-30 | Show | GitHub Exploit DB Packet Storm | |
| 289712 | - |
mozilla canonical opensuse fedoraproject |
firefox seamonkey ubuntu_linux opensuse fedora |
The XrayWrapper implementation in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 allows user-assisted remote attackers to bypass intended access restrictions via a crafted web site that is vis… |
CWE-269
Improper Privilege Management |
CVE-2014-1526 | 2024-11-21 11:04 | 2014-04-30 | Show | GitHub Exploit DB Packet Storm | |
| 289713 | - |
mozilla canonical opensuse fedoraproject |
firefox seamonkey ubuntu_linux opensuse fedora |
The mozilla::dom::TextTrack::AddCue function in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 does not properly perform garbage collection for Text Track Manager variables, which allows remot… |
CWE-787 CWE-416 Out-of-bounds Write Use After Free |
CVE-2014-1525 | 2024-11-21 11:04 | 2014-04-30 | Show | GitHub Exploit DB Packet Storm | |
| 289714 | 8.8 |
HIGH
Network |
mozilla canonical debian redhat fedoraproject opensuse suse |
thunderbird firefox firefox_esr seamonkey ubuntu_linux debian_linux enterprise_linux_server enterprise_linux_server_eus enterprise_linux_workstation enterprise_linux_server… |
Use-after-free vulnerability in the nsGenericHTMLElement::GetWidthHeightForImage function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2… |
CWE-416
Use After Free |
CVE-2014-1531 | 2024-11-21 11:04 | 2014-04-30 | Show | GitHub Exploit DB Packet Storm |
| 289715 | 6.1 |
MEDIUM
Network |
mozilla fedoraproject canonical debian redhat opensuse suse |
thunderbird firefox firefox_esr seamonkey fedora ubuntu_linux debian_linux enterprise_linux_server enterprise_linux_server_eus enterprise_linux_workstation enterprise_li… |
The docshell implementation in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to trigger the loading of a URL wi… |
CWE-79
Cross-site Scripting |
CVE-2014-1530 | 2024-11-21 11:04 | 2014-04-30 | Show | GitHub Exploit DB Packet Storm |
| 289716 | 8.8 |
HIGH
Network |
mozilla canonical debian redhat fedoraproject opensuse suse |
thunderbird firefox firefox_esr seamonkey ubuntu_linux debian_linux enterprise_linux_server enterprise_linux_server_eus enterprise_linux_workstation enterprise_linux_server… |
The Web Notification API in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to bypass intended source-component r… |
CWE-269
Improper Privilege Management |
CVE-2014-1529 | 2024-11-21 11:04 | 2014-04-30 | Show | GitHub Exploit DB Packet Storm |
| 289717 | 9.8 |
CRITICAL
Network |
mozilla canonical debian redhat opensuse suse fedoraproject |
thunderbird firefox firefox_esr seamonkey ubuntu_linux debian_linux enterprise_linux_server enterprise_linux_server_eus enterprise_linux_workstation enterprise_linux_server… |
The nsXBLProtoImpl::InstallImplementation function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 does not properly check whether obj… |
CWE-120
Classic Buffer Overflow |
CVE-2014-1524 | 2024-11-21 11:04 | 2014-04-30 | Show | GitHub Exploit DB Packet Storm |
| 289718 | 6.5 |
MEDIUM
Network |
mozilla fedoraproject debian canonical redhat opensuse suse |
thunderbird firefox firefox_esr seamonkey fedora debian_linux ubuntu_linux enterprise_linux_server enterprise_linux_server_eus enterprise_linux_workstation enterprise_li… |
Heap-based buffer overflow in the read_u32 function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to cause a… |
CWE-787
Out-of-bounds Write |
CVE-2014-1523 | 2024-11-21 11:04 | 2014-04-30 | Show | GitHub Exploit DB Packet Storm |
| 289719 | - |
fedoraproject canonical opensuse mozilla |
fedora ubuntu_linux opensuse firefox seamonkey |
The mozilla::dom::OscillatorNodeEngine::ComputeCustom function in the Web Audio subsystem in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 allows remote attackers to execute arbitrary code or… |
CWE-125
Out-of-bounds Read |
CVE-2014-1522 | 2024-11-21 11:04 | 2014-04-30 | Show | GitHub Exploit DB Packet Storm | |
| 289720 | - |
mozilla fedoraproject |
firefox firefox_esr fedora |
maintenservice_installer.exe in the Maintenance Service Installer in Mozilla Firefox before 29.0 and Firefox ESR 24.x before 24.5 on Windows allows local users to gain privileges by placing a Trojan … |
CWE-269
Improper Privilege Management |
CVE-2014-1520 | 2024-11-21 11:04 | 2014-04-30 | Show | GitHub Exploit DB Packet Storm |