Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 7, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 203801 | 9.8 |
緊急
Network |
- | Android の libjhead で使用される Matthias Wandel jhead の exif.c における任意のコードを実行される脆弱性 |
CWE-119
バッファエラー |
CVE-2016-3822 | 2016-08-10 16:53 | 2016-08-1 | Show | GitHub Exploit DB Packet Storm | |
| 203802 | 7.3 |
重要
Network |
- | Android のフレームワーク API におけるインテントフィルターのプライオリティを高くされる脆弱性 |
CWE-119
バッファエラー |
CVE-2016-2497 | 2016-08-10 16:53 | 2016-08-1 | Show | GitHub Exploit DB Packet Storm | |
| 203803 | 9.8 |
緊急
Network |
- | Nexus 7 (2013) デバイス上で稼動する Android の Qualcomm Wi-Fi ドライバにおけるバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2014-9902 | 2016-08-10 16:53 | 2016-08-1 | Show | GitHub Exploit DB Packet Storm | |
| 203804 | 7.5 |
重要
Network |
- | Nexus 7 (2013) デバイス上で稼動する Android の Qualcomm Wi-Fi ドライバにおけるサービス運用妨害 (DoS) の脆弱性 |
CWE-Other
その他 |
CVE-2014-9901 | 2016-08-10 16:53 | 2016-08-1 | Show | GitHub Exploit DB Packet Storm | |
| 203805 | 9.8 |
緊急
Network |
The PHP Group | - | PHP の ext/spl/spl_dllist.c の SplDoublyLinkedList::offsetSet 関数におけるメモリ二重解放の脆弱性 |
CWE-Other
その他 |
CVE-2016-3132 | 2016-08-10 14:56 | 2016-04-28 | Show | GitHub Exploit DB Packet Storm |
| 203806 | 9.8 |
緊急
Network |
The PHP Group | - | PHP の zip エクステンションの php_zip.c における整数オーバーフローの脆弱性 |
CWE-Other
その他 |
CVE-2016-3078 | 2016-08-10 14:43 | 2016-04-28 | Show | GitHub Exploit DB Packet Storm |
| 203807 | 5.4 |
警告
Network |
Apache Software Foundation | - | Apache ActiveMQ の管理 Web コンソールにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2016-0782 | 2016-08-10 14:25 | 2016-03-14 | Show | GitHub Exploit DB Packet Storm |
| 203808 | 5 | 警告 | OpenSSL Project オラクル |
- | OpenSSL の d1_pkt.c の dtls1_buffer_record 関数におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-119
バッファエラー |
CVE-2015-0206 | 2016-08-9 18:16 | 2015-01-7 | Show | GitHub Exploit DB Packet Storm |
| 203809 | 5 | 警告 | アップル 日本電気 OpenSSL Project ヒューレット・パッカード オラクル |
- | OpenSSL における指紋ベースの認証ブラックリスト保護メカニズムを破られる脆弱性 |
CWE-310
暗号の問題 |
CVE-2014-8275 | 2016-08-9 18:15 | 2014-12-20 | Show | GitHub Exploit DB Packet Storm |
| 203810 | 5 | 警告 | アップル OpenSSL Project ヒューレット・パッカード オラクル |
- | OpenSSL の s3_clnt.c 内の ssl3_get_key_exchange 関数における ECDHE-to-ECDH ダウングレード攻撃を実行される脆弱性 |
CWE-310
暗号の問題 |
CVE-2014-3572 | 2016-08-9 18:14 | 2014-10-24 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 7, 2026, 4:13 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 289841 | - |
mozilla oracle canonical suse opensuse |
seamonkey firefox solaris ubuntu_linux linux_enterprise_desktop linux_enterprise_server opensuse linux_enterprise_software_development_kit |
The Content Security Policy (CSP) implementation in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 operates on XSLT stylesheets according to style-src directives instead of script-src directiv… |
NVD-CWE-noinfo
|
CVE-2014-1485 | 2024-11-21 11:04 | 2014-02-6 | Show | GitHub Exploit DB Packet Storm | |
| 289842 | - |
suse mozilla opensuse_project opensuse oracle |
linux_enterprise_desktop linux_enterprise_server linux_enterprise_software_development_kit firefox opensuse solaris |
Mozilla Firefox before 27.0 on Android 4.2 and earlier creates system-log entries containing profile paths, which allows attackers to obtain sensitive information via a crafted application. |
CWE-200
Information Exposure |
CVE-2014-1484 | 2024-11-21 11:04 | 2014-02-6 | Show | GitHub Exploit DB Packet Storm | |
| 289843 | - |
oracle canonical mozilla suse opensuse |
solaris ubuntu_linux seamonkey firefox linux_enterprise_desktop linux_enterprise_server opensuse suse_linux_enterprise_software_development_kit |
Mozilla Firefox before 27.0 and SeaMonkey before 2.24 allow remote attackers to bypass the Same Origin Policy and obtain sensitive information by using an IFRAME element in conjunction with certain t… |
CWE-1021
Improper Restriction of Rendered UI Layers or Frames |
CVE-2014-1483 | 2024-11-21 11:04 | 2014-02-6 | Show | GitHub Exploit DB Packet Storm | |
| 289844 | - |
suse opensuse oracle canonical mozilla |
linux_enterprise_desktop linux_enterprise_server opensuse linux_enterprise_software_development_kit solaris ubuntu_linux seamonkey firefox |
The file-download implementation in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 does not properly restrict the timing of button selections, which allows remote attackers to conduct clickjac… |
CWE-1021
Improper Restriction of Rendered UI Layers or Frames |
CVE-2014-1480 | 2024-11-21 11:04 | 2014-02-6 | Show | GitHub Exploit DB Packet Storm | |
| 289845 | 7.5 |
HIGH
Network |
mozilla fedoraproject opensuse suse canonical debian redhat |
seamonkey firefox firefox_esr thunderbird fedora opensuse suse_linux_enterprise_software_development_kit suse_linux_enterprise_desktop suse_linux_enterprise_server ubuntu_l… |
The Web workers implementation in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 allows remote attackers to bypass the Same Origin Polic… |
CWE-346
Origin Validation Error |
CVE-2014-1487 | 2024-11-21 11:04 | 2014-02-6 | Show | GitHub Exploit DB Packet Storm |
| 289846 | 9.8 |
CRITICAL
Network |
mozilla fedoraproject opensuse suse debian canonical redhat |
seamonkey firefox firefox_esr thunderbird fedora opensuse suse_linux_enterprise_software_development_kit suse_linux_enterprise_desktop suse_linux_enterprise_server debian_l… |
Use-after-free vulnerability in the imgRequestProxy function in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 allows remote attackers t… |
CWE-416
Use After Free |
CVE-2014-1486 | 2024-11-21 11:04 | 2014-02-6 | Show | GitHub Exploit DB Packet Storm |
| 289847 | 8.8 |
HIGH
Network |
mozilla canonical debian redhat fedoraproject opensuse suse |
seamonkey firefox firefox_esr thunderbird ubuntu_linux debian_linux enterprise_linux_server enterprise_linux_server_eus enterprise_linux_workstation enterprise_linux_server… |
RasterImage.cpp in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 does not prevent access to discarded data, which allows remote attacke… |
CWE-787
Out-of-bounds Write |
CVE-2014-1482 | 2024-11-21 11:04 | 2014-02-6 | Show | GitHub Exploit DB Packet Storm |
| 289848 | 7.5 |
HIGH
Network |
mozilla fedoraproject opensuse suse redhat debian canonical |
seamonkey firefox firefox_esr thunderbird fedora opensuse suse_linux_enterprise_software_development_kit suse_linux_enterprise_desktop suse_linux_enterprise_server enterpri… |
Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 allow remote attackers to bypass intended restrictions on window objects by leveraging in… |
NVD-CWE-noinfo
|
CVE-2014-1481 | 2024-11-21 11:04 | 2014-02-6 | Show | GitHub Exploit DB Packet Storm |
| 289849 | 7.5 |
HIGH
Network |
mozilla canonical debian redhat fedoraproject opensuse suse |
seamonkey firefox firefox_esr thunderbird ubuntu_linux debian_linux enterprise_linux_server enterprise_linux_server_eus enterprise_linux_workstation enterprise_linux_server… |
The System Only Wrapper (SOW) implementation in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 does not prevent certain cloning operatio… |
NVD-CWE-noinfo
|
CVE-2014-1479 | 2024-11-21 11:04 | 2014-02-6 | Show | GitHub Exploit DB Packet Storm |
| 289850 | - |
mozilla canonical opensuse oracle |
seamonkey firefox ubuntu_linux opensuse solaris |
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 allow remote attackers to cause a denial of service (memory corruption and applicat… |
CWE-787
Out-of-bounds Write |
CVE-2014-1478 | 2024-11-21 11:04 | 2014-02-6 | Show | GitHub Exploit DB Packet Storm |