Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
205631 5.4 警告
Network
Mozilla Foundation - Mozilla Firefox の browser/components/extensions/ext-tabs.js におけるユニバーサルクロスサイトスクリプティング攻撃を実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-2817 2016-05-6 18:04 2016-04-26 Show GitHub Exploit DB Packet Storm
205632 6.5 警告
Network
Mozilla Foundation - Mozilla Firefox における Content Security Policy 保護メカニズムを回避される脆弱性 CWE-Other
その他
CVE-2016-2816 2016-05-6 18:04 2016-04-26 Show GitHub Exploit DB Packet Storm
205633 8.8 重要
Network
Mozilla Foundation - Mozilla Firefox の libstagefright におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-2814 2016-05-6 18:04 2016-04-26 Show GitHub Exploit DB Packet Storm
205634 6.5 警告
Network
Mozilla Foundation - Android 上で稼動する Mozilla Firefox におけるデバイスの物理環境に関する重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-2813 2016-05-6 18:04 2016-04-26 Show GitHub Exploit DB Packet Storm
205635 7.5 重要
Network
Mozilla Foundation - Mozilla Firefox の Service Worker サブシステムの ServiceWorkerManager クラスにおける任意のコードを実行される脆弱性 CWE-362
競合状態
CVE-2016-2812 2016-05-6 18:04 2016-04-26 Show GitHub Exploit DB Packet Storm
205636 8.8 重要
Network
Mozilla Foundation - Mozilla Firefox の Service Worker サブシステムの ServiceWorkerInfo クラスにおける任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2016-2811 2016-05-6 18:04 2016-04-26 Show GitHub Exploit DB Packet Storm
205637 5 警告
Local
Mozilla Foundation - Android 上で稼動する Mozilla Firefox における署名によるアクセス要求を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-2810 2016-05-6 18:03 2016-04-26 Show GitHub Exploit DB Packet Storm
205638 5.5 警告
Local
Mozilla Foundation - Windows 上で稼動する Mozilla Firefox の Maintenance Service アップデータにおける任意のファイルを削除される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-2809 2016-05-6 18:03 2016-04-26 Show GitHub Exploit DB Packet Storm
205639 7.5 重要
Network
Mozilla Foundation - Mozilla Firefox の JavaScript エンジンの watch の実装における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2016-2808 2016-05-6 18:03 2016-04-26 Show GitHub Exploit DB Packet Storm
205640 8.8 重要
Network
Mozilla Foundation - Mozilla Firefox のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2016-2807 2016-05-6 18:03 2016-04-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
352051 - zen-cart zen_cart Zen Cart before 1.2.7 does not protect the admin/includes directory, which allows remote attackers to cause unknown impact via unspecified vectors, probably direct requests. CWE-264
Permissions, Privileges, and Access Controls
CVE-2006-0697 2013-01-3 14:00 2006-02-15 Show GitHub Exploit DB Packet Storm
352052 - e107 e107 Incomplete blacklist vulnerability in usersettings.php in e107 0.7.20 and earlier allows remote attackers to conduct SQL injection attacks via the loginname parameter. NVD-CWE-Other
CVE-2010-2098 2012-12-13 13:00 2010-05-28 Show GitHub Exploit DB Packet Storm
352053 - e107 e107 Per: http://cwe.mitre.org/data/definitions/184.html 'CWE-184: Incomplete Blacklist' NVD-CWE-Other
CVE-2010-2098 2012-12-13 13:00 2010-05-28 Show GitHub Exploit DB Packet Storm
352054 - kerio personal_firewall
serverfirewall
The FWDRV driver in Kerio Personal Firewall 4.2 and Server Firewall 1.1.1 allows local users to cause a denial of service (crash) by setting the PAGE_NOACCESS or PAGE_GUARD protection on the Page Env… NVD-CWE-Other
CVE-2005-3286 2012-12-13 11:43 2005-10-23 Show GitHub Exploit DB Packet Storm
352055 - freebsd freebsd sys/nfsclient/nfs_vfsops.c in the NFS client in the kernel in FreeBSD 7.2 through 8.1-PRERELEASE, when vfs.usermount is enabled, does not validate the length of a certain fhsize parameter, which allo… CWE-20
 Improper Input Validation 
CVE-2010-2020 2012-11-6 13:41 2010-05-29 Show GitHub Exploit DB Packet Storm
352056 - tiki tikiwiki_cms\/groupware TikiWiki before 1.8.5 does not properly validate files that have been uploaded to the temp directory, which could allow remote attackers to upload and execute arbitrary PHP scripts, a different vulne… CWE-20
 Improper Input Validation 
CVE-2005-0200 2012-10-24 13:00 2005-05-2 Show GitHub Exploit DB Packet Storm
352057 - tiki tikiwiki_cms\/groupware Cross-site scripting (XSS) vulnerability in TikiWiki before 1.9.1.1 allows remote attackers to inject arbitrary web script or HTML via unknown vectors. CWE-79
Cross-site Scripting
CVE-2005-3283 2012-10-24 13:00 2005-10-23 Show GitHub Exploit DB Packet Storm
352058 - oracle database_server Unspecified vulnerability in the XML DB component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to affect confidentiality via unknown vectors. NVD-CWE-noinfo
CVE-2010-0851 2012-10-23 12:20 2010-04-14 Show GitHub Exploit DB Packet Storm
352059 - oracle database_server Unspecified vulnerability in the XML DB component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to affect confidentiality and integrity via unknown v… NVD-CWE-noinfo
CVE-2010-0852 2012-10-23 12:20 2010-04-14 Show GitHub Exploit DB Packet Storm
352060 - oracle fusion_middleware
database_server
Unspecified vulnerability in the Oracle Internet Directory component in Oracle Database 9.2.0.8, 9.2.0.8, and DV; and Oracle Fusion Middleware 10.1.2.3 and 10.1.4.0.1; allows remote attackers to affe… NVD-CWE-noinfo
CVE-2010-0853 2012-10-23 12:20 2010-04-14 Show GitHub Exploit DB Packet Storm