Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 31, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 218231 | 6.5 | 警告 | シスコシステムズ | - | Cisco Unity Connection の Web フレームワークにおける SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2014-3336 | 2014-08-13 16:16 | 2014-08-11 | Show | GitHub Exploit DB Packet Storm |
| 218232 | 9 | 危険 | シスコシステムズ | - | Cisco Unity Connection のサーバにおける特権的アクセス権を取得される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2014-3333 | 2014-08-13 16:15 | 2014-08-7 | Show | GitHub Exploit DB Packet Storm |
| 218233 | 4 | 警告 | シスコシステムズ | - | Cisco Unified Communications Manager における検知されない同時ログインを確立される脆弱性 |
CWE-noinfo
情報不足 |
CVE-2014-3332 | 2014-08-13 16:15 | 2014-08-7 | Show | GitHub Exploit DB Packet Storm |
| 218234 | 5 | 警告 | シスコシステムズ | - | Nexus 9000 スイッチ上で稼動する Cisco NX-OS におけるアクセス制限を回避される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2014-3330 | 2014-08-13 16:14 | 2014-08-5 | Show | GitHub Exploit DB Packet Storm |
| 218235 | 7.8 | 危険 | シスコシステムズ | - | Cisco IOS および IOS XE の EnergyWise モジュールにおけるサービス運用妨害 (DoS) の脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2014-3327 | 2014-08-13 16:14 | 2014-08-6 | Show | GitHub Exploit DB Packet Storm |
| 218236 | 4.6 | 警告 | ヒューレット・パッカード | - | HP Application Lifecycle Management における権限を取得される脆弱性 |
CWE-noinfo
情報不足 |
CVE-2014-2631 | 2014-08-13 16:12 | 2014-08-5 | Show | GitHub Exploit DB Packet Storm |
| 218237 | 4.4 | 警告 | ヒューレット・パッカード | - | HP Operations Agent における権限を取得される脆弱性 |
CWE-noinfo
情報不足 |
CVE-2014-2630 | 2014-08-13 16:12 | 2014-08-7 | Show | GitHub Exploit DB Packet Storm |
| 218238 | 4 | 警告 | ヒューレット・パッカード | - | HP Enterprise Maps における重要な情報を取得される脆弱性 |
CWE-noinfo
情報不足 |
CVE-2014-2628 | 2014-08-13 16:11 | 2014-07-31 | Show | GitHub Exploit DB Packet Storm |
| 218239 | 5 | 警告 | IBM | - | IBM Business Process Manager における重要な情報を取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2014-3076 | 2014-08-13 16:10 | 2014-07-31 | Show | GitHub Exploit DB Packet Storm |
| 218240 | 4.3 | 警告 | IBM | - | IBM Security Access Manager for Mobile におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2014-4751 | 2014-08-13 15:28 | 2014-07-30 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 31, 2026, 4:16 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 297311 | - | mozilla | firefox | The Style Inspector in Mozilla Firefox before 17.0 and Firefox ESR 10.x before 10.0.11 does not properly restrict the context of HTML markup and Cascading Style Sheets (CSS) token sequences, which al… |
CWE-264
Permissions, Privileges, and Access Controls |
CVE-2012-4210 | 2024-11-21 10:42 | 2012-11-21 | Show | GitHub Exploit DB Packet Storm | |
| 297312 | - |
mozilla suse opensuse canonical |
firefox seamonkey thunderbird linux_enterprise_server linux_enterprise_desktop opensuse linux_enterprise_software_development_kit ubuntu_linux |
The XrayWrapper implementation in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 does not consider the compartment during property filtering, which allows remote atta… |
CWE-200
Information Exposure |
CVE-2012-4208 | 2024-11-21 10:42 | 2012-11-21 | Show | GitHub Exploit DB Packet Storm | |
| 297313 | - |
mozilla suse opensuse canonical redhat |
firefox seamonkey thunderbird thunderbird_esr linux_enterprise_server linux_enterprise_desktop opensuse linux_enterprise_software_development_kit ubuntu_linux enterprise_li… |
Use-after-free vulnerability in the nsPlaintextEditor::FireClipboardEvent function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x befor… |
CWE-416
Use After Free |
CVE-2012-4215 | 2024-11-21 10:42 | 2012-11-21 | Show | GitHub Exploit DB Packet Storm | |
| 297314 | - |
mozilla suse opensuse redhat canonical |
firefox seamonkey thunderbird thunderbird_esr linux_enterprise_server linux_enterprise_desktop opensuse linux_enterprise_software_development_kit enterprise_linux_server en… |
Use-after-free vulnerability in the nsTextEditorState::PrepareEditor function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.… |
CWE-416
Use After Free |
CVE-2012-4214 | 2024-11-21 10:42 | 2012-11-21 | Show | GitHub Exploit DB Packet Storm | |
| 297315 | - |
mozilla suse opensuse redhat canonical |
firefox seamonkey thunderbird thunderbird_esr linux_enterprise_server linux_enterprise_desktop opensuse linux_enterprise_software_development_kit enterprise_linux_server en… |
Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 do not prevent use of a "top" frame name-attribut… |
CWE-79
Cross-site Scripting |
CVE-2012-4209 | 2024-11-21 10:42 | 2012-11-21 | Show | GitHub Exploit DB Packet Storm | |
| 297316 | - |
mozilla suse opensuse redhat debian canonical |
firefox seamonkey thunderbird thunderbird_esr linux_enterprise_server linux_enterprise_desktop opensuse linux_enterprise_software_development_kit enterprise_linux_server en… |
The HZ-GB-2312 character-set implementation in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 do… |
CWE-79
Cross-site Scripting |
CVE-2012-4207 | 2024-11-21 10:42 | 2012-11-21 | Show | GitHub Exploit DB Packet Storm | |
| 297317 | - | mozilla | firefox | Untrusted search path vulnerability in the installer in Mozilla Firefox before 17.0 and Firefox ESR 10.x before 10.0.11 on Windows allows local users to gain privileges via a Trojan horse DLL in the … |
NVD-CWE-Other
|
CVE-2012-4206 | 2024-11-21 10:42 | 2012-11-21 | Show | GitHub Exploit DB Packet Storm | |
| 297318 | - |
mozilla canonical suse opensuse |
firefox seamonkey thunderbird ubuntu_linux linux_enterprise_desktop linux_enterprise_software_development_kit opensuse linux_enterprise_server |
Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 assign the system principal, rather than the sandbox principal, to XMLHttpRequest objects created in sandboxes, which a… |
CWE-352
Origin Validation Error |
CVE-2012-4205 | 2024-11-21 10:42 | 2012-11-21 | Show | GitHub Exploit DB Packet Storm | |
| 297319 | - |
mozilla suse opensuse canonical |
firefox seamonkey thunderbird linux_enterprise_server linux_enterprise_desktop opensuse linux_enterprise_software_development_kit ubuntu_linux |
The str_unescape function in the JavaScript engine in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a deni… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2012-4204 | 2024-11-21 10:42 | 2012-11-21 | Show | GitHub Exploit DB Packet Storm | |
| 297320 | - | mozilla | firefox | The New Tab page in Mozilla Firefox before 17.0 uses a privileged context for execution of JavaScript code by bookmarklets, which allows user-assisted remote attackers to run arbitrary programs by le… |
CWE-264
Permissions, Privileges, and Access Controls |
CVE-2012-4203 | 2024-11-21 10:42 | 2012-11-21 | Show | GitHub Exploit DB Packet Storm |