Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
218521 7.5 危険 bitcomet - BitComet Client におけるバッファオーバーフローの脆弱性 - CVE-2006-0339 2014-03-11 17:43 2006-01-21 Show GitHub Exploit DB Packet Storm
218522 7.5 危険 エフ・セキュア - 複数の F-Secure Anti-Virus 製品におけるバッファオーバーフローの脆弱性 - CVE-2006-0337 2014-03-11 17:43 2006-01-21 Show GitHub Exploit DB Packet Storm
218523 4.3 警告 ar-blog - ar-blog におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-0333 2014-03-11 17:43 2006-01-21 Show GitHub Exploit DB Packet Storm
218524 4.6 警告 thiago melo de paula - Change passwd SquirrelMail プラグインにおけるバッファオーバーフローの脆弱性 - CVE-2006-0331 2014-03-11 17:43 2006-01-21 Show GitHub Exploit DB Packet Storm
218525 10 危険 AOL - AOL で使用される AOL You've Got Pictures Picture Finder Tool ActiveX コントロールにおけるバッファオーバーフローの脆弱性 - CVE-2006-0316 2014-03-11 17:43 2006-01-19 Show GitHub Exploit DB Packet Storm
218526 5 警告 mike helton - aoblogger における認証を回避される脆弱性 - CVE-2006-0312 2014-03-11 17:43 2006-01-19 Show GitHub Exploit DB Packet Storm
218527 4.3 警告 mike helton - aoblogger におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-0310 2014-03-11 17:43 2006-01-19 Show GitHub Exploit DB Packet Storm
218528 7.5 危険 clipcomm - Clipcomm CPW-100E VoIP 802.11b Wireless Handset Phone および CP-100E VoIP 802.11b Wireless Phone のファームウェアにおけるアクセス権を取得される脆弱性 - CVE-2006-0305 2014-03-11 17:43 2006-01-19 Show GitHub Exploit DB Packet Storm
218529 7.5 危険 achal dhir - Dual DHCP DNS Server におけるバッファオーバーフローの脆弱性 - CVE-2006-0304 2014-03-11 17:43 2006-01-19 Show GitHub Exploit DB Packet Storm
218530 5.1 警告 ambicom - AmbiCom Blue Neighbors におけるバッファオーバーフローの脆弱性 - CVE-2006-0253 2014-03-11 17:43 2006-01-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292201 - mozilla
canonical
suse
opensuse
firefox
seamonkey
thunderbird
ubuntu_linux
linux_enterprise_desktop
linux_enterprise_software_development_kit
opensuse
linux_enterprise_server
Use-after-free vulnerability in the XPCWrappedNative::Mark function in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary cod… CWE-416
 Use After Free
CVE-2012-4212 2024-11-21 10:42 2012-11-21 Show GitHub Exploit DB Packet Storm
292202 - mozilla firefox The Style Inspector in Mozilla Firefox before 17.0 and Firefox ESR 10.x before 10.0.11 does not properly restrict the context of HTML markup and Cascading Style Sheets (CSS) token sequences, which al… CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-4210 2024-11-21 10:42 2012-11-21 Show GitHub Exploit DB Packet Storm
292203 - mozilla
suse
opensuse
canonical
firefox
seamonkey
thunderbird
linux_enterprise_server
linux_enterprise_desktop
opensuse
linux_enterprise_software_development_kit
ubuntu_linux
The XrayWrapper implementation in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 does not consider the compartment during property filtering, which allows remote atta… CWE-200
Information Exposure
CVE-2012-4208 2024-11-21 10:42 2012-11-21 Show GitHub Exploit DB Packet Storm
292204 - mozilla
suse
opensuse
canonical
redhat
firefox
seamonkey
thunderbird
thunderbird_esr
linux_enterprise_server
linux_enterprise_desktop
opensuse
linux_enterprise_software_development_kit
ubuntu_linux
enterprise_li…
Use-after-free vulnerability in the nsPlaintextEditor::FireClipboardEvent function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x befor… CWE-416
 Use After Free
CVE-2012-4215 2024-11-21 10:42 2012-11-21 Show GitHub Exploit DB Packet Storm
292205 - mozilla
suse
opensuse
redhat
canonical
firefox
seamonkey
thunderbird
thunderbird_esr
linux_enterprise_server
linux_enterprise_desktop
opensuse
linux_enterprise_software_development_kit
enterprise_linux_server
en…
Use-after-free vulnerability in the nsTextEditorState::PrepareEditor function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.… CWE-416
 Use After Free
CVE-2012-4214 2024-11-21 10:42 2012-11-21 Show GitHub Exploit DB Packet Storm
292206 - mozilla
suse
opensuse
redhat
canonical
firefox
seamonkey
thunderbird
thunderbird_esr
linux_enterprise_server
linux_enterprise_desktop
opensuse
linux_enterprise_software_development_kit
enterprise_linux_server
en…
Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 do not prevent use of a "top" frame name-attribut… CWE-79
Cross-site Scripting
CVE-2012-4209 2024-11-21 10:42 2012-11-21 Show GitHub Exploit DB Packet Storm
292207 - mozilla
suse
opensuse
redhat
debian
canonical
firefox
seamonkey
thunderbird
thunderbird_esr
linux_enterprise_server
linux_enterprise_desktop
opensuse
linux_enterprise_software_development_kit
enterprise_linux_server
en…
The HZ-GB-2312 character-set implementation in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 do… CWE-79
Cross-site Scripting
CVE-2012-4207 2024-11-21 10:42 2012-11-21 Show GitHub Exploit DB Packet Storm
292208 - mozilla firefox Untrusted search path vulnerability in the installer in Mozilla Firefox before 17.0 and Firefox ESR 10.x before 10.0.11 on Windows allows local users to gain privileges via a Trojan horse DLL in the … NVD-CWE-Other
CVE-2012-4206 2024-11-21 10:42 2012-11-21 Show GitHub Exploit DB Packet Storm
292209 - mozilla
canonical
suse
opensuse
firefox
seamonkey
thunderbird
ubuntu_linux
linux_enterprise_desktop
linux_enterprise_software_development_kit
opensuse
linux_enterprise_server
Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 assign the system principal, rather than the sandbox principal, to XMLHttpRequest objects created in sandboxes, which a… CWE-352
 Origin Validation Error
CVE-2012-4205 2024-11-21 10:42 2012-11-21 Show GitHub Exploit DB Packet Storm
292210 - mozilla
suse
opensuse
canonical
firefox
seamonkey
thunderbird
linux_enterprise_server
linux_enterprise_desktop
opensuse
linux_enterprise_software_development_kit
ubuntu_linux
The str_unescape function in the JavaScript engine in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a deni… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2012-4204 2024-11-21 10:42 2012-11-21 Show GitHub Exploit DB Packet Storm