Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 12:09 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
219581 4.3 警告 phpwebgallery - PhpWebGallery におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3476 2014-03-11 17:43 2006-07-10 Show GitHub Exploit DB Packet Storm
219582 7.5 危険 Drupal - form_mail Drupal Module における CRLF インジェクションの脆弱性 - CVE-2006-3473 2014-03-11 17:43 2006-07-10 Show GitHub Exploit DB Packet Storm
219583 7.5 危険 mybulletinboard - MyBulletinBoard におけるクロスサイトリクエストフォージェリの脆弱性 - CVE-2006-3420 2014-03-11 17:43 2006-07-7 Show GitHub Exploit DB Packet Storm
219584 5.4 警告 マイクロソフト - Windows XP および 2003 におけるバッファオーバーフローの脆弱性 - CVE-2006-3351 2014-03-11 17:43 2006-07-6 Show GitHub Exploit DB Packet Storm
219585 4.3 警告 ajax softwares - AliPAGER におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3345 2014-03-11 17:43 2006-07-3 Show GitHub Exploit DB Packet Storm
219586 2.6 注意 Atlassian - Atlassian JIRA におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3338 2014-03-11 17:43 2006-07-3 Show GitHub Exploit DB Packet Storm
219587 6.8 警告 DeltaScripts - PHP/MySQL Classifieds におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3330 2014-03-11 17:43 2006-06-30 Show GitHub Exploit DB Packet Storm
219588 4.3 警告 e-cbd.biz - Custom dating biz dating script におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3327 2014-03-11 17:43 2006-06-30 Show GitHub Exploit DB Packet Storm
219589 5 警告 id software - id3 Quake 3 Engine および Icculus Quake 3 Engine における書き込み保護された任意の変数を上書きされる脆弱性 - CVE-2006-3325 2014-03-11 17:43 2006-06-30 Show GitHub Exploit DB Packet Storm
219590 2.6 注意 sitebar - SiteBar におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3320 2014-03-11 17:43 2006-06-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
294811 - mozilla firefox Mozilla Firefox before 15.0 does not properly restrict navigation to the about:newtab page, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-3965 2024-11-21 10:41 2012-08-29 Show GitHub Exploit DB Packet Storm
294812 - mozilla firefox
thunderbird_esr
thunderbird
seamonkey 		Use-after-free vulnerability in the gfxTextRun::GetUserData function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and S… CWE-399
 Resource Management Errors 		CVE-2012-3964 2024-11-21 10:41 2012-08-29 Show GitHub Exploit DB Packet Storm
294813 - mozilla
suse
opensuse
redhat
canonical 		firefox
seamonkey
thunderbird
thunderbird_esr
linux_enterprise_desktop
opensuse
linux_enterprise_server
linux_enterprise_software_development_kit
enterprise_linux_server
en… 		Use-after-free vulnerability in the js::gc::MapAllocToTraceKind function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, a… CWE-416
 Use After Free 		CVE-2012-3963 2024-11-21 10:41 2012-08-29 Show GitHub Exploit DB Packet Storm
294814 - mozilla firefox
thunderbird_esr
thunderbird
seamonkey 		Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 do not properly iterate through the characters in a… NVD-CWE-Other
CVE-2012-3962 2024-11-21 10:41 2012-08-29 Show GitHub Exploit DB Packet Storm
294815 - mozilla
suse
opensuse
redhat
canonical 		firefox
seamonkey
thunderbird
thunderbird_esr
linux_enterprise_desktop
opensuse
linux_enterprise_server
linux_enterprise_software_development_kit
enterprise_linux_server
en… 		Use-after-free vulnerability in the RangeData implementation in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey… CWE-416
 Use After Free 		CVE-2012-3961 2024-11-21 10:41 2012-08-29 Show GitHub Exploit DB Packet Storm
294816 - mozilla firefox
thunderbird
seamonkey
thunderbird_esr 		Use-after-free vulnerability in the nsHTMLEditRules::DeleteNonTableElements function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x befo… CWE-399
 Resource Management Errors 		CVE-2012-3958 2024-11-21 10:41 2012-08-29 Show GitHub Exploit DB Packet Storm
294817 - symantec messaging_gateway Symantec Messaging Gateway (SMG) before 10.0 allows remote attackers to obtain potentially sensitive information about component versions via unspecified vectors. CWE-200
Information Exposure 		CVE-2012-3581 2024-11-21 10:41 2012-08-29 Show GitHub Exploit DB Packet Storm
294818 - symantec messaging_gateway Symantec Messaging Gateway (SMG) before 10.0 allows remote authenticated users to modify the web application by leveraging access to the management interface. NVD-CWE-noinfo
CVE-2012-3580 2024-11-21 10:41 2012-08-29 Show GitHub Exploit DB Packet Storm
294819 - symantec messaging_gateway Symantec Messaging Gateway (SMG) before 10.0 has a default password for an unspecified account, which makes it easier for remote attackers to obtain privileged access via an SSH session. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-3579 2024-11-21 10:41 2012-08-29 Show GitHub Exploit DB Packet Storm
294820 - mozilla
suse
opensuse
redhat
canonical 		firefox
seamonkey
thunderbird
thunderbird_esr
linux_enterprise_desktop
opensuse
linux_enterprise_server
linux_enterprise_software_development_kit
enterprise_linux_server
en… 		Use-after-free vulnerability in the mozSpellChecker::SetCurrentDictionary function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before… CWE-416
 Use After Free 		CVE-2012-3960 2024-11-21 10:41 2012-08-29 Show GitHub Exploit DB Packet Storm