Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
223571 4.3 警告 シマンテック - Symantec Brightmail Gateway Appliance の Control Center におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-0063 2012-12-20 19:10 2009-04-23 Show GitHub Exploit DB Packet Storm
223572 5 警告 zxid - ZXID における証明書チェーンの検証を回避される脆弱性 CWE-287
不適切な認証
CVE-2009-0051 2012-12-20 19:10 2009-01-7 Show GitHub Exploit DB Packet Storm
223573 6.8 警告 PunBB - PunBB におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2008-7241 2012-12-20 19:10 2009-09-17 Show GitHub Exploit DB Packet Storm
223574 10 危険 ourproject.org - White_Dune White_Dune におけるフォーマットストリングの脆弱性 CWE-134
書式文字列の問題
CVE-2008-7228 2012-12-20 19:10 2009-09-14 Show GitHub Exploit DB Packet Storm
223575 7.5 危険 PHPNUKE - PHP-Nuke 用の Recipes モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-7226 2012-12-20 19:10 2009-09-14 Show GitHub Exploit DB Packet Storm
223576 4.3 警告 runcms - RunCMS の system/admin.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-7222 2012-12-20 19:10 2009-09-14 Show GitHub Exploit DB Packet Storm
223577 6.8 警告 runcms - RunCMS におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2008-7221 2012-12-20 19:10 2009-09-14 Show GitHub Exploit DB Packet Storm
223578 7.5 危険 prototypejs - Prototype JavaScript フレームワークにおける "クロスサイト ajax リクエスト" を実行される脆弱性 CWE-Other
その他
CVE-2008-7220 2012-12-20 19:10 2009-09-13 Show GitHub Exploit DB Packet Storm
223579 4.3 警告 WordPress.org - WordPress 用の Peter's Math Anti-Spam Spinoff プラグインにおける CAPTCHA 保護を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-7216 2012-12-20 19:10 2009-09-11 Show GitHub Exploit DB Packet Storm
223580 6.9 警告 soundblaster - Ensoniq PCI 1371 サウンドカードで使用されている CreativeLabs es1371mp.sys WDM 音声ドライバにおける SYSTEM 権限を取得される脆弱性 CWE-Other
その他
CVE-2008-7211 2012-12-20 19:10 2009-09-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 20, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
279031 - mozilla firefox
thunderbird
Fixed in: Firefox 1.5.0.4 Thunderbird 1.5.0.4 SeaMonkey 1.0.2 NVD-CWE-Other
CVE-2006-2778 2018-10-19 01:42 2006-06-3 Show GitHub Exploit DB Packet Storm
279032 - mozilla firefox
thunderbird
Mozilla Firefox and Thunderbird before 1.5.0.4 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) nested <option> tags in a select tag, (2) a DOMN… CWE-94
Code Injection
CVE-2006-2779 2018-10-19 01:42 2006-06-3 Show GitHub Exploit DB Packet Storm
279033 - mozilla firefox
thunderbird
Fixed in: Firefox 1.5.0.4 Thunderbird 1.5.0.4 SeaMonkey 1.0.2 CWE-94
Code Injection
CVE-2006-2779 2018-10-19 01:42 2006-06-3 Show GitHub Exploit DB Packet Storm
279034 - mozilla firefox
thunderbird
Integer overflow in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via "jsstr tagify," which leads to … CWE-94
Code Injection
CVE-2006-2780 2018-10-19 01:42 2006-06-3 Show GitHub Exploit DB Packet Storm
279035 - mozilla firefox
thunderbird
Fixed in: Firefox 1.5.0.4 Thunderbird 1.5.0.4 SeaMonkey 1.0.2 CWE-94
Code Injection
CVE-2006-2780 2018-10-19 01:42 2006-06-3 Show GitHub Exploit DB Packet Storm
279036 - mozilla seamonkey
thunderbird
Double free vulnerability in nsVCard.cpp in Mozilla Thunderbird before 1.5.0.4 and SeaMonkey before 1.0.2 allows remote attackers to cause a denial of service (hang) and possibly execute arbitrary co… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2006-2781 2018-10-19 01:42 2006-06-3 Show GitHub Exploit DB Packet Storm
279037 - mozilla seamonkey
thunderbird
Fixed in: Firefox 1.5.0.4 Thunderbird 1.5.0.4 SeaMonkey 1.0.2 CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2006-2781 2018-10-19 01:42 2006-06-3 Show GitHub Exploit DB Packet Storm
279038 - mozilla firefox
seamonkey
Firefox 1.5.0.2 does not fix all test cases associated with CVE-2006-1729, which allows remote attackers to read arbitrary files by inserting the target filename into a text box, then turning that bo… CWE-20
 Improper Input Validation 
CVE-2006-2782 2018-10-19 01:42 2006-06-3 Show GitHub Exploit DB Packet Storm
279039 - mozilla firefox
seamonkey
Fixed in: Firefox 1.5.0.4 SeaMonkey 1.0.2 CWE-20
 Improper Input Validation 
CVE-2006-2782 2018-10-19 01:42 2006-06-3 Show GitHub Exploit DB Packet Storm
279040 - mozilla firefox
thunderbird
Mozilla Firefox and Thunderbird before 1.5.0.4 strip the Unicode Byte-order-Mark (BOM) from a UTF-8 page before the page is passed to the parser, which allows remote attackers to conduct cross-site s… CWE-79
Cross-site Scripting
CVE-2006-2783 2018-10-19 01:42 2006-06-3 Show GitHub Exploit DB Packet Storm