Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
223721 4.4 警告 vivvo - Vivvo CMS におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2008-6801 2012-12-20 19:10 2009-05-7 Show GitHub Exploit DB Packet Storm
223722 7.5 危険 tufat - FlashChat の connection.php におけるロールフィルタメカニズムを回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-6799 2012-12-20 19:10 2009-05-7 Show GitHub Exploit DB Packet Storm
223723 7.5 危険 PreProject.com - Pre Projects Pre Real Estate Listings の login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6798 2012-12-20 19:10 2009-05-7 Show GitHub Exploit DB Packet Storm
223724 7.5 危険 PreProject.com - Pre Projects Pre Real Estate Listings の manager/login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6796 2012-12-20 19:10 2009-05-7 Show GitHub Exploit DB Packet Storm
223725 7.5 危険 sfs ez pub - SFS EZ Pub Site の directory.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6794 2012-12-20 19:10 2009-05-7 Show GitHub Exploit DB Packet Storm
223726 7.5 危険 scripts-for-sites - SFS EZ Adult Directory の directory.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6784 2012-12-20 19:10 2009-05-1 Show GitHub Exploit DB Packet Storm
223727 7.5 危険 scripts-for-sites - SFS EZ Home Business Directory の directory.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6783 2012-12-20 19:10 2009-05-1 Show GitHub Exploit DB Packet Storm
223728 7.5 危険 scripts-for-sites - SFS EZ Hosting Directory の directory.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6782 2012-12-20 19:10 2009-05-1 Show GitHub Exploit DB Packet Storm
223729 7.5 危険 scripts-for-sites - SFS Gaming Directory の directory.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6781 2012-12-20 19:10 2009-05-1 Show GitHub Exploit DB Packet Storm
223730 7.5 危険 scripts-for-sites - SFS SFS EZ Affiliate の directory.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6780 2012-12-20 19:10 2009-05-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 23, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2441 6.5 MEDIUM
Network
mozilla firefox
thunderbird
En plataformas de 64 bits, IonMonkey-JIT solo escribía 32 bits del espacio de valor de retorno de 64 bits en la pila. Sin embargo, Baseline-JIT leía los 64 bits completos. Esta vulnerabilidad afecta … CWE-457
 Use of Uninitialized Variable
CVE-2025-8027 2026-04-14 00:17 2025-07-23 Show GitHub Exploit DB Packet Storm
2442 8.1 HIGH
Network
mozilla firefox
thunderbird
Memory safety bugs present in Firefox 139 and Thunderbird 139. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited t… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2025-6436 2026-04-14 00:17 2025-06-24 Show GitHub Exploit DB Packet Storm
2443 8.1 HIGH
Network
mozilla firefox
thunderbird
Errores de seguridad de memoria presentes en Firefox 139 y Thunderbird 139. Algunos de estos errores mostraron evidencia de corrupción de memoria y presumimos que, con suficiente esfuerzo, algunos de… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2025-6436 2026-04-14 00:17 2025-06-24 Show GitHub Exploit DB Packet Storm
2444 8.1 HIGH
Network
mozilla firefox
thunderbird
If a user saved a response from the Network tab in Devtools using the Save As context menu option, that file may not have been saved with the `.download` file extension. This could have led to the us… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2025-6435 2026-04-14 00:17 2025-06-24 Show GitHub Exploit DB Packet Storm
2445 8.1 HIGH
Network
mozilla firefox
thunderbird
Si un usuario guardó una respuesta desde la pestaña Red en DevTools mediante la opción Guardar como del menú contextual, es posible que el archivo no se haya guardado con la extensión `.download`. Es… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2025-6435 2026-04-14 00:17 2025-06-24 Show GitHub Exploit DB Packet Storm
2446 4.3 MEDIUM
Network
mozilla firefox The exception page for the HTTPS-Only feature, displayed when a website is opened via HTTP, lacked an anti-clickjacking delay, potentially allowing an attacker to trick a user into granting an except… CWE-1021
 Improper Restriction of Rendered UI Layers or Frames
CVE-2025-6434 2026-04-14 00:17 2025-06-24 Show GitHub Exploit DB Packet Storm
2447 4.3 MEDIUM
Network
mozilla firefox La página de excepción de la función Solo HTTPS, que se mostraba al abrir un sitio web mediante HTTP, carecía de un retardo anti-clickjacking, lo que potencialmente permitía a un atacante engañar al … CWE-1021
 Improper Restriction of Rendered UI Layers or Frames
CVE-2025-6434 2026-04-14 00:17 2025-06-24 Show GitHub Exploit DB Packet Storm
2448 9.8 CRITICAL
Network
mozilla firefox If a user visited a webpage with an invalid TLS certificate, and granted an exception, the webpage was able to provide a WebAuthn challenge that the user would be prompted to complete. This is in vi… CWE-295
Improper Certificate Validation 
CVE-2025-6433 2026-04-14 00:17 2025-06-24 Show GitHub Exploit DB Packet Storm
2449 9.8 CRITICAL
Network
mozilla firefox Si un usuario visitaba una página web con un certificado TLS no válido y concedía una excepción, la página web podía generar un desafío de WebAuthN que el usuario debía completar. Esto infringe la es… CWE-295
Improper Certificate Validation 
CVE-2025-6433 2026-04-14 00:17 2025-06-24 Show GitHub Exploit DB Packet Storm
2450 8.6 HIGH
Network
mozilla firefox When Multi-Account Containers was enabled, DNS requests could have bypassed a SOCKS proxy when the domain name was invalid or the SOCKS proxy was not responding. This vulnerability was fixed in Firef… CWE-200
Information Exposure
CVE-2025-6432 2026-04-14 00:17 2025-06-24 Show GitHub Exploit DB Packet Storm