Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
223871 4.3 警告 rightscripts - Text Lines Rearrange Script の download.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-6336 2012-12-20 19:10 2009-02-27 Show GitHub Exploit DB Packet Storm
223872 7.5 危険 simplecustomer - Simple Customer の login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6332 2012-12-20 19:10 2009-02-27 Show GitHub Exploit DB Packet Storm
223873 6 警告 streber-pm - Streber におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2008-6331 2012-12-20 19:10 2009-02-27 Show GitHub Exploit DB Packet Storm
223874 7.5 危険 PreProject.com - Pre ASP Job Board の Employee/login.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6329 2012-12-20 19:10 2009-02-27 Show GitHub Exploit DB Packet Storm
223875 7.5 危険 simplecustomer - Simple Customer の login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6326 2012-12-20 19:10 2009-02-27 Show GitHub Exploit DB Packet Storm
223876 4.3 警告 SoftbizScripts - Softbiz Classifieds Script におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-6325 2012-12-20 19:10 2009-02-27 Show GitHub Exploit DB Packet Storm
223877 7.5 危険 phpmygallery - PHPmyGallery の _conf/_php-core/common-tpl-vars.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2008-6318 2012-12-20 19:10 2009-02-27 Show GitHub Exploit DB Packet Storm
223878 6.8 警告 phpmygallery - PHPmyGallery の _conf/_php-core/common-tpl-vars.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-6317 2012-12-20 19:10 2009-02-27 Show GitHub Exploit DB Packet Storm
223879 6.8 警告 phpmygallery - PHPmyGallery の _conf/core/common-tpl-vars.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-6316 2012-12-20 19:10 2009-02-27 Show GitHub Exploit DB Packet Storm
223880 7.5 危険 phpmygallery - PHPmyGallery の _conf/core/common-tpl-vars.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2008-6315 2012-12-20 19:10 2009-02-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 16, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1741 7.5 HIGH
Network
mozilla firefox
thunderbird
It was possible to cause a use-after-free in the content process side of a WebTransport connection, leading to a potentially exploitable crash. This vulnerability was fixed in Firefox 136, Firefox ES… Update CWE-416
 Use After Free
CVE-2025-1931 2026-04-14 00:16 2025-03-4 Show GitHub Exploit DB Packet Storm
1742 7.5 HIGH
Network
mozilla firefox
thunderbird
Se pudo provocar un use-after-free en el lado del proceso de contenido de una conexión WebTransport, lo que provocó un bloqueo potencialmente explotable. Esta vulnerabilidad afecta a Firefox < 136… Update CWE-416
 Use After Free
CVE-2025-1931 2026-04-14 00:16 2025-03-4 Show GitHub Exploit DB Packet Storm
1743 8.8 HIGH
Network
mozilla firefox
thunderbird
On Windows, a compromised content process could use bad StreamData sent over AudioIPC to trigger a use-after-free in the Browser process. This could have led to a sandbox escape. This vulnerability w… Update CWE-416
 Use After Free
CVE-2025-1930 2026-04-14 00:16 2025-03-4 Show GitHub Exploit DB Packet Storm
1744 8.8 HIGH
Network
mozilla firefox
thunderbird
En Windows, un proceso de contenido comprometido podría usar datos StreamData erróneos enviados a través de AudioIPC para activar un proceso de use-after-free en el proceso del navegador. Esto podría… Update CWE-416
 Use After Free
CVE-2025-1930 2026-04-14 00:16 2025-03-4 Show GitHub Exploit DB Packet Storm
1745 6.5 MEDIUM
Network
mozilla firefox Memory safety bugs present in Firefox 135. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code… Update CWE-787
 Out-of-bounds Write
CVE-2025-1414 2026-04-14 00:16 2025-02-18 Show GitHub Exploit DB Packet Storm
1746 6.5 MEDIUM
Network
mozilla firefox Los errores de seguridad de la memoria presentes en Firefox 135. Algunos de estos errores mostraron evidencia de corrupción de la memoria y suponemos que con suficiente esfuerzo, algunos de estos pod… Update CWE-787
 Out-of-bounds Write
CVE-2025-1414 2026-04-14 00:16 2025-02-18 Show GitHub Exploit DB Packet Storm
1747 9.8 CRITICAL
Network
mozilla firefox
thunderbird
Memory safety bugs present in Firefox 134 and Thunderbird 134. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited t… Update CWE-787
 Out-of-bounds Write
CVE-2025-1020 2026-04-14 00:16 2025-02-4 Show GitHub Exploit DB Packet Storm
1748 9.8 CRITICAL
Network
mozilla firefox
thunderbird
Errores de seguridad de memoria presentes en Firefox 134 y Thunderbird 134. Algunos de estos errores mostraron evidencia de corrupción de memoria y suponemos que con suficiente esfuerzo algunos de el… Update CWE-787
 Out-of-bounds Write
CVE-2025-1020 2026-04-14 00:16 2025-02-4 Show GitHub Exploit DB Packet Storm
1749 4.3 MEDIUM
Network
mozilla firefox
thunderbird
The z-order of the browser windows could be manipulated to hide the fullscreen notification. This could potentially be leveraged to perform a spoofing attack. This vulnerability was fixed in Firefox … Update CWE-1021
 Improper Restriction of Rendered UI Layers or Frames
CVE-2025-1019 2026-04-14 00:16 2025-02-4 Show GitHub Exploit DB Packet Storm
1750 4.3 MEDIUM
Network
mozilla firefox
thunderbird
El orden z de las ventanas del navegador podría manipularse para ocultar la notificación de pantalla completa. Esto podría aprovecharse para realizar un ataque de suplantación de identidad. Esta vuln… Update CWE-1021
 Improper Restriction of Rendered UI Layers or Frames
CVE-2025-1019 2026-04-14 00:16 2025-02-4 Show GitHub Exploit DB Packet Storm