Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
223891 7.8 危険 rakhisoftware - RakhiSoftware Price Comparison Script における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2008-6279 2012-12-20 19:10 2009-02-25 Show GitHub Exploit DB Packet Storm
223892 4.3 警告 rakhisoftware - RakhiSoftware Price Comparison Script の product.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6278 2012-12-20 19:10 2009-02-25 Show GitHub Exploit DB Packet Storm
223893 7.5 危険 rakhisoftware - RakhiSoftware Price Comparison Script の product.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6277 2012-12-20 19:10 2009-02-25 Show GitHub Exploit DB Packet Storm
223894 6.8 警告 tbmnet - TBmnetCMS の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-6271 2012-12-20 19:10 2009-02-25 Show GitHub Exploit DB Packet Storm
223895 7.5 危険 sadi samami - WEBBDOMAIN Multi Languages WebShop Online の detail.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6268 2012-12-20 19:10 2009-02-25 Show GitHub Exploit DB Packet Storm
223896 7.5 危険 ultrastats - Ultrastats の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6260 2012-12-20 19:10 2009-02-24 Show GitHub Exploit DB Packet Storm
223897 4.3 警告 quadcomm - QuadComm Q-Shop の search.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6259 2012-12-20 19:10 2009-02-24 Show GitHub Exploit DB Packet Storm
223898 7.5 危険 quadcomm - QuadComm Q-Shop の users.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6258 2012-12-20 19:10 2009-02-24 Show GitHub Exploit DB Packet Storm
223899 6.5 警告 vBulletin Solutions, Inc. - vBulletin の admincp/admincalendar.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6256 2012-12-20 19:10 2009-02-24 Show GitHub Exploit DB Packet Storm
223900 6.5 警告 vBulletin Solutions, Inc. - vBulletin における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6255 2012-12-20 19:10 2009-02-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 16, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1561 9.8 CRITICAL
Network 		mozilla firefox
thunderbird 		On arm64, a WASM `br_table` instruction with a lot of entries could lead to the label being too far from the instruction causing truncation and incorrect computation of the branch address. This vulne… Update CWE-1332
 Improper Handling of Faults that Lead to Instruction Skips 		CVE-2025-8028 2026-04-14 00:17 2025-07-23 Show GitHub Exploit DB Packet Storm
1562 9.8 CRITICAL
Network 		mozilla firefox
thunderbird 		En arm64, una instrucción WASM `br_table` con muchas entradas podría provocar que la etiqueta se alejara demasiado de la instrucción, lo que causaría truncamiento y un cálculo incorrecto de la direcc… Update CWE-1332
 Improper Handling of Faults that Lead to Instruction Skips 		CVE-2025-8028 2026-04-14 00:17 2025-07-23 Show GitHub Exploit DB Packet Storm
1563 6.5 MEDIUM
Network 		mozilla firefox
thunderbird 		On 64-bit platforms IonMonkey-JIT only wrote 32 bits of the 64-bit return value space on the stack. Baseline-JIT, however, read the entire 64 bits. This vulnerability was fixed in Firefox 141, Firefo… Update CWE-457
 Use of Uninitialized Variable 		CVE-2025-8027 2026-04-14 00:17 2025-07-23 Show GitHub Exploit DB Packet Storm
1564 6.5 MEDIUM
Network 		mozilla firefox
thunderbird 		En plataformas de 64 bits, IonMonkey-JIT solo escribía 32 bits del espacio de valor de retorno de 64 bits en la pila. Sin embargo, Baseline-JIT leía los 64 bits completos. Esta vulnerabilidad afecta … Update CWE-457
 Use of Uninitialized Variable 		CVE-2025-8027 2026-04-14 00:17 2025-07-23 Show GitHub Exploit DB Packet Storm
1565 8.1 HIGH
Network 		mozilla firefox
thunderbird 		Memory safety bugs present in Firefox 139 and Thunderbird 139. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited t… Update CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2025-6436 2026-04-14 00:17 2025-06-24 Show GitHub Exploit DB Packet Storm
1566 8.1 HIGH
Network 		mozilla firefox
thunderbird 		Errores de seguridad de memoria presentes en Firefox 139 y Thunderbird 139. Algunos de estos errores mostraron evidencia de corrupción de memoria y presumimos que, con suficiente esfuerzo, algunos de… Update CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2025-6436 2026-04-14 00:17 2025-06-24 Show GitHub Exploit DB Packet Storm
1567 8.1 HIGH
Network 		mozilla firefox
thunderbird 		If a user saved a response from the Network tab in Devtools using the Save As context menu option, that file may not have been saved with the `.download` file extension. This could have led to the us… Update CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2025-6435 2026-04-14 00:17 2025-06-24 Show GitHub Exploit DB Packet Storm
1568 8.1 HIGH
Network 		mozilla firefox
thunderbird 		Si un usuario guardó una respuesta desde la pestaña Red en DevTools mediante la opción Guardar como del menú contextual, es posible que el archivo no se haya guardado con la extensión `.download`. Es… Update CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2025-6435 2026-04-14 00:17 2025-06-24 Show GitHub Exploit DB Packet Storm
1569 4.3 MEDIUM
Network 		mozilla firefox The exception page for the HTTPS-Only feature, displayed when a website is opened via HTTP, lacked an anti-clickjacking delay, potentially allowing an attacker to trick a user into granting an except… Update CWE-1021
 Improper Restriction of Rendered UI Layers or Frames 		CVE-2025-6434 2026-04-14 00:17 2025-06-24 Show GitHub Exploit DB Packet Storm
1570 4.3 MEDIUM
Network 		mozilla firefox La página de excepción de la función Solo HTTPS, que se mostraba al abrir un sitio web mediante HTTP, carecía de un retardo anti-clickjacking, lo que potencialmente permitía a un atacante engañar al … Update CWE-1021
 Improper Restriction of Rendered UI Layers or Frames 		CVE-2025-6434 2026-04-14 00:17 2025-06-24 Show GitHub Exploit DB Packet Storm