Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
223951	4.3	警告	Scriptsez.net	-	ScriptsEz Mini Hosting Panel の members.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-6090	2012-12-20 19:10	2009-02-6	Show	GitHub Exploit DB Packet Storm

223952	5	警告	Scriptsez.net	-	ScriptsEz Easy Image Downloader の main.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-6089	2012-12-20 19:10	2009-02-6	Show	GitHub Exploit DB Packet Storm

223953	7.5	危険	txtshop	-	TXTshop の header.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-6083	2012-12-20 19:10	2009-02-6	Show	GitHub Exploit DB Packet Storm

223954	4.3	警告	加藤和良	-	WRM におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-6161	2012-12-20 19:10	2008-10-6	Show	GitHub Exploit DB Packet Storm

223955	5	警告	South River Technologies	-	Titan FTP Server におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2008-6082	2012-12-20 19:10	2009-02-6	Show	GitHub Exploit DB Packet Storm

223956	7.5	危険	simplecustomer	-	Simple Customer の contact.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6081	2012-12-20 19:10	2009-02-6	Show	GitHub Exploit DB Packet Storm

223957	7.5	危険	rasihbahar	-	Bahar Download Script の aspkat.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6075	2012-12-20 19:10	2009-02-6	Show	GitHub Exploit DB Packet Storm

223958	5.1	警告	phpcrs	-	phpcrs の frame.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-6074	2012-12-20 19:10	2009-02-6	Show	GitHub Exploit DB Packet Storm

223959	7.5	危険	web design hero	-	Joomla! 用の JoomlaDate コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6068	2012-12-20 19:10	2009-02-10	Show	GitHub Exploit DB Packet Storm

223960	4.3	警告	テックスミス株式会社	-	Techsmith Camtasia Studio が作成した任意の SWF コントローラーファイルにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-6061	2012-12-20 19:10	2009-02-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 16, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1821	8.6	HIGH Network	mozilla	firefox	Escape de sandbox debido a desbordamiento de entero en el componente Graphics: Canvas2D. Esta vulnerabilidad afecta a Firefox < 143.0.3. New	CWE-190 Integer Overflow or Wraparound	CVE-2025-11152	2026-04-14 00:16	2025-09-30	Show	GitHub Exploit DB Packet Storm

1822	4.0	MEDIUM Local	mozilla	firefox	Cookie storage for non-HTML temporary documents was being shared incorrectly with normal browsing content, allowing information from private tabs to escape Incognito mode even after the user closed a… New	CWE-359 Exposure of Private Personal Information to an Unauthorized Actor	CVE-2025-10859	2026-04-14 00:16	2025-09-30	Show	GitHub Exploit DB Packet Storm

1823	4.0	MEDIUM Local	mozilla	firefox	El almacenamiento de cookies para documentos temporales no HTML se estaba compartiendo incorrectamente con contenido de navegación normal, permitiendo que información de pestañas privadas escapara de… New	CWE-359 Exposure of Private Personal Information to an Unauthorized Actor	CVE-2025-10859	2026-04-14 00:16	2025-09-30	Show	GitHub Exploit DB Packet Storm

1824	8.8	HIGH Network	mozilla	firefox thunderbird	Memory safety bugs present in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142. Some of these bugs showed evidence of memory corruption and we presume that with enough effort… New	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2025-10537	2026-04-14 00:16	2025-09-16	Show	GitHub Exploit DB Packet Storm

1825	6.2	MEDIUM Local	mozilla	firefox thunderbird	Information disclosure in the Networking: Cache component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3. New	CWE-200 Information Exposure	CVE-2025-10536	2026-04-14 00:16	2025-09-16	Show	GitHub Exploit DB Packet Storm

1826	7.5	HIGH Network	mozilla	firefox	Information disclosure, mitigation bypass in the Privacy component in Firefox for Android. This vulnerability was fixed in Firefox 143. New	CWE-200 Information Exposure	CVE-2025-10535	2026-04-14 00:16	2025-09-16	Show	GitHub Exploit DB Packet Storm

1827	8.1	HIGH Network	mozilla	firefox thunderbird	Spoofing issue in the Site Permissions component. This vulnerability was fixed in Firefox 143 and Thunderbird 143. New	CWE-79 Cross-site Scripting	CVE-2025-10534	2026-04-14 00:16	2025-09-16	Show	GitHub Exploit DB Packet Storm

1828	8.8	HIGH Network	mozilla	firefox thunderbird	Integer overflow in the SVG component. This vulnerability was fixed in Firefox 143, Firefox ESR 115.28, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3. New	CWE-190 Integer Overflow or Wraparound	CVE-2025-10533	2026-04-14 00:16	2025-09-16	Show	GitHub Exploit DB Packet Storm

1829	6.5	MEDIUM Network	mozilla	firefox thunderbird	Incorrect boundary conditions in the JavaScript: GC component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3. New	CWE-754 Improper Check for Unusual or Exceptional Conditions	CVE-2025-10532	2026-04-14 00:16	2025-09-16	Show	GitHub Exploit DB Packet Storm

1830	5.4	MEDIUM Network	mozilla	firefox thunderbird	Mitigation bypass in the Web Compatibility: Tooling component. This vulnerability was fixed in Firefox 143 and Thunderbird 143. New	CWE-288 Authentication Bypass Using an Alternate Path or Channel	CVE-2025-10531	2026-04-14 00:16	2025-09-16	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed