Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
223971	7.5	危険	wsnlinks	-	WSN Links の vote.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6031	2012-12-20 19:10	2009-02-3	Show	GitHub Exploit DB Packet Storm

223972	7.5	危険	university of queensland	-	University of Queensland Library Fez の list.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6028	2012-12-20 19:10	2009-02-3	Show	GitHub Exploit DB Packet Storm

223973	7.5	危険	xnova	-	Xnova の includes/todofleetcontrol.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-6023	2012-12-20 19:10	2009-02-2	Show	GitHub Exploit DB Packet Storm

223974	7.5	危険	xnova	-	Xnova の includes/todofleetcontrol.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-6022	2012-12-20 19:10	2009-02-2	Show	GitHub Exploit DB Packet Storm

223975	7.5	危険	rianxosencabos cms	-	Rianxosencabos CMS の scripts/links.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6014	2012-12-20 19:10	2009-01-30	Show	GitHub Exploit DB Packet Storm

223976	7.5	危険	sg real estate portal	-	SG Real Estate Portal の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6011	2012-12-20 19:10	2009-01-30	Show	GitHub Exploit DB Packet Storm

223977	5	警告	sg real estate portal	-	SG Real Estate Portal におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-6010	2012-12-20 19:10	2009-01-30	Show	GitHub Exploit DB Packet Storm

223978	7.5	危険	sg real estate portal	-	SG Real Estate Portal における認証を回避される脆弱性	CWE-287 不適切な認証	CVE-2008-6009	2012-12-20 19:10	2009-01-30	Show	GitHub Exploit DB Packet Storm

223979	7.5	危険	quidascript	-	APB の view_group.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6007	2012-12-20 19:10	2009-01-30	Show	GitHub Exploit DB Packet Storm

223980	10	危険	W3C	-	W3C Amaya Web Browser の CheckUniqueName 関数におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-6005	2012-12-20 19:10	2009-01-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 24, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2671	8.8	HIGH Network	mozilla	firefox	Use-after-free in the WebRTC: Audio/Video component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5.	CWE-416 Use After Free	CVE-2025-13020	2026-04-14 00:16	2025-11-12	Show	GitHub Exploit DB Packet Storm

2672	8.1	HIGH Network	mozilla	firefox	Same-origin policy bypass in the DOM: Workers component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5.	CWE-942 Permissive Cross-domain Policy with Untrusted Domains	CVE-2025-13019	2026-04-14 00:16	2025-11-12	Show	GitHub Exploit DB Packet Storm

2673	8.1	HIGH Network	mozilla	firefox	Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5.	CWE-288 Authentication Bypass Using an Alternate Path or Channel	CVE-2025-13018	2026-04-14 00:16	2025-11-12	Show	GitHub Exploit DB Packet Storm

2674	8.1	HIGH Network	mozilla	firefox	Same-origin policy bypass in the DOM: Notifications component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5.	CWE-942 Permissive Cross-domain Policy with Untrusted Domains	CVE-2025-13017	2026-04-14 00:16	2025-11-12	Show	GitHub Exploit DB Packet Storm

2675	7.5	HIGH Network	mozilla	firefox	Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5.	NVD-CWE-noinfo CWE-703 Improper Check or Handling of Exceptional Conditions	CVE-2025-13016	2026-04-14 00:16	2025-11-12	Show	GitHub Exploit DB Packet Storm

2676	3.4	LOW Network	mozilla	firefox	Spoofing issue in Firefox. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, and Firefox ESR 115.30.	CWE-290 Authentication Bypass by Spoofing	CVE-2025-13015	2026-04-14 00:16	2025-11-12	Show	GitHub Exploit DB Packet Storm

2677	8.8	HIGH Network	mozilla	firefox	Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Firefox ESR 115.30, Thunderbird 145, and Thunderbird 140.5.	CWE-416 Use After Free	CVE-2025-13014	2026-04-14 00:16	2025-11-12	Show	GitHub Exploit DB Packet Storm

2678	6.1	MEDIUM Network	mozilla	firefox	Mitigation bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Firefox ESR 115.30, Thunderbird 145, and Thunderbird 140.5.	CWE-288 Authentication Bypass Using an Alternate Path or Channel	CVE-2025-13013	2026-04-14 00:16	2025-11-12	Show	GitHub Exploit DB Packet Storm

2679	7.5	HIGH Network	mozilla	firefox	Race condition in the Graphics component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Firefox ESR 115.30, Thunderbird 145, and Thunderbird 140.5.	CWE-362 Race Condition	CVE-2025-13012	2026-04-14 00:16	2025-11-12	Show	GitHub Exploit DB Packet Storm

2680	9.8	CRITICAL Network	mozilla	firefox	Starting with Firefox 142, it was possible for a compromised child process to trigger a use-after-free in the GPU or browser process using WebGPU-related IPC calls. This may have been usable to escap…	CWE-416 Use After Free	CVE-2025-12380	2026-04-14 00:16	2025-10-28	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed