Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 31, 2026, 10 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 225091 | 3.5 | 注意 | IBM | - | IBM Cognos Command Center の Web クライアントのヘルプページにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2013-3979 | 2013-07-26 14:16 | 2013-07-23 | Show | GitHub Exploit DB Packet Storm |
| 225092 | 4.3 | 警告 | WordPress.org | - | WordPress におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2012-2399 | 2013-07-26 12:07 | 2012-04-21 | Show | GitHub Exploit DB Packet Storm |
| 225093 | 7.5 | 危険 | Pidgin | - | Pidgin の libpurple の MXit プロトコルプラグインにおけるバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2012-3374 | 2013-07-25 16:24 | 2012-07-5 | Show | GitHub Exploit DB Packet Storm |
| 225094 | 4.3 | 警告 | Best Practical Solutions | - | Best Practical Solutions Request Tracker における製品の鍵束の鍵の読み取り制限を回避される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2012-6581 | 2013-07-25 14:54 | 2012-10-25 | Show | GitHub Exploit DB Packet Storm |
| 225095 | 4.3 | 警告 | Best Practical Solutions | - | Best Practical Solutions Request Tracker におけるメッセージの生成元の詳細を偽装される脆弱性 |
CWE-310
暗号の問題 |
CVE-2012-6580 | 2013-07-25 14:51 | 2012-10-25 | Show | GitHub Exploit DB Packet Storm |
| 225096 | 6.4 | 警告 | Best Practical Solutions | - | Best Practical Solutions Request Tracker における特定の送信メールに対して暗号化または署名を設定される脆弱性 |
CWE-310
暗号の問題 |
CVE-2012-6579 | 2013-07-25 14:49 | 2012-10-25 | Show | GitHub Exploit DB Packet Storm |
| 225097 | 4.3 | 警告 | Best Practical Solutions | - | Best Practical Solutions Request Tracker におけるメッセージを偽装される脆弱性 |
CWE-310
暗号の問題 |
CVE-2012-6578 | 2013-07-25 14:48 | 2012-10-25 | Show | GitHub Exploit DB Packet Storm |
| 225098 | 5 | 警告 | シスコシステムズ | - | Cisco Unified MeetingPlace Web Conferencing サーバにおけるアクセス制限を回避される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2013-3438 | 2013-07-25 14:02 | 2013-07-23 | Show | GitHub Exploit DB Packet Storm |
| 225099 | 10 | 危険 | 日本電気 Portable SDK for UPnP project ソニー株式会社 古河電気工業 |
- | Portable SDK for UPnP Devices におけるスタックベースのバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2012-5958 | 2013-07-24 17:04 | 2012-12-6 | Show | GitHub Exploit DB Packet Storm |
| 225100 | 10 | 危険 | 日本電気 Portable SDK for UPnP project ソニー株式会社 古河電気工業 |
- | Portable SDK for UPnP Devices におけるスタックベースのバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2012-5959 | 2013-07-24 17:04 | 2012-12-6 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 31, 2026, 4:16 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 278851 | - |
mozilla canonical novell debian oracle |
firefox ubuntu_linux suse_linux_enterprise_server suse_linux_enterprise_desktop suse_linux_enterprise_software_development_kit debian_linux firefox_esr solaris thunderbird |
The ArrayBufferBuilder::append function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory locations, which has … |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2015-2739 | 2024-11-21 11:27 | 2015-07-6 | Show | GitHub Exploit DB Packet Storm | |
| 278852 | - |
canonical suse debian mozilla oracle |
ubuntu_linux linux_enterprise_server linux_enterprise_software_development_kit linux_enterprise_desktop suse_linux_enterprise_server debian_linux firefox firefox_esr thunderbi… |
The YCbCrImageDataDeserializer::ToDataSourceSurface function in the YCbCr implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1… |
CWE-17
Code |
CVE-2015-2738 | 2024-11-21 11:27 | 2015-07-6 | Show | GitHub Exploit DB Packet Storm | |
| 278853 | - |
mozilla canonical oracle suse debian |
firefox_esr firefox ubuntu_linux solaris linux_enterprise_server linux_enterprise_software_development_kit linux_enterprise_desktop suse_linux_enterprise_server debian_linux
The rx::d3d11::SetBufferData function in the Direct3D 11 implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 reads data from …
|
CWE-17
|
Code
CVE-2015-2737
|
2024-11-21 11:27 |
2015-07-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
| |
| 278854 | - |
mozilla oracle canonical novell debian |
firefox thunderbird firefox_esr solaris ubuntu_linux suse_linux_enterprise_server debian_linux suse_linux_enterprise_desktop suse_linux_enterprise_software_development_kit |
The nsZipArchive::BuildFileList function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory locations, which all… |
CWE-17
Code |
CVE-2015-2736 | 2024-11-21 11:27 | 2015-07-6 | Show | GitHub Exploit DB Packet Storm | |
| 278855 | - |
mozilla canonical novell debian oracle |
firefox firefox_esr thunderbird ubuntu_linux suse_linux_enterprise_server debian_linux suse_linux_enterprise_desktop suse_linux_enterprise_software_development_kit solaris |
nsZipArchive.cpp in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory locations, which allows remote attackers to … |
CWE-17
Code |
CVE-2015-2735 | 2024-11-21 11:27 | 2015-07-6 | Show | GitHub Exploit DB Packet Storm | |
| 278856 | - |
suse mozilla canonical debian oracle |
linux_enterprise_server linux_enterprise_software_development_kit linux_enterprise_desktop suse_linux_enterprise_server firefox_esr firefox ubuntu_linux debian_linux thunderbi… |
The CairoTextureClientD3D9::BorrowDrawTarget function in the Direct3D 9 implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 r… |
CWE-17
Code |
CVE-2015-2734 | 2024-11-21 11:27 | 2015-07-6 | Show | GitHub Exploit DB Packet Storm | |
| 278857 | - |
mozilla oracle novell |
firefox solaris firefox_esr suse_linux_enterprise_server suse_linux_enterprise_desktop |
Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 allows remote attackers to execute arbit… |
NVD-CWE-Other
|
CVE-2015-2733 | 2024-11-21 11:27 | 2015-07-6 | Show | GitHub Exploit DB Packet Storm | |
| 278858 | - |
mozilla oracle |
firefox thunderbird solaris firefox_esr |
Use-after-free vulnerability in the CSPService::ShouldLoad function in the microtask implementation in Mozilla Firefox before 39.0, Firefox ESR 38.x before 38.1, and Thunderbird before 38.1 allows re… |
NVD-CWE-Other
|
CVE-2015-2731 | 2024-11-21 11:27 | 2015-07-6 | Show | GitHub Exploit DB Packet Storm | |
| 278859 | - |
novell debian mozilla oracle |
suse_linux_enterprise_server debian_linux suse_linux_enterprise_desktop suse_linux_enterprise_software_development_kit network_security_services solaris vm_server |
Mozilla Network Security Services (NSS) before 3.19.1, as used in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and other products, does not properly perform Ellipti… |
CWE-310
Cryptographic Issues |
CVE-2015-2730 | 2024-11-21 11:27 | 2015-07-6 | Show | GitHub Exploit DB Packet Storm | |
| 278860 | - |
mozilla oracle |
firefox_esr firefox thunderbird solaris |
The AudioParamTimeline::AudioNodeInputValue function in the Web Audio implementation in Mozilla Firefox before 39.0 and Firefox ESR 38.x before 38.1 does not properly calculate an oscillator renderin… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2015-2729 | 2024-11-21 11:27 | 2015-07-6 | Show | GitHub Exploit DB Packet Storm |