Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 27, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
228591 4.3 警告 WordPress.org - WordPress におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-2399 2013-07-26 12:07 2012-04-21 Show GitHub Exploit DB Packet Storm
228592 7.5 危険 Pidgin - Pidgin の libpurple の MXit プロトコルプラグインにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-3374 2013-07-25 16:24 2012-07-5 Show GitHub Exploit DB Packet Storm
228593 4.3 警告 Best Practical Solutions - Best Practical Solutions Request Tracker における製品の鍵束の鍵の読み取り制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-6581 2013-07-25 14:54 2012-10-25 Show GitHub Exploit DB Packet Storm
228594 4.3 警告 Best Practical Solutions - Best Practical Solutions Request Tracker におけるメッセージの生成元の詳細を偽装される脆弱性 CWE-310
暗号の問題
CVE-2012-6580 2013-07-25 14:51 2012-10-25 Show GitHub Exploit DB Packet Storm
228595 6.4 警告 Best Practical Solutions - Best Practical Solutions Request Tracker における特定の送信メールに対して暗号化または署名を設定される脆弱性 CWE-310
暗号の問題
CVE-2012-6579 2013-07-25 14:49 2012-10-25 Show GitHub Exploit DB Packet Storm
228596 4.3 警告 Best Practical Solutions - Best Practical Solutions Request Tracker におけるメッセージを偽装される脆弱性 CWE-310
暗号の問題
CVE-2012-6578 2013-07-25 14:48 2012-10-25 Show GitHub Exploit DB Packet Storm
228597 5 警告 シスコシステムズ - Cisco Unified MeetingPlace Web Conferencing サーバにおけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-3438 2013-07-25 14:02 2013-07-23 Show GitHub Exploit DB Packet Storm
228598 10 危険 日本電気
Portable SDK for UPnP project
ソニー株式会社
古河電気工業
- Portable SDK for UPnP Devices におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-5958 2013-07-24 17:04 2012-12-6 Show GitHub Exploit DB Packet Storm
228599 10 危険 日本電気
Portable SDK for UPnP project
ソニー株式会社
古河電気工業
- Portable SDK for UPnP Devices におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-5959 2013-07-24 17:04 2012-12-6 Show GitHub Exploit DB Packet Storm
228600 10 危険 日本電気
Portable SDK for UPnP project
ソニー株式会社
古河電気工業
- Portable SDK for UPnP Devices におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-5960 2013-07-24 17:03 2012-12-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 28, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
276301 8.8 HIGH
Network
oracle
mozilla
linux
firefox
Race condition in the GetStaticInstance function in the WebRTC implementation in Mozilla Firefox before 45.0 might allow remote attackers to execute arbitrary code or cause a denial of service (use-a… NVD-CWE-Other
CVE-2016-1973 2024-11-21 11:47 2016-03-14 Show GitHub Exploit DB Packet Storm
276302 8.8 HIGH
Network
mozilla firefox Race condition in libvpx in Mozilla Firefox before 45.0 on Windows might allow remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via unknown vec… NVD-CWE-Other
CVE-2016-1972 2024-11-21 11:47 2016-03-14 Show GitHub Exploit DB Packet Storm
276303 8.8 HIGH
Network
mozilla firefox The I420VideoFrame::CreateFrame function in the WebRTC implementation in Mozilla Firefox before 45.0 on Windows omits an unspecified status check, which might allow remote attackers to cause a denial… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-1971 2024-11-21 11:47 2016-03-14 Show GitHub Exploit DB Packet Storm
276304 8.8 HIGH
Network
mozilla firefox Integer underflow in the srtp_unprotect function in the WebRTC implementation in Mozilla Firefox before 45.0 on Windows might allow remote attackers to cause a denial of service (memory corruption) o… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-1970 2024-11-21 11:47 2016-03-14 Show GitHub Exploit DB Packet Storm
276305 8.8 HIGH
Network
sil
mozilla
graphite2
firefox
The setAttr function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.6.1, allows remote attackers to cause a denial of service (out-of-bounds write) … CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-1969 2024-11-21 11:47 2016-03-14 Show GitHub Exploit DB Packet Storm
276306 8.8 HIGH
Network
mozilla firefox Integer underflow in Brotli, as used in Mozilla Firefox before 45.0, allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow) via crafted data with brotli comp… CWE-189
Numeric Errors
CVE-2016-1968 2024-11-21 11:47 2016-03-14 Show GitHub Exploit DB Packet Storm
276307 6.5 MEDIUM
Network
mozilla firefox Mozilla Firefox before 45.0 does not properly restrict the availability of IFRAME Resource Timing API times, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive inform… CWE-200
Information Exposure
CVE-2016-1967 2024-11-21 11:47 2016-03-14 Show GitHub Exploit DB Packet Storm
276308 8.8 HIGH
Network
oracle
mozilla
opensuse
linux
firefox
thunderbird
opensuse
The nsNPObjWrapper::GetNewOrUsed function in dom/plugins/base/nsJSNPRuntime.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or ca… NVD-CWE-Other
CVE-2016-1966 2024-11-21 11:47 2016-03-14 Show GitHub Exploit DB Packet Storm
276309 4.3 MEDIUM
Network
mozilla
opensuse
oracle
firefox
opensuse
linux
Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 mishandle a navigation sequence that returns to the original page, which allows remote attackers to spoof the address bar via vectors invo… CWE-254
 7PK - Security Features
CVE-2016-1965 2024-11-21 11:47 2016-03-14 Show GitHub Exploit DB Packet Storm
276310 8.8 HIGH
Network
oracle
suse
opensuse
mozilla
linux
linux_enterprise
leap
opensuse
firefox
thunderbird
Use-after-free vulnerability in the AtomicBaseIncDec function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or cause a denial of se… NVD-CWE-Other
CVE-2016-1964 2024-11-21 11:47 2016-03-14 Show GitHub Exploit DB Packet Storm