Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 14, 2026, 10 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 230151 | 7.5 | 危険 | vivaprograms | - | VivaPrograms Infinity の cp/profile.php における管理アカウントを作成される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2009-3949 | 2012-12-20 19:28 | 2009-11-16 | Show | GitHub Exploit DB Packet Storm |
| 230152 | 9.3 | 危険 | tandberg | - | Tandberg MXP の FTP サービスにおけるバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2009-3947 | 2012-12-20 19:28 | 2009-11-16 | Show | GitHub Exploit DB Packet Storm |
| 230153 | 2.1 | 注意 | サン・マイクロシステムズ | - | Sun xVM VirtualBox および Sun VirtualBox の Guest Additions におけるゲスト OS 上でサービス運用妨害 (DoS) の脆弱性 |
CWE-noinfo
情報不足 |
CVE-2009-3940 | 2012-12-20 19:28 | 2009-11-13 | Show | GitHub Exploit DB Packet Storm |
| 230154 | 6.8 | 警告 | freedesktop.org | - | Abiword pdftoabw utility で使用される Poppler におけるバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2009-3938 | 2012-12-20 19:28 | 2009-11-13 | Show | GitHub Exploit DB Packet Storm |
| 230155 | 4.9 | 警告 | サン・マイクロシステムズ | - | Sun OpenSolaris の Solaris TCP ソケットにおけるサービス運用妨害 (DoS) の脆弱性 |
CWE-399
リソース管理の問題 |
CVE-2009-3937 | 2012-12-20 19:28 | 2009-11-13 | Show | GitHub Exploit DB Packet Storm |
| 230156 | 5 | 警告 | Webkit | - | Google Chrome で使用されている WebKit におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-399
リソース管理の問題 |
CVE-2009-3933 | 2012-12-20 19:28 | 2009-10-27 | Show | GitHub Exploit DB Packet Storm |
| 230157 | 9.3 | 危険 | raven software punkbuster |
- | Soldier of Fortune II で使用される pbsv.dll におけるバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2009-3924 | 2012-12-20 19:28 | 2009-11-9 | Show | GitHub Exploit DB Packet Storm |
| 230158 | 7.5 | 危険 | サン・マイクロシステムズ | - | Sun VDI の VirtualBox Web サービスにおける不特定のアクセス権を取得される脆弱性 |
CWE-287
不適切な認証 |
CVE-2009-3923 | 2012-12-20 19:28 | 2009-11-3 | Show | GitHub Exploit DB Packet Storm |
| 230159 | 5 | 警告 | Sean Robertson | - | Drupal 用の crmngp モジュールの管理ページにおけるログ情報を読まれる脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2009-3920 | 2012-12-20 19:28 | 2009-11-4 | Show | GitHub Exploit DB Packet Storm |
| 230160 | 4.3 | 警告 | Sean Robertson | - | Drupal 用の crmngp モジュールにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2009-3919 | 2012-12-20 19:28 | 2009-11-4 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 14, 2026, 4:12 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 291481 | - | coreftp | core_ftp | Core FTP Server 1.2 before build 515 allows remote attackers to cause a denial of service (reachable assertion and crash) via an AUTH SSL command with malformed data, as demonstrated by pressing the … |
CWE-362
Race Condition |
CVE-2014-1441 | 2024-11-21 11:04 | 2014-05-2 | Show | GitHub Exploit DB Packet Storm | |
| 291482 | 9.8 |
CRITICAL
Network |
mozilla fedoraproject canonical debian redhat opensuse suse |
thunderbird firefox firefox_esr seamonkey fedora ubuntu_linux debian_linux enterprise_linux_server enterprise_linux_server_eus enterprise_linux_workstation enterprise_li… |
Use-after-free vulnerability in the nsHostResolver::ConditionallyRefreshRecord function in libxul.so in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonk… |
CWE-416
Use After Free |
CVE-2014-1532 | 2024-11-21 11:04 | 2014-04-30 | Show | GitHub Exploit DB Packet Storm |
| 291483 | - |
canonical opensuse_project opensuse oracle mozilla fedoraproject |
ubuntu_linux opensuse solaris firefox seamonkey fedora |
The sse2_composite_src_x888_8888 function in Pixman, as used in Cairo in Mozilla Firefox 28.0 and SeaMonkey 2.25 on Windows, allows remote attackers to execute arbitrary code or cause a denial of ser… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2014-1528 | 2024-11-21 11:04 | 2014-04-30 | Show | GitHub Exploit DB Packet Storm | |
| 291484 | - |
fedoraproject mozilla oracle |
fedora firefox solaris |
Mozilla Firefox before 29.0 on Android allows remote attackers to spoof the address bar via crafted JavaScript code that uses DOM events to prevent the reemergence of the actual address bar after scr… |
NVD-CWE-noinfo
|
CVE-2014-1527 | 2024-11-21 11:04 | 2014-04-30 | Show | GitHub Exploit DB Packet Storm | |
| 291485 | - |
mozilla canonical opensuse fedoraproject |
firefox seamonkey ubuntu_linux opensuse fedora |
The XrayWrapper implementation in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 allows user-assisted remote attackers to bypass intended access restrictions via a crafted web site that is vis… |
CWE-269
Improper Privilege Management |
CVE-2014-1526 | 2024-11-21 11:04 | 2014-04-30 | Show | GitHub Exploit DB Packet Storm | |
| 291486 | - |
mozilla canonical opensuse fedoraproject |
firefox seamonkey ubuntu_linux opensuse fedora |
The mozilla::dom::TextTrack::AddCue function in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 does not properly perform garbage collection for Text Track Manager variables, which allows remot… |
CWE-787 CWE-416 Out-of-bounds Write Use After Free |
CVE-2014-1525 | 2024-11-21 11:04 | 2014-04-30 | Show | GitHub Exploit DB Packet Storm | |
| 291487 | 8.8 |
HIGH
Network |
mozilla canonical debian redhat fedoraproject opensuse suse |
thunderbird firefox firefox_esr seamonkey ubuntu_linux debian_linux enterprise_linux_server enterprise_linux_server_eus enterprise_linux_workstation enterprise_linux_server… |
Use-after-free vulnerability in the nsGenericHTMLElement::GetWidthHeightForImage function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2… |
CWE-416
Use After Free |
CVE-2014-1531 | 2024-11-21 11:04 | 2014-04-30 | Show | GitHub Exploit DB Packet Storm |
| 291488 | 6.1 |
MEDIUM
Network |
mozilla fedoraproject canonical debian redhat opensuse suse |
thunderbird firefox firefox_esr seamonkey fedora ubuntu_linux debian_linux enterprise_linux_server enterprise_linux_server_eus enterprise_linux_workstation enterprise_li… |
The docshell implementation in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to trigger the loading of a URL wi… |
CWE-79
Cross-site Scripting |
CVE-2014-1530 | 2024-11-21 11:04 | 2014-04-30 | Show | GitHub Exploit DB Packet Storm |
| 291489 | 8.8 |
HIGH
Network |
mozilla canonical debian redhat fedoraproject opensuse suse |
thunderbird firefox firefox_esr seamonkey ubuntu_linux debian_linux enterprise_linux_server enterprise_linux_server_eus enterprise_linux_workstation enterprise_linux_server… |
The Web Notification API in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to bypass intended source-component r… |
CWE-269
Improper Privilege Management |
CVE-2014-1529 | 2024-11-21 11:04 | 2014-04-30 | Show | GitHub Exploit DB Packet Storm |
| 291490 | 9.8 |
CRITICAL
Network |
mozilla canonical debian redhat opensuse suse fedoraproject |
thunderbird firefox firefox_esr seamonkey ubuntu_linux debian_linux enterprise_linux_server enterprise_linux_server_eus enterprise_linux_workstation enterprise_linux_server… |
The nsXBLProtoImpl::InstallImplementation function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 does not properly check whether obj… |
CWE-120
Classic Buffer Overflow |
CVE-2014-1524 | 2024-11-21 11:04 | 2014-04-30 | Show | GitHub Exploit DB Packet Storm |