Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
241301 7.5 危険 Apache Software Foundation - Apache ServiceMix などで使用される Apache CXF における任意のファイルを読まれ任意の HTTP リクエストをサーバに送信される脆弱性 CWE-20
不適切な入力確認
CVE-2010-2076 2012-06-26 16:19 2010-06-16 Show GitHub Exploit DB Packet Storm
241302 3.3 注意 GNU Project - GNU gv における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題
CVE-2010-2056 2012-06-26 16:19 2010-06-6 Show GitHub Exploit DB Packet Storm
241303 3.3 注意 emesene - emesene の emesenelib/ProfileManager.py における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題
CVE-2010-2053 2012-06-26 16:19 2010-06-7 Show GitHub Exploit DB Packet Storm
241304 7.5 危険 debliteck - Debliteck DBCart の article.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-2051 2012-06-26 16:19 2010-05-25 Show GitHub Exploit DB Packet Storm
241305 4.3 警告 ActiveHelper
Joomla!
- Joomla! の ActiveHelper LiveHelp (com_activehelper_livehelp) コンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-2046 2012-06-26 16:19 2010-05-25 Show GitHub Exploit DB Packet Storm
241306 7.5 危険 Joomla!
dionesoft
- Joomla! の Dione Form Wizard コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2010-2045 2012-06-26 16:19 2010-05-25 Show GitHub Exploit DB Packet Storm
241307 7.5 危険 Joomla!
adhie utomo
- Joomla! 用の Konsultasi コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-2044 2012-06-26 16:19 2010-05-25 Show GitHub Exploit DB Packet Storm
241308 6.8 警告 gpEasy - gpEasy CMS におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2010-2039 2012-06-26 16:19 2010-05-25 Show GitHub Exploit DB Packet Storm
241309 2.1 注意 gpEasy - gpEasy CMS の include/tool/editing_files.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-2038 2012-06-26 16:19 2010-05-25 Show GitHub Exploit DB Packet Storm
241310 4.3 警告 Caucho Technology - Caucho Technology Resin Professional の resin-admin/digest.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-2032 2012-06-26 16:19 2010-05-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266791 8.8 HIGH
Network
oracle
mozilla
opensuse
linux
firefox
thunderbird
opensuse
The nsNPObjWrapper::GetNewOrUsed function in dom/plugins/base/nsJSNPRuntime.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or ca… NVD-CWE-Other
CVE-2016-1966 2024-11-21 11:47 2016-03-14 Show GitHub Exploit DB Packet Storm
266792 4.3 MEDIUM
Network
mozilla
opensuse
oracle
firefox
opensuse
linux
Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 mishandle a navigation sequence that returns to the original page, which allows remote attackers to spoof the address bar via vectors invo… CWE-254
 7PK - Security Features
CVE-2016-1965 2024-11-21 11:47 2016-03-14 Show GitHub Exploit DB Packet Storm
266793 8.8 HIGH
Network
oracle
suse
opensuse
mozilla
linux
linux_enterprise
leap
opensuse
firefox
thunderbird
Use-after-free vulnerability in the AtomicBaseIncDec function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or cause a denial of se… NVD-CWE-Other
CVE-2016-1964 2024-11-21 11:47 2016-03-14 Show GitHub Exploit DB Packet Storm
266794 7.4 HIGH
Local
mozilla firefox The FileReader class in Mozilla Firefox before 45.0 allows local users to gain privileges or cause a denial of service (memory corruption) by changing a file during a FileReader API read operation. CWE-264
CWE-119
Permissions, Privileges, and Access Controls
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-1963 2024-11-21 11:47 2016-03-14 Show GitHub Exploit DB Packet Storm
266795 9.8 CRITICAL
Network
mozilla
opensuse
oracle
firefox
opensuse
linux
Use-after-free vulnerability in the mozilla::DataChannelConnection::Close function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code by… NVD-CWE-Other
CVE-2016-1962 2024-11-21 11:47 2016-03-14 Show GitHub Exploit DB Packet Storm
266796 8.8 HIGH
Network
suse
opensuse
mozilla
oracle
linux_enterprise
leap
opensuse
firefox
thunderbird
linux
Use-after-free vulnerability in the nsHTMLDocument::SetBody function in dom/html/nsHTMLDocument.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute … NVD-CWE-Other
CVE-2016-1961 2024-11-21 11:47 2016-03-14 Show GitHub Exploit DB Packet Storm
266797 8.8 HIGH
Network
oracle
mozilla
suse
opensuse
linux
firefox
thunderbird
linux_enterprise
leap
opensuse
Integer underflow in the nsHtml5TreeBuilder class in the HTML5 string parser in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or cause… NVD-CWE-Other
CVE-2016-1960 2024-11-21 11:47 2016-03-14 Show GitHub Exploit DB Packet Storm
266798 8.8 HIGH
Network
mozilla firefox The ServiceWorkerManager class in Mozilla Firefox before 45.0 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read and memory corruption) via unspecified… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-1959 2024-11-21 11:47 2016-03-14 Show GitHub Exploit DB Packet Storm
266799 4.3 MEDIUM
Network
oracle
opensuse
mozilla
linux
opensuse
firefox
browser/base/content/browser.js in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to spoof the address bar via a javascript: URL. CWE-254
 7PK - Security Features
CVE-2016-1958 2024-11-21 11:47 2016-03-14 Show GitHub Exploit DB Packet Storm
266800 4.3 MEDIUM
Network
novell
opensuse
mozilla
oracle
suse_package_hub_for_suse_linux_enterprise
leap
opensuse
firefox
thunderbird
linux
Memory leak in libstagefright in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to cause a denial of service (memory consumption) via an MPEG-4 file that trigger… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-1957 2024-11-21 11:47 2016-03-14 Show GitHub Exploit DB Packet Storm