Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
244961	7.5	危険	drake team	-	Drake CMS の components/guestbook/guestbook.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6475	2012-06-26 16:10	2009-03-16	Show	GitHub Exploit DB Packet Storm

244962	6.8	警告	edikon	-	Edikon phpShop におけるセッションをハイジャックされる脆弱性	CWE-287 不適切な認証	CVE-2008-6455	2012-06-26 16:10	2009-03-13	Show	GitHub Exploit DB Packet Storm

244963	7.5	危険	6rbscript	-	6rbScript の section.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6454	2012-06-26 16:10	2009-03-13	Show	GitHub Exploit DB Packet Storm

244964	4.3	警告	6rbscript	-	6rbScript の section.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-6453	2012-06-26 16:10	2009-03-13	Show	GitHub Exploit DB Packet Storm

244965	7.5	危険	geniuscyber	-	CMS MAXSITE の Guestbook コンポーネントにおける guestbook に任意の PHP コードを挿入される脆弱性	CWE-94 コード・インジェクション	CVE-2008-6446	2012-06-26 16:10	2009-03-9	Show	GitHub Exploit DB Packet Storm

244966	10	危険	Baidu, Inc.	-	Baidu Hi IM の CSTransfer.dll におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-6444	2012-06-26 16:10	2009-03-9	Show	GitHub Exploit DB Packet Storm

244967	9.3	危険	epic games	-	ゲーム製品で使用される Epic Games Unreal エンジンクライアントにおけるフォーマットストリングの脆弱性	CWE-134 書式文字列の問題	CVE-2008-6441	2012-06-26 16:10	2009-03-9	Show	GitHub Exploit DB Packet Storm

244968	5	警告	Cerberus, LLC	-	Cerberus Helpdesk における重要な情報を取得される脆弱性	CWE-287 不適切な認証	CVE-2008-6440	2012-06-26 16:10	2009-03-6	Show	GitHub Exploit DB Packet Storm

244969	4.3	警告	abledating	-	ABK-Soft AbleDating の search_results.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-6439	2012-06-26 16:10	2009-03-6	Show	GitHub Exploit DB Packet Storm

244970	7.5	危険	e107.org e107coders	-	e107 用 MacGuru BLOG Engine プラグインのmacgurublog_menu/macgurublog.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6438	2012-06-26 16:10	2009-03-6	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
252701	5.3	MEDIUM Network	mozilla	firefox	On pages containing an iframe, the "data:" protocol can be used to create a modal dialog through Javascript that will have an arbitrary domains as the dialog's location, spoofing of the origin of the…	CWE-20 Improper Input Validation	CVE-2017-7815	2024-11-21 12:32	2018-06-12	Show	GitHub Exploit DB Packet Storm

252702	7.8	HIGH Local	redhat mozilla debian	enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus firefox firefox_esr thunderbird debian_li…	File downloads encoded with "blob:" and "data:" URL elements bypassed normal file download checks though the Phishing and Malware Protection feature and its block lists of suspicious sites and files.…	CWE-20 Improper Input Validation	CVE-2017-7814	2024-11-21 12:32	2018-06-12	Show	GitHub Exploit DB Packet Storm

252703	8.2	HIGH Network	mozilla	firefox	Inside the JavaScript parser, a cast of an integer to a narrower type can result in data read from outside the buffer being parsed. This usually results in a non-exploitable crash, but can leak a lim…	CWE-125 CWE-704 Out-of-bounds Read Incorrect Type Conversion or Cast	CVE-2017-7813	2024-11-21 12:32	2018-06-12	Show	GitHub Exploit DB Packet Storm

252704	5.3	MEDIUM Network	mozilla	firefox	If web content on a page is dragged onto portions of the browser UI, such as the tab bar, links can be opened that otherwise would not be allowed to open. This can allow malicious web content to open…	CWE-200 Information Exposure	CVE-2017-7812	2024-11-21 12:32	2018-06-12	Show	GitHub Exploit DB Packet Storm

252705	9.8	CRITICAL Network	mozilla	firefox	Memory safety bugs were reported in Firefox 55. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary c…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-7811	2024-11-21 12:32	2018-06-12	Show	GitHub Exploit DB Packet Storm

252706	5.3	MEDIUM Network	mozilla	firefox	A content security policy (CSP) "frame-ancestors" directive containing origins with paths allows for comparisons against those paths instead of the origin. This results in a cross-origin information …	CWE-200 CWE-346 Information Exposure Origin Validation Error	CVE-2017-7808	2024-11-21 12:32	2018-06-12	Show	GitHub Exploit DB Packet Storm

252707	7.5	HIGH Network	mozilla	firefox	A use-after-free vulnerability can occur when the layer manager is freed too early when rendering specific SVG content, resulting in a potentially exploitable crash. This vulnerability affects Firefo…	CWE-416 Use After Free	CVE-2017-7806	2024-11-21 12:32	2018-06-12	Show	GitHub Exploit DB Packet Storm

252708	9.8	CRITICAL Network	debian redhat canonical mozilla	debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus ubuntu_linux firefox firefox…	Memory safety bugs were reported in Firefox 55 and Firefox ESR 52.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploit…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-7810	2024-11-21 12:32	2018-06-12	Show	GitHub Exploit DB Packet Storm

252709	9.8	CRITICAL Network	debian redhat mozilla	debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus firefox fir…	A use-after-free vulnerability can occur when an editor DOM node is deleted prematurely during tree traversal while still bound to the document. This results in a potentially exploitable crash. This …	CWE-416 Use After Free	CVE-2017-7809	2024-11-21 12:32	2018-06-12	Show	GitHub Exploit DB Packet Storm

252710	8.1	HIGH Network	debian redhat mozilla	debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus firefox fir…	A mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the files from a sub-path on the domain. This has been addressed by requiring fallback files be inside the manifes…	CWE-20 Improper Input Validation	CVE-2017-7807	2024-11-21 12:32	2018-06-12	Show	GitHub Exploit DB Packet Storm