Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 30, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 245151 | 4.3 | 警告 | dotCMS | - | dotCMS におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2008-3708 | 2012-06-26 16:02 | 2008-08-19 | Show | GitHub Exploit DB Packet Storm |
| 245152 | 7.5 | 危険 | echovnc | - | EchoVNC Linux の CLogger::WriteFormated 関数におけるスタックベースのバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2008-3705 | 2012-06-26 16:02 | 2008-08-19 | Show | GitHub Exploit DB Packet Storm |
| 245153 | 3.3 | 注意 | amarok | - | AAmarok の magnatunebrowser/magnatunebrowser.cpp における任意のファイルを上書きされる脆弱性 |
CWE-59
リンク解釈の問題 |
CVE-2008-3699 | 2012-06-26 16:02 | 2008-08-13 | Show | GitHub Exploit DB Packet Storm |
| 245154 | 5 | 警告 | flagship industries | - | Flagship Industries Ventrilo の decryption 関数におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2008-3680 | 2012-06-26 16:02 | 2008-08-14 | Show | GitHub Exploit DB Packet Storm |
| 245155 | 4.3 | 警告 | damian hickey | - | Freeway の admin/search_links.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2008-3678 | 2012-06-26 16:02 | 2008-08-14 | Show | GitHub Exploit DB Packet Storm |
| 245156 | 5 | 警告 | gelatocms | - | Gelato の classes/imgsize.php におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2008-3675 | 2012-06-26 16:02 | 2008-08-14 | Show | GitHub Exploit DB Packet Storm |
| 245157 | 5 | 警告 | Linux Acronis International GmbH |
- | Acronis True Image Echo Server における重要な情報を取得される脆弱性 |
CWE-310
暗号の問題 |
CVE-2008-3671 | 2012-06-26 16:02 | 2008-08-13 | Show | GitHub Exploit DB Packet Storm |
| 245158 | 6.8 | 警告 | articlefriendly | - | Article Friendly Pro の authordetail.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-3670 | 2012-06-26 16:02 | 2008-08-13 | Show | GitHub Exploit DB Packet Storm |
| 245159 | 5 | 警告 | Bharat Mediratta | - | Gallery におけるクッキーをキャプチャされる脆弱性 |
CWE-310
暗号の問題 |
CVE-2008-3662 | 2012-06-26 16:02 | 2008-09-18 | Show | GitHub Exploit DB Packet Storm |
| 245160 | 6.8 | 警告 | articlefriendly | - | Article Friendly Standard の categorydetail.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-3649 | 2012-06-26 16:02 | 2008-08-12 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 31, 2026, 4:16 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 253031 | 9.8 |
CRITICAL
Network |
debian redhat mozilla |
debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus thunderbird
An out-of-bounds read when an HTTP/2 connection to a servers sends "DATA" frames with incorrect data content. This leads to a potentially exploitable crash. This vulnerability affects Thunderbird < 5…
|
CWE-125
|
Out-of-bounds Read
CVE-2017-5446
|
2024-11-21 12:27 |
2018-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 253032 | 9.8 |
CRITICAL
Network |
debian redhat mozilla |
debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus thunderbird
An out-of-bounds write vulnerability while decoding improperly formed BinHex format archives. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.
|
CWE-787
|
Out-of-bounds Write
CVE-2017-5443
|
2024-11-21 12:27 |
2018-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 253033 | 9.8 |
CRITICAL
Network |
debian redhat mozilla |
debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus thunderbird
A use-after-free vulnerability during changes in style when manipulating DOM elements. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45…
|
CWE-416
|
Use After Free
CVE-2017-5442
|
2024-11-21 12:27 |
2018-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 253034 | 9.8 |
CRITICAL
Network |
debian redhat mozilla |
debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus thunderbird
A use-after-free vulnerability when holding a selection during scroll events. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firef…
|
CWE-416
|
Use After Free
CVE-2017-5441
|
2024-11-21 12:27 |
2018-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 253035 | 7.5 |
HIGH
Network |
debian redhat mozilla |
debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus thunderbird
A vulnerability while parsing "application/http-index-format" format content where uninitialized values are used to create an array. This could allow the reading of uninitialized memory into the arra…
|
CWE-129
|
Improper Validation of Array Index
CVE-2017-5445
|
2024-11-21 12:27 |
2018-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 253036 | 7.5 |
HIGH
Network |
debian redhat mozilla |
debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus thunderbird
A buffer overflow vulnerability while parsing "application/http-index-format" format content when the header contains improperly formatted data. This allows for an out-of-bounds read of data from mem…
|
CWE-119
|
Incorrect Access of Indexable Resource ('Range Error')
CVE-2017-5444
|
2024-11-21 12:27 |
2018-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 253037 | 9.8 |
CRITICAL
Network |
debian redhat mozilla |
debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus thunderbird
A use-after-free vulnerability during XSLT processing due to a failure to propagate error conditions during matching while evaluating context, leading to objects being used when they no longer exist.…
|
CWE-416
|
Use After Free
CVE-2017-5440
|
2024-11-21 12:27 |
2018-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 253038 | 9.8 |
CRITICAL
Network |
debian redhat mozilla |
debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus firefox thu… |
A use-after-free vulnerability during XSLT processing due to poor handling of template parameters. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Fire… |
CWE-416
Use After Free |
CVE-2017-5439 | 2024-11-21 12:27 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |
| 253039 | 9.8 |
CRITICAL
Network |
debian redhat mozilla |
debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus thunderbird
A use-after-free vulnerability during XSLT processing due to the result handler being held by a freed handler during handling. This results in a potentially exploitable crash. This vulnerability affe…
|
CWE-416
|
Use After Free
CVE-2017-5438
|
2024-11-21 12:27 |
2018-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 253040 | 8.8 |
HIGH
Network |
debian redhat sil mozilla |
debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus graphite2 t… |
An out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite font. This results in a potentially exploitable crash. This issue was fixed in the Graphite 2 library as… |
CWE-787
Out-of-bounds Write |
CVE-2017-5436 | 2024-11-21 12:27 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |