Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 31, 2026, 2 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 245151 | 4.3 | 警告 | dotCMS | - | dotCMS におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2008-3708 | 2012-06-26 16:02 | 2008-08-19 | Show | GitHub Exploit DB Packet Storm |
| 245152 | 7.5 | 危険 | echovnc | - | EchoVNC Linux の CLogger::WriteFormated 関数におけるスタックベースのバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2008-3705 | 2012-06-26 16:02 | 2008-08-19 | Show | GitHub Exploit DB Packet Storm |
| 245153 | 3.3 | 注意 | amarok | - | AAmarok の magnatunebrowser/magnatunebrowser.cpp における任意のファイルを上書きされる脆弱性 |
CWE-59
リンク解釈の問題 |
CVE-2008-3699 | 2012-06-26 16:02 | 2008-08-13 | Show | GitHub Exploit DB Packet Storm |
| 245154 | 5 | 警告 | flagship industries | - | Flagship Industries Ventrilo の decryption 関数におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2008-3680 | 2012-06-26 16:02 | 2008-08-14 | Show | GitHub Exploit DB Packet Storm |
| 245155 | 4.3 | 警告 | damian hickey | - | Freeway の admin/search_links.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2008-3678 | 2012-06-26 16:02 | 2008-08-14 | Show | GitHub Exploit DB Packet Storm |
| 245156 | 5 | 警告 | gelatocms | - | Gelato の classes/imgsize.php におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2008-3675 | 2012-06-26 16:02 | 2008-08-14 | Show | GitHub Exploit DB Packet Storm |
| 245157 | 5 | 警告 | Linux Acronis International GmbH |
- | Acronis True Image Echo Server における重要な情報を取得される脆弱性 |
CWE-310
暗号の問題 |
CVE-2008-3671 | 2012-06-26 16:02 | 2008-08-13 | Show | GitHub Exploit DB Packet Storm |
| 245158 | 6.8 | 警告 | articlefriendly | - | Article Friendly Pro の authordetail.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-3670 | 2012-06-26 16:02 | 2008-08-13 | Show | GitHub Exploit DB Packet Storm |
| 245159 | 5 | 警告 | Bharat Mediratta | - | Gallery におけるクッキーをキャプチャされる脆弱性 |
CWE-310
暗号の問題 |
CVE-2008-3662 | 2012-06-26 16:02 | 2008-09-18 | Show | GitHub Exploit DB Packet Storm |
| 245160 | 6.8 | 警告 | articlefriendly | - | Article Friendly Standard の categorydetail.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-3649 | 2012-06-26 16:02 | 2008-08-12 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 31, 2026, 4:16 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 253041 | 9.8 |
CRITICAL
Network |
redhat debian mozilla |
enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server debian_linux thunderbird firefox firefox_esr |
A use-after-free vulnerability occurs when redirecting focus handling which results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR … |
CWE-416
Use After Free |
CVE-2017-5434 | 2024-11-21 12:27 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |
| 253042 | 9.8 |
CRITICAL
Network |
debian redhat mozilla |
debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus firefox thu… |
A use-after-free vulnerability occurs during certain text input selection resulting in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR … |
CWE-416
Use After Free |
CVE-2017-5432 | 2024-11-21 12:27 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |
| 253043 | 9.8 |
CRITICAL
Network |
redhat mozilla |
enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server firefox_esr thunderbird firefox |
Memory safety bugs were reported in Firefox 52, Firefox ESR 52, and Thunderbird 52. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these c… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2017-5430 | 2024-11-21 12:27 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |
| 253044 | 9.8 |
CRITICAL
Network |
debian redhat mozilla |
debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus firefox thu… |
A use-after-free vulnerability occurs during transaction processing in the editor during design mode interactions. This results in a potentially exploitable crash. This vulnerability affects Thunderb… |
CWE-416
Use After Free |
CVE-2017-5435 | 2024-11-21 12:27 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |
| 253045 | 9.8 |
CRITICAL
Network |
debian redhat mozilla |
debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus thunderbird
A use-after-free vulnerability in SMIL animation functions occurs when pointers to animation elements in an array are dropped from the animation controller while still in use. This results in a poten…
|
CWE-416
|
Use After Free
CVE-2017-5433
|
2024-11-21 12:27 |
2018-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 253046 | 9.8 |
CRITICAL
Network |
redhat debian mozilla |
enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server debian_linux thunderbird firefox firefox_esr |
Memory safety bugs were reported in Firefox 52, Firefox ESR 45.8, Firefox ESR 52, and Thunderbird 52. Some of these bugs showed evidence of memory corruption and we presume that with enough effort th… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2017-5429 | 2024-11-21 12:27 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |
| 253047 | 9.8 |
CRITICAL
Network |
redhat mozilla |
enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus firefox firefox_esr |
An integer overflow in "createImageBitmap()" was reported through the Pwn2Own contest. The fix for this vulnerability disables the experimental extensions to the "createImageBitmap" API. This functio… |
CWE-190
Integer Overflow or Wraparound |
CVE-2017-5428 | 2024-11-21 12:27 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |
| 253048 | 5.5 |
MEDIUM
Local |
mozilla | firefox | A non-existent chrome.manifest file will attempt to be loaded during startup from the primary installation directory. If a malicious user with local access puts chrome.manifest and other referenced f… |
CWE-362
Race Condition |
CVE-2017-5427 | 2024-11-21 12:27 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |
| 253049 | 5.3 |
MEDIUM
Network |
mozilla |
firefox thunderbird |
On Linux, if the secure computing mode BPF (seccomp-bpf) filter is running when the Gecko Media Plugin sandbox is started, the sandbox fails to be applied and items that would run within the sandbox … |
CWE-732
Incorrect Permission Assignment for Critical Resource |
CVE-2017-5426 | 2024-11-21 12:27 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |
| 253050 | 7.5 |
HIGH
Network |
mozilla |
firefox thunderbird |
The Gecko Media Plugin sandbox allows access to local files that match specific regular expressions. On OS OX, this matching allows access to some data in subdirectories of "/private/var" that could … |
CWE-200
Information Exposure |
CVE-2017-5425 | 2024-11-21 12:27 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |