Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 31, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 245491 | 10 | 危険 | EGroupware | - | eGroupWare における詳細不明な脆弱性 |
CWE-94
コード・インジェクション |
CVE-2008-2041 | 2012-06-26 16:02 | 2008-04-30 | Show | GitHub Exploit DB Packet Storm |
| 245492 | 3.5 | 注意 | editeurscripts | - | EditeurScripts EsContacts におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2008-2037 | 2012-06-26 16:02 | 2008-04-30 | Show | GitHub Exploit DB Packet Storm |
| 245493 | 7.5 | 危険 | dream4 | - | dream4 Koobi Pro の index.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-2036 | 2012-06-26 16:02 | 2008-04-30 | Show | GitHub Exploit DB Packet Storm |
| 245494 | 5 | 警告 | acritum | - | Acritum Femitter Server の FTP サービスにおけるサービス運用妨害 (DoS) の脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2008-2032 | 2012-06-26 16:02 | 2008-04-30 | Show | GitHub Exploit DB Packet Storm |
| 245495 | 4.3 | 警告 | F5 Networks | - | F5 FirePass 4100 SSL VPN の installControl.php3 におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2008-2030 | 2012-06-26 16:02 | 2008-04-30 | Show | GitHub Exploit DB Packet Storm |
| 245496 | 6.8 | 警告 | e107.org webze opendb labgab TorrentFlux PHPNUKE my123tkshop phpmybittorrent |
- | Francisco Burzi PHP-Nuke などの製品で使用される CAPTCHA における CAPTCHA 検証を通過する脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2008-2020 | 2012-06-26 16:02 | 2008-04-29 | Show | GitHub Exploit DB Packet Storm |
| 245497 | 7.5 | 危険 | chilkat software | - | Chilek Content Management System におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2008-2017 | 2012-06-26 16:02 | 2008-04-29 | Show | GitHub Exploit DB Packet Storm |
| 245498 | 7.5 | 危険 | chilkat software | - | Chilek Content Management System における PHP リモートファイルインクルージョンの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2008-2016 | 2012-06-26 16:02 | 2008-04-29 | Show | GitHub Exploit DB Packet Storm |
| 245499 | 9.3 | 危険 | アップル マイクロソフト |
- | Windows XP および Vista の Apple QuickTime Player における任意のコードを実行される脆弱性 |
CWE-noinfo
情報不足 |
CVE-2008-2010 | 2012-06-26 16:02 | 2008-04-29 | Show | GitHub Exploit DB Packet Storm |
| 245500 | 9.3 | 危険 | Cerulean Studios | - | Cerulean Studios Trillian の Display Names メッセージ機能におけるバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2008-2008 | 2012-06-26 16:02 | 2008-04-29 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 31, 2026, 4:16 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 253031 | 9.8 |
CRITICAL
Network |
debian redhat mozilla |
debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus thunderbird
An out-of-bounds read when an HTTP/2 connection to a servers sends "DATA" frames with incorrect data content. This leads to a potentially exploitable crash. This vulnerability affects Thunderbird < 5…
|
CWE-125
|
Out-of-bounds Read
CVE-2017-5446
|
2024-11-21 12:27 |
2018-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 253032 | 9.8 |
CRITICAL
Network |
debian redhat mozilla |
debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus thunderbird
An out-of-bounds write vulnerability while decoding improperly formed BinHex format archives. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.
|
CWE-787
|
Out-of-bounds Write
CVE-2017-5443
|
2024-11-21 12:27 |
2018-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 253033 | 9.8 |
CRITICAL
Network |
debian redhat mozilla |
debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus thunderbird
A use-after-free vulnerability during changes in style when manipulating DOM elements. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45…
|
CWE-416
|
Use After Free
CVE-2017-5442
|
2024-11-21 12:27 |
2018-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 253034 | 9.8 |
CRITICAL
Network |
debian redhat mozilla |
debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus thunderbird
A use-after-free vulnerability when holding a selection during scroll events. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firef…
|
CWE-416
|
Use After Free
CVE-2017-5441
|
2024-11-21 12:27 |
2018-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 253035 | 7.5 |
HIGH
Network |
debian redhat mozilla |
debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus thunderbird
A vulnerability while parsing "application/http-index-format" format content where uninitialized values are used to create an array. This could allow the reading of uninitialized memory into the arra…
|
CWE-129
|
Improper Validation of Array Index
CVE-2017-5445
|
2024-11-21 12:27 |
2018-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 253036 | 7.5 |
HIGH
Network |
debian redhat mozilla |
debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus thunderbird
A buffer overflow vulnerability while parsing "application/http-index-format" format content when the header contains improperly formatted data. This allows for an out-of-bounds read of data from mem…
|
CWE-119
|
Incorrect Access of Indexable Resource ('Range Error')
CVE-2017-5444
|
2024-11-21 12:27 |
2018-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 253037 | 9.8 |
CRITICAL
Network |
debian redhat mozilla |
debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus thunderbird
A use-after-free vulnerability during XSLT processing due to a failure to propagate error conditions during matching while evaluating context, leading to objects being used when they no longer exist.…
|
CWE-416
|
Use After Free
CVE-2017-5440
|
2024-11-21 12:27 |
2018-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 253038 | 9.8 |
CRITICAL
Network |
debian redhat mozilla |
debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus firefox thu… |
A use-after-free vulnerability during XSLT processing due to poor handling of template parameters. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Fire… |
CWE-416
Use After Free |
CVE-2017-5439 | 2024-11-21 12:27 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |
| 253039 | 9.8 |
CRITICAL
Network |
debian redhat mozilla |
debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus thunderbird
A use-after-free vulnerability during XSLT processing due to the result handler being held by a freed handler during handling. This results in a potentially exploitable crash. This vulnerability affe…
|
CWE-416
|
Use After Free
CVE-2017-5438
|
2024-11-21 12:27 |
2018-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 253040 | 8.8 |
HIGH
Network |
debian redhat sil mozilla |
debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus graphite2 t… |
An out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite font. This results in a potentially exploitable crash. This issue was fixed in the Graphite 2 library as… |
CWE-787
Out-of-bounds Write |
CVE-2017-5436 | 2024-11-21 12:27 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |