Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
245641	6.9	警告	FreeBSD	-	FreeBSD のカーネルの sys/kern/vfs_mount.c におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-3531	2012-06-26 16:02	2008-09-3	Show	GitHub Exploit DB Packet Storm

245642	4.3	警告	craftysyntax	-	CSLH の livehelp_js.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-3510	2012-06-26 16:02	2008-08-7	Show	GitHub Exploit DB Packet Storm

245643	4	警告	Best Practical Solutions	-	Best Practical Solutions RT におけるサービス運用妨害 (DoS) 状態となる脆弱性	CWE-noinfo 情報不足	CVE-2008-3502	2012-06-26 16:02	2008-06-23	Show	GitHub Exploit DB Packet Storm

245644	10	危険	Episerver	-	Ektron CMS400.NET の "ワークエリアフォルダのページ" における詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2008-3499	2012-06-26 16:02	2008-08-6	Show	GitHub Exploit DB Packet Storm

245645	7.5	危険	ASP indir	-	Pcshey Portal の kategori.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3495	2012-06-26 16:02	2008-08-6	Show	GitHub Exploit DB Packet Storm

245646	7.8	危険	8e6 Technologies	-	8e6 R3000 Internet Filter におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-3494	2012-06-26 16:02	2008-08-6	Show	GitHub Exploit DB Packet Storm

245647	5	警告	americasarmy	-	America's Army におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2008-3492	2012-06-26 16:02	2008-08-6	Show	GitHub Exploit DB Packet Storm

245648	6.5	警告	e-topbiz	-	E-topbiz Online Dating の members/mail.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3490	2012-06-26 16:02	2008-08-6	Show	GitHub Exploit DB Packet Storm

245649	7.5	危険	Coppermine Photo Gallery	-	CPG の include/functions.inc.php の user_get_profile 関数におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-3486	2012-06-26 16:02	2008-08-6	Show	GitHub Exploit DB Packet Storm

245650	7.2	危険	シトリックス・システムズ	-	Citrix MetaFrame Presentation Server における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-3485	2012-06-26 16:02	2008-08-6	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
252841	7.5	HIGH Network	mozilla	firefox firefox_esr thunderbird	The "Mark of the Web" was not correctly saved on Windows when files with very long names were downloaded from the Internet. Without the Mark of the Web data, the security warning that Windows display…	CWE-20 Improper Input Validation	CVE-2017-7765	2024-11-21 12:32	2018-06-12	Show	GitHub Exploit DB Packet Storm

252842	5.3	MEDIUM Network	mozilla debian	firefox thunderbird firefox_esr debian_linux	Characters from the "Canadian Syllabics" unicode block can be mixed with characters from other unicode blocks in the addressbar instead of being rendered as their raw "punycode" form, allowing for do…	CWE-20 Improper Input Validation	CVE-2017-7764	2024-11-21 12:32	2018-06-12	Show	GitHub Exploit DB Packet Storm

252843	5.3	MEDIUM Network	mozilla debian	firefox firefox_esr thunderbird debian_linux	Default fonts on OS X display some Tibetan characters as whitespace. When used in the addressbar as part of an IDN this can be used for domain name spoofing attacks. Note: This attack only affects OS…	CWE-20 Improper Input Validation	CVE-2017-7763	2024-11-21 12:32	2018-06-12	Show	GitHub Exploit DB Packet Storm

252844	7.5	HIGH Network	redhat mozilla	enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server firefox	When entered directly, Reader Mode did not strip the username and password section of URLs displayed in the addressbar. This can be used for spoofing the domain of the current page. This vulnerabilit…	CWE-20 Improper Input Validation	CVE-2017-7762	2024-11-21 12:32	2018-06-12	Show	GitHub Exploit DB Packet Storm

252845	7.5	HIGH Network	mozilla google	firefox android	Android intent URLs given to Firefox for Android can be used to navigate from HTTP or HTTPS URLs to local "file:" URLs, allowing for the reading of local data through a violation of same-origin polic…	CWE-200 Information Exposure	CVE-2017-7759	2024-11-21 12:32	2018-06-12	Show	GitHub Exploit DB Packet Storm

252846	9.1	CRITICAL Network	redhat mozilla debian	enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_eus enterprise_linux_server_aus firefox thunderbird firefox_esr debian_li…	An out-of-bounds read vulnerability with the Opus encoder when the number of channels in an audio stream changes while the encoder is in use. This vulnerability affects Firefox < 54, Firefox ESR < 52…	CWE-125 Out-of-bounds Read	CVE-2017-7758	2024-11-21 12:32	2018-06-12	Show	GitHub Exploit DB Packet Storm

252847	5.5	MEDIUM Local	mozilla	firefox firefox_esr	The Mozilla Maintenance Service "helper.exe" application creates a temporary directory writable by non-privileged users. When this is combined with creation of a junction (a form of symbolic link), p…	CWE-276 Incorrect Default Permissions	CVE-2017-7761	2024-11-21 12:32	2018-06-12	Show	GitHub Exploit DB Packet Storm

252848	7.8	HIGH Local	mozilla	firefox firefox_esr	The Mozilla Windows updater modifies some files to be updated by reading the original file and applying changes to it. The location of the original file can be altered by a malicious user by passing …	CWE-417 Channel and Path Errors	CVE-2017-7760	2024-11-21 12:32	2018-06-12	Show	GitHub Exploit DB Packet Storm

252849	9.8	CRITICAL Network	mozilla debian	firefox thunderbird firefox_esr debian_linux	A use-after-free vulnerability in IndexedDB when one of its objects is destroyed in memory while a method on it is still being executed. This results in a potentially exploitable crash. This vulnerab…	CWE-416 Use After Free	CVE-2017-7757	2024-11-21 12:32	2018-06-12	Show	GitHub Exploit DB Packet Storm

252850	9.8	CRITICAL Network	mozilla debian	firefox thunderbird firefox_esr debian_linux	A use-after-free and use-after-scope vulnerability when logging errors from headers for XML HTTP Requests (XHR). This could result in a potentially exploitable crash. This vulnerability affects Firef…	CWE-416 Use After Free	CVE-2017-7756	2024-11-21 12:32	2018-06-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed