Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 8, 2026, 10 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 250681 | 5.8 | 警告 | Apache Software Foundation | - | Apache Tomecat におけるアクセス制限を回避される脆弱性 |
CWE-DesignError
|
CVE-2011-1419 | 2012-03-27 18:43 | 2011-03-14 | Show | GitHub Exploit DB Packet Storm |
| 250682 | 5 | 警告 | アップル | - | Apple iOS および Apple TV の ステートレスアドレス自動設定機能におけるユーザ追跡の脆弱性 |
CWE-200
情報漏えい |
CVE-2011-1418 | 2012-03-27 18:43 | 2011-03-11 | Show | GitHub Exploit DB Packet Storm |
| 250683 | 5 | 警告 | BlackBerry | - | RIM の BlackBerry Torch 9800 におけるメモリ領域のコンテンツを読まれる脆弱性 |
CWE-200
情報漏えい |
CVE-2011-1416 | 2012-03-27 18:43 | 2011-03-11 | Show | GitHub Exploit DB Packet Storm |
| 250684 | 4.3 | 警告 | TIBCO Software | - | TIBCO tibbr および tibbr サービスで使用される tibbr Web サーバにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2011-1414 | 2012-03-27 18:43 | 2011-03-15 | Show | GitHub Exploit DB Packet Storm |
| 250685 | 7.5 | 危険 | openarena ioquake3 worldofpadman |
- | World of Padman および OpenArena で使用される ioQuake3 エンジンの sys/sys_unix.c における任意のコマンドを実行される脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2011-1412 | 2012-03-27 18:43 | 2011-08-3 | Show | GitHub Exploit DB Packet Storm |
| 250686 | 5 | 警告 | Ulli Horlacher | - | F*EX におけるファイルをアップロードされる脆弱性 |
CWE-287
不適切な認証 |
CVE-2011-1409 | 2012-03-27 18:43 | 2011-06-24 | Show | GitHub Exploit DB Packet Storm |
| 250687 | 7.5 | 危険 | Exim Development | - | Exim の DKIM 実装における任意のコードを実行させる脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2011-1407 | 2012-03-27 18:43 | 2011-05-16 | Show | GitHub Exploit DB Packet Storm |
| 250688 | 4.3 | 警告 | Mahara | - | Mahara における資格情報を取得される脆弱性 |
CWE-16
環境設定 |
CVE-2011-1406 | 2012-03-27 18:43 | 2011-05-13 | Show | GitHub Exploit DB Packet Storm |
| 250689 | 3.5 | 注意 | Mahara | - | Mahara におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2011-1405 | 2012-03-27 18:43 | 2011-05-13 | Show | GitHub Exploit DB Packet Storm |
| 250690 | 4 | 警告 | Mahara | - | Mahara における重要な情報を取得される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2011-1404 | 2012-03-27 18:43 | 2011-05-13 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 8, 2026, 4:09 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 280511 | - | microsoft |
windows_8.1 windows_server_2012 |
Hyper-V in Microsoft Windows 8.1 and Windows Server 2012 R2 does not properly initialize guest OS system data structures, which allows guest OS users to execute arbitrary code on the host OS or cause… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2015-2361 | 2024-11-21 11:27 | 2015-07-15 | Show | GitHub Exploit DB Packet Storm | |
| 280512 | - |
mozilla oracle novell |
firefox_esr firefox solaris suse_linux_enterprise_server suse_linux_enterprise_desktop suse_linux_enterprise_software_development_kit |
PDF.js in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 enables excessive privileges for internal Workers, which might allow remote attackers to execute arbitrary … |
CWE-17
Code |
CVE-2015-2743 | 2024-11-21 11:27 | 2015-07-6 | Show | GitHub Exploit DB Packet Storm | |
| 280513 | - |
oracle mozilla |
solaris firefox |
Mozilla Firefox before 39.0 on OS X includes native key press information during the logging of crashes, which allows remote attackers to obtain sensitive information by leveraging access to a crash-… |
CWE-200
Information Exposure |
CVE-2015-2742 | 2024-11-21 11:27 | 2015-07-6 | Show | GitHub Exploit DB Packet Storm | |
| 280514 | - |
mozilla oracle |
firefox solaris firefox_esr |
Mozilla Firefox before 39.0, Firefox ESR 38.x before 38.1, and Thunderbird before 38.1 do not enforce key pinning upon encountering an X.509 certificate problem that generates a user dialog, which al… |
CWE-310
Cryptographic Issues |
CVE-2015-2741 | 2024-11-21 11:27 | 2015-07-6 | Show | GitHub Exploit DB Packet Storm | |
| 280515 | - |
mozilla canonical novell debian oracle |
thunderbird firefox_esr firefox ubuntu_linux suse_linux_enterprise_server debian_linux suse_linux_enterprise_desktop suse_linux_enterprise_software_development_kit solaris |
Buffer overflow in the nsXMLHttpRequest::AppendToResponseText function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 might allow remot… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2015-2740 | 2024-11-21 11:27 | 2015-07-6 | Show | GitHub Exploit DB Packet Storm | |
| 280516 | - |
mozilla canonical novell debian oracle |
firefox ubuntu_linux suse_linux_enterprise_server suse_linux_enterprise_desktop suse_linux_enterprise_software_development_kit debian_linux firefox_esr solaris thunderbird |
The ArrayBufferBuilder::append function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory locations, which has … |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2015-2739 | 2024-11-21 11:27 | 2015-07-6 | Show | GitHub Exploit DB Packet Storm | |
| 280517 | - |
canonical suse debian mozilla oracle |
ubuntu_linux linux_enterprise_server linux_enterprise_software_development_kit linux_enterprise_desktop suse_linux_enterprise_server debian_linux firefox firefox_esr thunderbi… |
The YCbCrImageDataDeserializer::ToDataSourceSurface function in the YCbCr implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1… |
CWE-17
Code |
CVE-2015-2738 | 2024-11-21 11:27 | 2015-07-6 | Show | GitHub Exploit DB Packet Storm | |
| 280518 | - |
mozilla canonical oracle suse debian |
firefox_esr firefox ubuntu_linux solaris linux_enterprise_server linux_enterprise_software_development_kit linux_enterprise_desktop suse_linux_enterprise_server debian_linux
The rx::d3d11::SetBufferData function in the Direct3D 11 implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 reads data from …
|
CWE-17
|
Code
CVE-2015-2737
|
2024-11-21 11:27 |
2015-07-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
| |
| 280519 | - |
mozilla oracle canonical novell debian |
firefox thunderbird firefox_esr solaris ubuntu_linux suse_linux_enterprise_server debian_linux suse_linux_enterprise_desktop suse_linux_enterprise_software_development_kit |
The nsZipArchive::BuildFileList function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory locations, which all… |
CWE-17
Code |
CVE-2015-2736 | 2024-11-21 11:27 | 2015-07-6 | Show | GitHub Exploit DB Packet Storm | |
| 280520 | - |
mozilla canonical novell debian oracle |
firefox firefox_esr thunderbird ubuntu_linux suse_linux_enterprise_server debian_linux suse_linux_enterprise_desktop suse_linux_enterprise_software_development_kit solaris |
nsZipArchive.cpp in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory locations, which allows remote attackers to … |
CWE-17
Code |
CVE-2015-2735 | 2024-11-21 11:27 | 2015-07-6 | Show | GitHub Exploit DB Packet Storm |