Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
250811 4.3 警告 ヒューレット・パッカード - HP SMH におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-3012 2012-03-27 18:42 2010-09-15 Show GitHub Exploit DB Packet Storm
250812 5 警告 ヒューレット・パッカード - HP SMH における CRLF インジェクションの脆弱性 CWE-20
不適切な入力確認
CVE-2010-3011 2012-03-27 18:42 2010-09-15 Show GitHub Exploit DB Packet Storm
250813 4.3 警告 ヒューレット・パッカード - HP 3Com OfficeConnect Gigabit VPN Firewall 3CREVF100-73 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-3010 2012-03-27 18:42 2010-09-15 Show GitHub Exploit DB Packet Storm
250814 9 危険 ヒューレット・パッカード - HP SMH における重要な情報を取得される脆弱性 CWE-noinfo
情報不足
CVE-2010-3009 2012-03-27 18:42 2010-09-13 Show GitHub Exploit DB Packet Storm
250815 7.2 危険 ヒューレット・パッカード - HP Data Protector Express および Data Protector Express SSE における権限を取得される脆弱性 CWE-noinfo
情報不足
CVE-2010-3008 2012-03-27 18:42 2010-09-8 Show GitHub Exploit DB Packet Storm
250816 7.2 危険 ヒューレット・パッカード - HP Data Protector Express および Data Protector Express SSE における権限を取得される脆弱性 CWE-noinfo
情報不足
CVE-2010-3007 2012-03-27 18:42 2010-09-8 Show GitHub Exploit DB Packet Storm
250817 7.8 危険 ヒューレット・パッカード - HP ProLiant G6 Lights-Out 100 Remote Management カードにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2010-3006 2012-03-27 18:42 2010-09-7 Show GitHub Exploit DB Packet Storm
250818 6.8 警告 ヒューレット・パッカード - HP Operations Agent における権限を取得される脆弱性 CWE-noinfo
情報不足
CVE-2010-3005 2012-03-27 18:42 2010-09-2 Show GitHub Exploit DB Packet Storm
250819 7.5 危険 ヒューレット・パッカード - HP Operations Agent における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2010-3004 2012-03-27 18:42 2010-09-2 Show GitHub Exploit DB Packet Storm
250820 4.3 警告 ヒューレット・パッカード - HP Insight Diagnostics Online Edition におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-3003 2012-03-27 18:42 2010-08-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
295401 - fedoraproject crypto-utils The nssconfigFound function in genkey.pl in crypto-utils 2.4.1-34 allows local users to overwrite arbitrary files via a symlink attack on the "list" file in the current working directory. CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-3504 2024-11-21 10:41 2012-10-11 Show GitHub Exploit DB Packet Storm
295402 - mozilla
redhat
canonical
suse
firefox
thunderbird_esr
thunderbird
seamonkey
enterprise_linux_server
enterprise_linux_workstation
ubuntu_linux
enterprise_linux_desktop
enterprise_linux_eus
linux_enterpri…
The IsCSSWordSpacingSpace function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote… CWE-125
Out-of-bounds Read
CVE-2012-3995 2024-11-21 10:41 2012-10-11 Show GitHub Exploit DB Packet Storm
295403 - mozilla firefox
thunderbird_esr
thunderbird
seamonkey
The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 d… CWE-269
 Improper Privilege Management
CVE-2012-3993 2024-11-21 10:41 2012-10-11 Show GitHub Exploit DB Packet Storm
295404 - mozilla
suse
redhat
canonical
firefox
thunderbird_esr
thunderbird
seamonkey
linux_enterprise_server
linux_enterprise_desktop
linux_enterprise_sdk
enterprise_linux_server
enterprise_linux_workstation
ubu…
Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allow remote attackers to conduct cross-site script… CWE-79
Cross-site Scripting
CVE-2012-3994 2024-11-21 10:41 2012-10-11 Show GitHub Exploit DB Packet Storm
295405 - mozilla
redhat
canonical
suse
firefox
thunderbird_esr
thunderbird
seamonkey
enterprise_linux_server
enterprise_linux_workstation
ubuntu_linux
enterprise_linux_desktop
enterprise_linux_eus
linux_enterpri…
Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly manage history data, which allows r… CWE-79
Cross-site Scripting
CVE-2012-3992 2024-11-21 10:41 2012-10-11 Show GitHub Exploit DB Packet Storm
295406 - mozilla
redhat
canonical
suse
firefox
thunderbird_esr
thunderbird
seamonkey
enterprise_linux_server
enterprise_linux_workstation
ubuntu_linux
enterprise_linux_desktop
enterprise_linux_eus
linux_enterpri…
Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly restrict JSAPI access to the GetPro… CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-3991 2024-11-21 10:41 2012-10-11 Show GitHub Exploit DB Packet Storm
295407 - mozilla
canonical
suse
firefox
thunderbird
seamonkey
ubuntu_linux
linux_enterprise_desktop
linux_enterprise_server
Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly perform a cast of an unspecified variable during use of the instanceof operator on a JavaScript object,… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2012-3989 2024-11-21 10:41 2012-10-11 Show GitHub Exploit DB Packet Storm
295408 - mozilla firefox Mozilla Firefox before 16.0 on Android assigns chrome privileges to Reader Mode pages, which allows user-assisted remote attackers to bypass intended access restrictions via a crafted web site. CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-3987 2024-11-21 10:41 2012-10-11 Show GitHub Exploit DB Packet Storm
295409 - mozilla
canonical
suse
firefox
thunderbird
seamonkey
ubuntu_linux
linux_enterprise_desktop
linux_enterprise_server
Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly implement the HTML5 Same Origin Policy, which allows remote attackers to conduct cross-site scripting (… CWE-79
Cross-site Scripting
CVE-2012-3985 2024-11-21 10:41 2012-10-11 Show GitHub Exploit DB Packet Storm
295410 - mozilla
canonical
suse
firefox
thunderbird
seamonkey
ubuntu_linux
linux_enterprise_desktop
linux_enterprise_server
Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly handle navigation away from a web page that has a SELECT element's menu active, which allows remote att… NVD-CWE-Other
CVE-2012-3984 2024-11-21 10:41 2012-10-11 Show GitHub Exploit DB Packet Storm