Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251201 5 警告 energyscripts - ES Simple Download の download.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2010-3456 2012-03-27 18:42 2010-09-17 Show GitHub Exploit DB Packet Storm
251202 4.3 警告 ATutor - AChecker の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-3455 2012-03-27 18:42 2010-09-17 Show GitHub Exploit DB Packet Storm
251203 6.8 警告 FFmpeg
mplayerhq
- MPlayer などの製品で使用される FFmpeg の flicvideo.c における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-3429 2012-03-27 18:42 2010-09-30 Show GitHub Exploit DB Packet Storm
251204 7.5 危険 Intermesh - Intermesh Group-Office の modules/notes/json.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-3428 2012-03-27 18:42 2010-09-16 Show GitHub Exploit DB Packet Storm
251205 4.3 警告 Open Classifieds - Open Classifieds におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-3427 2012-03-27 18:42 2010-09-16 Show GitHub Exploit DB Packet Storm
251206 7.5 危険 4you-studio - Joomla! 用の Alpha の JPhone (com_jphone) コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2010-3426 2012-03-27 18:42 2010-09-16 Show GitHub Exploit DB Packet Storm
251207 4.3 警告 SmarterTools Inc. - SmarterStats の UserControls/Popups/frmHelp.aspx におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-3425 2012-03-27 18:42 2010-09-16 Show GitHub Exploit DB Packet Storm
251208 4.3 警告 Invision Power Services, Inc - IP.Board の admin/sources/classes/bbcode/custom/defaults.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-3424 2012-03-27 18:42 2010-09-7 Show GitHub Exploit DB Packet Storm
251209 7.5 危険 freka - Drupal の Yr Weatherdata モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-3423 2012-03-27 18:42 2010-09-8 Show GitHub Exploit DB Packet Storm
251210 7.5 危険 solventus
Joomla!
- Jmoola! 用の JGen コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-3422 2012-03-27 18:42 2010-09-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
280501 - canonical
mozilla
opensuse
ubuntu_linux
firefox
opensuse
The WebGL implementation in Mozilla Firefox before 36.0 does not properly allocate memory for copying an unspecified string to a shader's compilation log, which allows remote attackers to cause a den… CWE-399
 Resource Management Errors
CVE-2015-0830 2024-11-21 11:23 2015-02-25 Show GitHub Exploit DB Packet Storm
280502 - canonical
opensuse
mozilla
oracle
ubuntu_linux
opensuse
firefox
solaris
Buffer overflow in libstagefright in Mozilla Firefox before 36.0 allows remote attackers to execute arbitrary code via a crafted MP4 video that is improperly handled during playback. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2015-0829 2024-11-21 11:23 2015-02-25 Show GitHub Exploit DB Packet Storm
280503 - oracle
mozilla
opensuse
solaris
firefox
opensuse
Double free vulnerability in the nsXMLHttpRequest::GetResponse function in Mozilla Firefox before 36.0, when a nonstandard memory allocator is used, allows remote attackers to execute arbitrary code … NVD-CWE-Other
CVE-2015-0828 2024-11-21 11:23 2015-02-25 Show GitHub Exploit DB Packet Storm
280504 - mozilla firefox
firefox_esr
thunderbird
Heap-based buffer overflow in the mozilla::gfx::CopyRect function in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to obtain sensitive… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2015-0827 2024-11-21 11:23 2015-02-25 Show GitHub Exploit DB Packet Storm
280505 - mozilla
opensuse
canonical
firefox
opensuse
ubuntu_linux
The nsTransformedTextRun::SetCapitalization function in Mozilla Firefox before 36.0 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read of heap memory) … CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2015-0826 2024-11-21 11:23 2015-02-25 Show GitHub Exploit DB Packet Storm
280506 - canonical
opensuse
mozilla
ubuntu_linux
opensuse
firefox
Stack-based buffer underflow in the mozilla::MP3FrameParser::ParseBuffer function in Mozilla Firefox before 36.0 allows remote attackers to obtain sensitive information from process memory via a malf… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2015-0825 2024-11-21 11:23 2015-02-25 Show GitHub Exploit DB Packet Storm
280507 - opensuse
canonical
mozilla
opensuse
ubuntu_linux
firefox
The mozilla::layers::BufferTextureClient::AllocateForSurface function in Mozilla Firefox before 36.0 allows remote attackers to cause a denial of service (out-of-bounds write of zero values, and appl… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2015-0824 2024-11-21 11:23 2015-02-25 Show GitHub Exploit DB Packet Storm
280508 - canonical
opentype_sanitiser_project
mozilla
opensuse
ubuntu_linux
opentype_sanitiser
firefox
opensuse
Multiple use-after-free vulnerabilities in OpenType Sanitiser, as used in Mozilla Firefox before 36.0, might allow remote attackers to trigger problematic Developer Console information or possibly ha… NVD-CWE-Other
CVE-2015-0823 2024-11-21 11:23 2015-02-25 Show GitHub Exploit DB Packet Storm
280509 - mozilla firefox
thunderbird
firefox_esr
The Form Autocompletion feature in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to read arbitrary files via crafted JavaScript code. CWE-200
Information Exposure
CVE-2015-0822 2024-11-21 11:23 2015-02-25 Show GitHub Exploit DB Packet Storm
280510 - mozilla
opensuse
canonical
firefox
opensuse
ubuntu_linux
Mozilla Firefox before 36.0 allows user-assisted remote attackers to read arbitrary files or execute arbitrary JavaScript code with chrome privileges via a crafted web site that is accessed with unsp… CWE-264
Permissions, Privileges, and Access Controls
CVE-2015-0821 2024-11-21 11:23 2015-02-25 Show GitHub Exploit DB Packet Storm