Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 7, 2026, noon
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 251311 | 7.5 | 危険 | Laurent Destailleur | - | AWStats における任意のコマンドを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2010-4367 | 2012-03-27 18:42 | 2010-12-2 | Show | GitHub Exploit DB Packet Storm |
| 251312 | 4.3 | 警告 | abk-soft | - | Chameleon Social Networking の forum_new_topic.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-4366 | 2012-03-27 18:42 | 2010-12-1 | Show | GitHub Exploit DB Packet Storm |
| 251313 | 7.5 | 危険 | Joomla! Jextensions |
- | Joomla! のJE Ajax Event Calendar コンポーネントにおける SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-4365 | 2012-03-27 18:42 | 2010-12-1 | Show | GitHub Exploit DB Packet Storm |
| 251314 | 4.3 | 警告 | dadabik | - | DaDaBIK における保護メカニズムを回避される脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-4364 | 2012-03-27 18:42 | 2010-12-1 | Show | GitHub Exploit DB Packet Storm |
| 251315 | 6.8 | 警告 | mrcgiguy | - | MCG FreeTicket の contact.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-4363 | 2012-03-27 18:42 | 2010-12-1 | Show | GitHub Exploit DB Packet Storm |
| 251316 | 7.5 | 危険 | Micronetsoft | - | MicroNetsoft RV Dealer Website における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-4362 | 2012-03-27 18:42 | 2010-12-1 | Show | GitHub Exploit DB Packet Storm |
| 251317 | 4.3 | 警告 | jurpo | - | Jurpopage の url-gateway.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-4361 | 2012-03-27 18:42 | 2010-12-1 | Show | GitHub Exploit DB Packet Storm |
| 251318 | 7.5 | 危険 | jurpo | - | Jurpopage の index.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-4360 | 2012-03-27 18:42 | 2010-12-1 | Show | GitHub Exploit DB Packet Storm |
| 251319 | 7.5 | 危険 | jurpo | - | Jurpopage の index.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-4359 | 2012-03-27 18:42 | 2010-12-1 | Show | GitHub Exploit DB Packet Storm |
| 251320 | 4.3 | 警告 | mrcgiguy | - | MCG Guestbook の gb.cgi におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-4358 | 2012-03-27 18:42 | 2010-12-1 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 7, 2026, 4:13 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 254661 | 9.1 |
CRITICAL
Network |
mozilla | firefox | An issue with incorrect ownership model of "privateBrowsing" information exposed through developer tools. This can result in a non-exploitable crash when manually triggered during debugging. This vul… |
CWE-665
Improper Initialization |
CVE-2017-5468 | 2024-11-21 12:27 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |
| 254662 | 7.5 |
HIGH
Network |
redhat mozilla |
enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server thunderbird firefox firefox_esr |
A potential memory corruption and crash when using Skia content when drawing content outside of the bounds of a clipping region. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 52.1, and… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2017-5467 | 2024-11-21 12:27 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |
| 254663 | 5.3 |
MEDIUM
Network |
mozilla | firefox | Android intents can be used to launch Firefox for Android in reader mode with a user specified URL. This allows an attacker to spoof the contents of the addressbar as displayed to users. Note: This a… |
CWE-20
Improper Input Validation |
CVE-2017-5463 | 2024-11-21 12:27 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |
| 254664 | 5.3 |
MEDIUM
Network |
debian mozilla |
debian_linux thunderbird firefox firefox_esr network_security_services |
A flaw in DRBG number generation within the Network Security Services (NSS) library where the internal state V does not correctly carry bits over. The NSS library has been updated to fix this issue t… |
CWE-682
Incorrect Calculation |
CVE-2017-5462 | 2024-11-21 12:27 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |
| 254665 | 9.8 |
CRITICAL
Network |
redhat debian mozilla |
enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus debian_linux thunderbird firefox firefox_… |
A buffer overflow in WebGL triggerable by web content, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2017-5459 | 2024-11-21 12:27 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |
| 254666 | 6.1 |
MEDIUM
Network |
redhat mozilla |
enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus thunderbird firefox fire… |
If a page is loaded from an original site through a hyperlink and contains a redirect to a "data:text/html" URL, triggering a reload will run the reloaded "data:text/html" page with its origin set in… |
CWE-79
Cross-site Scripting |
CVE-2017-5466 | 2024-11-21 12:27 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |
| 254667 | 9.1 |
CRITICAL
Network |
debian redhat mozilla |
debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus thunderbird
An out-of-bounds read while processing SVG content in "ConvolvePixel". This results in a crash and also allows for otherwise inaccessible memory being copied into SVG graphic content, which could the…
|
CWE-125
|
Out-of-bounds Read
CVE-2017-5465
|
2024-11-21 12:27 |
2018-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 254668 | 9.8 |
CRITICAL
Network |
debian redhat mozilla |
debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus firefox thu… |
During DOM manipulations of the accessibility tree through script, the DOM tree can become out of sync with the accessibility tree, leading to memory corruption and a potentially exploitable crash. T… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2017-5464 | 2024-11-21 12:27 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |
| 254669 | 9.8 |
CRITICAL
Network |
debian redhat mozilla |
debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus firefox thu… |
A use-after-free vulnerability in frame selection triggered by a combination of malicious script content and key presses by a user. This results in a potentially exploitable crash. This vulnerability… |
CWE-416
Use After Free |
CVE-2017-5460 | 2024-11-21 12:27 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |
| 254670 | 6.1 |
MEDIUM
Network |
mozilla | firefox | When a "javascript:" URL is drag and dropped by a user into the addressbar, the URL will be processed and executed. This allows for users to be socially engineered to execute an XSS attack on themsel… |
CWE-79
Cross-site Scripting |
CVE-2017-5458 | 2024-11-21 12:27 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |