Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251911 9.3 危険 マイクロソフト - Microsoft Windows の kernel における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-2514 2010-01-4 15:24 2009-11-10 Show GitHub Exploit DB Packet Storm
251912 6.8 警告 マイクロソフト - Microsoft Windows の kernel の Graphics Device Interface (GDI) における権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-2513 2010-01-4 15:24 2009-11-10 Show GitHub Exploit DB Packet Storm
251913 6.8 警告 マイクロソフト - Microsoft Windows の kernel における権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-1127 2010-01-4 15:24 2009-11-10 Show GitHub Exploit DB Packet Storm
251914 10 危険 マイクロソフト - Microsoft Windows の License Logging Server (llssrv.exe) における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2009-2523 2010-01-4 15:24 2009-11-10 Show GitHub Exploit DB Packet Storm
251915 9.3 危険 マイクロソフト - Microsoft Windows の Web Services on Devices API (WSDAPI) における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-2512 2010-01-4 15:23 2009-11-10 Show GitHub Exploit DB Packet Storm
251916 10 危険 アップル
VMware
サン・マイクロシステムズ		 - Sun Java SE の Provider クラスにおける詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2009-2722 2010-01-4 14:56 2009-08-10 Show GitHub Exploit DB Packet Storm
251917 10 危険 アップル
VMware
サン・マイクロシステムズ		 - Sun Java SE の Provider クラスにおける詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2009-2723 2010-01-4 14:55 2009-08-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 16, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1851 7.7 HIGH
Network 		mozilla firefox
thunderbird 		Al segmentar texto especialmente manipulado, la segmentación corrompía la memoria y provocaba un bloqueo que podía explotarse. Esta vulnerabilidad afecta a Firefox < 134 y Firefox ESR < 128.6. Update CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2025-0241 2026-04-14 00:16 2025-01-8 Show GitHub Exploit DB Packet Storm
1852 4.0 MEDIUM
Local 		mozilla firefox
thunderbird 		Parsing a JavaScript module as JSON could, under some circumstances, cause cross-compartment access, which may result in a use-after-free. This vulnerability was fixed in Firefox 134, Firefox ESR 128… Update CWE-416
 Use After Free 		CVE-2025-0240 2026-04-14 00:16 2025-01-8 Show GitHub Exploit DB Packet Storm
1853 4.0 MEDIUM
Local 		mozilla firefox
thunderbird 		Analizar un módulo de JavaScript como JSON podría, en algunas circunstancias, provocar un acceso entre compartimentos, lo que puede dar lugar a use-after-free. Esta vulnerabilidad afecta a Firefox &l… Update CWE-416
 Use After Free 		CVE-2025-0240 2026-04-14 00:16 2025-01-8 Show GitHub Exploit DB Packet Storm
1854 4.0 MEDIUM
Local 		mozilla firefox
thunderbird 		When using Alt-Svc, ALPN did not properly validate certificates when the original server is redirecting to an insecure site. This vulnerability was fixed in Firefox 134, Firefox ESR 128.6, Thunderbir… Update CWE-295
Improper Certificate Validation  		CVE-2025-0239 2026-04-14 00:16 2025-01-8 Show GitHub Exploit DB Packet Storm
1855 4.0 MEDIUM
Local 		mozilla firefox
thunderbird 		Al utilizar Alt-Svc, ALPN no validó correctamente los certificados cuando el servidor original redireccionaba a un sitio inseguro. Esta vulnerabilidad afecta a Firefox < 134 y Firefox ESR < 128… Update CWE-295
Improper Certificate Validation  		CVE-2025-0239 2026-04-14 00:16 2025-01-8 Show GitHub Exploit DB Packet Storm
1856 5.3 MEDIUM
Network 		mozilla firefox
thunderbird 		Assuming a controlled failed memory allocation, an attacker could have caused a use-after-free, leading to a potentially exploitable crash. This vulnerability was fixed in Firefox 134, Firefox ESR 12… Update CWE-416
 Use After Free 		CVE-2025-0238 2026-04-14 00:16 2025-01-8 Show GitHub Exploit DB Packet Storm
1857 5.3 MEDIUM
Network 		mozilla firefox
thunderbird 		Suponiendo que se haya producido una asignación de memoria fallida y controlada, un atacante podría haber provocado un error de use-after-free, lo que habría provocado un bloqueo potencialmente explo… Update CWE-416
 Use After Free 		CVE-2025-0238 2026-04-14 00:16 2025-01-8 Show GitHub Exploit DB Packet Storm
1858 5.4 MEDIUM
Network 		mozilla firefox
thunderbird 		The WebChannel API, which is used to transport various information across processes, did not check the sending principal but rather accepted the principal being sent. This could have led to privilege… Update CWE-863
 Incorrect Authorization 		CVE-2025-0237 2026-04-14 00:16 2025-01-8 Show GitHub Exploit DB Packet Storm
1859 5.4 MEDIUM
Network 		mozilla firefox
thunderbird 		La WebChannel API, que se utiliza para transportar información diversa entre procesos, no comprobó el principal de envío, sino que aceptó el principal enviado. Esto podría haber provocado ataques de … Update CWE-863
 Incorrect Authorization 		CVE-2025-0237 2026-04-14 00:16 2025-01-8 Show GitHub Exploit DB Packet Storm
1860 6.1 MEDIUM
Network 		jquery
drupal
debian
fedoraproject
oracle
netapp
opensuse
tenable 		jquery
drupal
debian_linux
fedora
agile_product_lifecycle_management_for_process
application_testing_suite
banking_digital_experience
blockchain_platform
communications_applic… 		In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may… Update CWE-79
Cross-site Scripting 		CVE-2020-11022 2026-04-14 00:16 2020-04-30 Show GitHub Exploit DB Packet Storm