Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 10, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 251981 | 4.3 | 警告 | サイバートラスト株式会社 Mozilla Foundation レッドハット オラクル |
- | 複数の Mozilla 製品におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-2769 | 2011-05-17 09:01 | 2010-09-7 | Show | GitHub Exploit DB Packet Storm |
| 251982 | 4.3 | 警告 | サイバートラスト株式会社 Mozilla Foundation レッドハット オラクル |
- | 複数の Mozilla 製品におけるクロスサイトスクリプティングに対する保護メカニズムを回避される脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-2768 | 2011-05-17 09:00 | 2010-09-7 | Show | GitHub Exploit DB Packet Storm |
| 251983 | 4.3 | 警告 | サイバートラスト株式会社 Mozilla Foundation レッドハット オラクル |
- | 複数の Mozilla 製品におけるイントラネット上の Web サーバの存在を発見される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2010-2764 | 2011-05-17 08:59 | 2010-09-7 | Show | GitHub Exploit DB Packet Storm |
| 251984 | 6.8 | 警告 | サイバートラスト株式会社 Mozilla Foundation レッドハット オラクル |
- | Mozilla 製品の SafeJSObjectWrapper 実装におけるクローム特権で任意の JavaScript コードを実行される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2010-2762 | 2011-05-17 08:56 | 2010-09-7 | Show | GitHub Exploit DB Packet Storm |
| 251985 | 9.3 | 危険 | サイバートラスト株式会社 Mozilla Foundation レッドハット オラクル |
- | 複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性 |
CWE-noinfo
情報不足 |
CVE-2010-3169 | 2011-05-17 08:55 | 2010-09-7 | Show | GitHub Exploit DB Packet Storm |
| 251986 | 9.3 | 危険 | サイバートラスト株式会社 Mozilla Foundation レッドハット オラクル |
- | 複数の Mozilla 製品における任意のコードを実行される脆弱性 |
CWE-119
バッファエラー |
CVE-2010-3168 | 2011-05-17 08:53 | 2010-09-7 | Show | GitHub Exploit DB Packet Storm |
| 251987 | 9.3 | 危険 | サイバートラスト株式会社 Mozilla Foundation レッドハット オラクル |
- | 複数の Mozilla 製品の nsTreeContentView 関数における任意のコードを実行される脆弱性 |
CWE-119 CWE-399 |
CVE-2010-3167 | 2011-05-17 08:52 | 2010-09-7 | Show | GitHub Exploit DB Packet Storm |
| 251988 | 9.3 | 危険 | サイバートラスト株式会社 Mozilla Foundation レッドハット オラクル |
- | 複数の Mozilla 製品の nsTextFrameUtils::TransformText 関数におけるヒープベースのバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2010-3166 | 2011-05-17 08:50 | 2010-09-7 | Show | GitHub Exploit DB Packet Storm |
| 251989 | 4 | 警告 | オラクル | - | OpenSSO Enterprise および Sun Java System Access Manager における脆弱性 |
CWE-noinfo
情報不足 |
CVE-2011-0847 | 2011-05-16 11:38 | 2011-04-19 | Show | GitHub Exploit DB Packet Storm |
| 251990 | 5 | 警告 | オラクル | - | Oracle Sun Java System Access Manager Policy Agent における脆弱性 |
CWE-noinfo
情報不足 |
CVE-2011-0846 | 2011-05-16 11:37 | 2011-04-19 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 11, 2026, 4:09 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 248141 | 8.6 |
HIGH
Network |
debian redhat mozilla |
debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus firefox_esr
An out-of-bounds write in "ClearKeyDecryptor" while decrypting some Clearkey-encrypted media content. The "ClearKeyDecryptor" code runs within the Gecko Media Plugin (GMP) sandbox. If a second mechan…
|
CWE-787
|
Out-of-bounds Write
CVE-2017-5448
|
2024-11-21 12:27 |
2018-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 248142 | 9.1 |
CRITICAL
Network |
debian redhat mozilla |
debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus thunderbird
An out-of-bounds read during the processing of glyph widths during text layout. This results in a potentially exploitable crash and could allow an attacker to read otherwise inaccessible memory. This…
|
CWE-416
|
Use After Free
CVE-2017-5447
|
2024-11-21 12:27 |
2018-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 248143 | 9.8 |
CRITICAL
Network |
debian redhat mozilla |
debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus thunderbird
An out-of-bounds read when an HTTP/2 connection to a servers sends "DATA" frames with incorrect data content. This leads to a potentially exploitable crash. This vulnerability affects Thunderbird < 5…
|
CWE-125
|
Out-of-bounds Read
CVE-2017-5446
|
2024-11-21 12:27 |
2018-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 248144 | 9.8 |
CRITICAL
Network |
debian redhat mozilla |
debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus thunderbird
An out-of-bounds write vulnerability while decoding improperly formed BinHex format archives. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.
|
CWE-787
|
Out-of-bounds Write
CVE-2017-5443
|
2024-11-21 12:27 |
2018-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 248145 | 9.8 |
CRITICAL
Network |
debian redhat mozilla |
debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus thunderbird
A use-after-free vulnerability during changes in style when manipulating DOM elements. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45…
|
CWE-416
|
Use After Free
CVE-2017-5442
|
2024-11-21 12:27 |
2018-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 248146 | 9.8 |
CRITICAL
Network |
debian redhat mozilla |
debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus thunderbird
A use-after-free vulnerability when holding a selection during scroll events. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firef…
|
CWE-416
|
Use After Free
CVE-2017-5441
|
2024-11-21 12:27 |
2018-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 248147 | 7.5 |
HIGH
Network |
debian redhat mozilla |
debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus thunderbird
A vulnerability while parsing "application/http-index-format" format content where uninitialized values are used to create an array. This could allow the reading of uninitialized memory into the arra…
|
CWE-129
|
Improper Validation of Array Index
CVE-2017-5445
|
2024-11-21 12:27 |
2018-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 248148 | 7.5 |
HIGH
Network |
debian redhat mozilla |
debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus thunderbird
A buffer overflow vulnerability while parsing "application/http-index-format" format content when the header contains improperly formatted data. This allows for an out-of-bounds read of data from mem…
|
CWE-119
|
Incorrect Access of Indexable Resource ('Range Error')
CVE-2017-5444
|
2024-11-21 12:27 |
2018-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 248149 | 9.8 |
CRITICAL
Network |
debian redhat mozilla |
debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus thunderbird
A use-after-free vulnerability during XSLT processing due to a failure to propagate error conditions during matching while evaluating context, leading to objects being used when they no longer exist.…
|
CWE-416
|
Use After Free
CVE-2017-5440
|
2024-11-21 12:27 |
2018-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 248150 | 9.8 |
CRITICAL
Network |
debian redhat mozilla |
debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus firefox thu… |
A use-after-free vulnerability during XSLT processing due to poor handling of template parameters. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Fire… |
CWE-416
Use After Free |
CVE-2017-5439 | 2024-11-21 12:27 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |