Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 15, 2026, 4 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 252271 | 4.3 | 警告 | MantisBT Group | - | MantisBT の bug_actiongroup_ext_page.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2011-3578 | 2011-09-27 11:19 | 2011-08-31 | Show | GitHub Exploit DB Packet Storm |
| 252272 | 4.3 | 警告 | MantisBT Group | - | MantisBT におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2011-3358 | 2011-09-27 11:18 | 2011-09-21 | Show | GitHub Exploit DB Packet Storm |
| 252273 | 6.8 | 警告 | MantisBT Group | - | MantisBT の bug_actiongroup_ext_page.php におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2011-3357 | 2011-09-27 11:17 | 2011-08-31 | Show | GitHub Exploit DB Packet Storm |
| 252274 | 4.3 | 警告 | MantisBT Group | - | MantisBT の filter_api.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2011-2938 | 2011-09-27 11:15 | 2011-08-18 | Show | GitHub Exploit DB Packet Storm |
| 252275 | 4.3 | 警告 | MantisBT Group | - | MantisBT の config_defaults_inc.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2011-3356 | 2011-09-27 11:12 | 2011-07-31 | Show | GitHub Exploit DB Packet Storm |
| 252276 | 10 | 危険 | シスコシステムズ | - | Cisco Identity Services Engine における設定を変更される脆弱性 |
CWE-255
証明書・パスワード管理 |
CVE-2011-3290 | 2011-09-27 11:07 | 2011-09-20 | Show | GitHub Exploit DB Packet Storm |
| 252277 | 4.3 | 警告 | Roundcube.net | - | Roundcube Webmail の UI メッセージ機能におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2011-2937 | 2011-09-27 11:05 | 2011-08-9 | Show | GitHub Exploit DB Packet Storm |
| 252278 | 6.8 | 警告 | AmmSoft | - | AmmSoft ScriptFTP にバッファオーバーフローの脆弱性 | - | CVE-2011-3976 | 2011-09-27 10:58 | 2011-09-21 | Show | GitHub Exploit DB Packet Storm |
| 252279 | 10 | 危険 | Measuresoft Development Ltd. | - | Measuresoft ScadaPro の service.exe におけるスタックベースのバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2011-3490 | 2011-09-26 15:59 | 2011-09-16 | Show | GitHub Exploit DB Packet Storm |
| 252280 | 4.6 | 警告 | レッドハット | - | Red Hat Enterprise MRG の Cumin における認証を回避される脆弱性 |
CWE-287
不適切な認証 |
CVE-2011-2925 | 2011-09-26 15:43 | 2011-09-7 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 15, 2026, 4:28 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 247711 | 4.7 |
MEDIUM
Local |
mozilla | firefox | On Windows systems, the logger run by the Windows updater deletes the file "update.log" before it runs in order to write a new log of that name. The path to this file is supplied at the command line … |
CWE-20
Improper Input Validation |
CVE-2017-7796 | 2024-11-21 12:32 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |
| 247712 | 7.8 |
HIGH
Local |
mozilla | firefox | On Linux systems, if the content process is compromised, the sandbox broker will allow files to be truncated even though the sandbox explicitly only has read access to the local file system and no wr… |
CWE-276
Incorrect Default Permissions |
CVE-2017-7794 | 2024-11-21 12:32 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |
| 247713 | 9.8 |
CRITICAL
Network |
debian redhat mozilla |
debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus firefox fir… |
A use-after-free vulnerability can occur when manipulating the DOM during the resize event of an image element. If these elements have been freed due to a lack of strong references, a potentially exp… |
CWE-416
Use After Free |
CVE-2017-7802 | 2024-11-21 12:32 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |
| 247714 | 9.8 |
CRITICAL
Network |
debian redhat mozilla |
debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus firefox fir… |
A use-after-free vulnerability can occur while re-computing layout for a "marquee" element during window resizing where the updated style object is freed while still in use. This results in a potenti… |
CWE-416
Use After Free |
CVE-2017-7801 | 2024-11-21 12:32 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |
| 247715 | 9.8 |
CRITICAL
Network |
debian redhat mozilla |
debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus firefox fir… |
A use-after-free vulnerability can occur in WebSockets when the object holding the connection is freed before the disconnection operation is finished. This results in an exploitable crash. This vulne… |
CWE-416
Use After Free |
CVE-2017-7800 | 2024-11-21 12:32 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |
| 247716 | 8.8 |
HIGH
Network |
debian redhat mozilla |
debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus firefox fir… |
The Developer Tools feature suffers from a XUL injection vulnerability due to improper sanitization of the web page source code. In the worst case, this could allow arbitrary code execution when open… |
CWE-94
Code Injection |
CVE-2017-7798 | 2024-11-21 12:32 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |
| 247717 | 9.8 |
CRITICAL
Network |
debian redhat mozilla |
debian_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation enterprise_linux enterprise_linux_server_aus enterprise_linux_server_eus thunderbird
A use-after-free vulnerability can occur in the Fetch API when the worker or the associated window are freed when still in use, resulting in a potentially exploitable crash. This vulnerability affect…
|
CWE-416
|
Use After Free
CVE-2017-7793
|
2024-11-21 12:32 |
2018-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 247718 | 9.8 |
CRITICAL
Network |
debian redhat mozilla |
debian_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation enterprise_linux enterprise_linux_server_aus enterprise_linux_server_eus thunderbird
A buffer overflow will occur when viewing a certificate in the certificate manager if the certificate has an extremely long object identifier (OID). This results in a potentially exploitable crash. T…
|
CWE-119
|
Incorrect Access of Indexable Resource ('Range Error')
CVE-2017-7792
|
2024-11-21 12:32 |
2018-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 247719 | 7.5 |
HIGH
Network |
mozilla | firefox | On Windows systems, if non-null-terminated strings are copied into the crash reporter for some specific registry keys, stack memory data can be copied until a null is found. This can potentially cont… |
NVD-CWE-noinfo
|
CVE-2017-7790 | 2024-11-21 12:32 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |
| 247720 | 5.3 |
MEDIUM
Network |
mozilla | firefox | If a server sends two Strict-Transport-Security (STS) headers for a single connection, they will be rejected as invalid and HTTP Strict Transport Security (HSTS) will not be enabled for the connectio… |
NVD-CWE-noinfo
|
CVE-2017-7789 | 2024-11-21 12:32 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |