Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 9, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 252271 | 6.8 | 警告 | The PHP Group アップル サイバートラスト株式会社 レッドハット |
- | PHP の utf8_decode 関数におけるクロスサイトスクリプティングおよび SQL インジェクションに対する保護メカニズムを回避される脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2010-3870 | 2011-04-4 14:29 | 2009-09-27 | Show | GitHub Exploit DB Packet Storm |
| 252272 | 9.3 | 危険 | アップル | - | Apple QuickTime における整数オーバーフローの脆弱性 |
CWE-189
数値処理の問題 |
CVE-2010-4009 | 2011-04-4 14:28 | 2010-12-9 | Show | GitHub Exploit DB Packet Storm |
| 252273 | 6.8 | 警告 | アップル FreeType Project オラクル |
- | FreeType の ttinterp.c 内にある Ins_SHZ 関数におけるヒープベースのバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2010-3814 | 2011-04-4 14:27 | 2010-11-26 | Show | GitHub Exploit DB Packet Storm |
| 252274 | 9.3 | 危険 | アップル | - | Apple QuickTime における整数符号エラーの脆弱性 |
CWE-189
数値処理の問題 |
CVE-2010-3802 | 2011-04-4 14:23 | 2010-12-9 | Show | GitHub Exploit DB Packet Storm |
| 252275 | 9.3 | 危険 | アップル | - | Apple QuickTime における任意のコードを実行される脆弱性 |
CWE-119
バッファエラー |
CVE-2010-3801 | 2011-04-4 14:22 | 2010-12-9 | Show | GitHub Exploit DB Packet Storm |
| 252276 | 4.3 | 警告 | The PHP Group アップル レッドハット |
- | PHP の filter_var 関数におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-399
リソース管理の問題 |
CVE-2010-3710 | 2011-04-4 14:20 | 2010-10-25 | Show | GitHub Exploit DB Packet Storm |
| 252277 | 4.3 | 警告 | The PHP Group アップル レッドハット |
- | PHP の ZipArchive::getArchiveComment 関数におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2010-3709 | 2011-04-4 14:18 | 2010-11-9 | Show | GitHub Exploit DB Packet Storm |
| 252278 | 7.6 | 危険 | アップル | - | 複数の Apple 製品の WebKit における任意のコードを実行される脆弱性 |
CWE-119
バッファエラー |
CVE-2011-0150 | 2011-04-1 15:32 | 2011-03-3 | Show | GitHub Exploit DB Packet Storm |
| 252279 | 7.6 | 危険 | アップル | - | 複数の Apple 製品の WebKit における任意のコードを実行される脆弱性 |
CWE-119
バッファエラー |
CVE-2011-0149 | 2011-04-1 15:31 | 2011-03-3 | Show | GitHub Exploit DB Packet Storm |
| 252280 | 7.6 | 危険 | アップル | - | 複数の Apple 製品の WebKit における任意のコードを実行される脆弱性 |
CWE-119
バッファエラー |
CVE-2011-0148 | 2011-04-1 15:24 | 2011-03-3 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 10, 2026, 4:58 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 248061 | 9.8 |
CRITICAL
Network |
mozilla |
thunderbird firefox |
When adding a range to an object in the DOM, it is possible to use "addRange" to add the range to an incorrect root object. This triggers a use-after-free, resulting in a potentially exploitable cras… |
CWE-416
Use After Free |
CVE-2017-5403 | 2024-11-21 12:27 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |
| 248062 | 9.8 |
CRITICAL
Network |
debian redhat mozilla |
debian_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation enterprise_linux enterprise_linux_server_aus enterprise_linux_server_eus thunderbird
A use-after-free can occur when events are fired for a "FontFace" object after the object has been already been destroyed while working with fonts. This results in a potentially exploitable crash. Th…
|
CWE-416
|
Use After Free
CVE-2017-5402
|
2024-11-21 12:27 |
2018-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 248063 | 9.8 |
CRITICAL
Network |
debian redhat mozilla |
debian_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation enterprise_linux enterprise_linux_server_aus enterprise_linux_server_eus thunderbird
A crash triggerable by web content in which an "ErrorResult" references unassigned memory due to a logic error. The resulting crash may be exploitable. This vulnerability affects Firefox < 52, Firefo…
|
CWE-388
|
7PK - Errors
CVE-2017-5401
|
2024-11-21 12:27 |
2018-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 248064 | 9.8 |
CRITICAL
Network |
redhat debian mozilla |
enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation enterprise_linux_server_aus enterprise_linux_server_eus debian_linux firefox thunderbird firefox_… |
JIT-spray targeting asm.js combined with a heap spray allows for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. This vulnerability affects Firefox < 52, Firefox … |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2017-5400 | 2024-11-21 12:27 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |
| 248065 | 9.8 |
CRITICAL
Network |
mozilla |
firefox thunderbird |
Memory safety bugs were reported in Firefox 51. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary c… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2017-5399 | 2024-11-21 12:27 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |
| 248066 | 9.8 |
CRITICAL
Network |
mozilla | firefox | The cache directory on the local file system is set to be world writable. Firefox defaults to extracting libraries from this cache. This allows for the possibility of an installed malicious applicati… |
CWE-829
Inclusion of Functionality from Untrusted Control Sphere |
CVE-2017-5397 | 2024-11-21 12:27 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |
| 248067 | 9.8 |
CRITICAL
Network |
debian redhat mozilla |
debian_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation enterprise_linux_server_aus enterprise_linux_server_eus firefox firefox_esr thunderb… |
Memory safety bugs were reported in Thunderbird 45.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbit… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2017-5398 | 2024-11-21 12:27 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |
| 248068 | 9.8 |
CRITICAL
Network |
debian redhat mozilla |
debian_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation enterprise_linux enterprise_linux_server_aus enterprise_linux_server_eus thunderbird
A use-after-free vulnerability in the Media Decoder when working with media files when some events are fired after the media elements are freed from memory. This vulnerability affects Thunderbird < 4…
|
CWE-416
|
Use After Free
CVE-2017-5396
|
2024-11-21 12:27 |
2018-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 248069 | 4.3 |
MEDIUM
Network |
mozilla | firefox | Malicious sites can display a spoofed location bar on a subsequently loaded page when the existing location bar on the new page is scrolled out of view if navigations between pages can be timed corre… |
CWE-20
Improper Input Validation |
CVE-2017-5395 | 2024-11-21 12:27 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |
| 248070 | 8.8 |
HIGH
Network |
mozilla | firefox | A location bar spoofing attack where the location bar of loaded page will be shown over the content of another tab due to a series of JavaScript events combined with fullscreen mode. Note: This issue… |
CWE-352
Origin Validation Error |
CVE-2017-5394 | 2024-11-21 12:27 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |