Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 9, 2026, noon
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 252501 | 5 | 警告 | マイクロソフト VMware |
- | Microsoft SQL Server のメモリ再配置の際メモリページを初期化しない脆弱性 |
CWE-200
情報漏えい |
CVE-2008-0085 | 2011-03-4 10:34 | 2008-07-8 | Show | GitHub Exploit DB Packet Storm |
| 252502 | 9 | 危険 | マイクロソフト VMware |
- | Microsoft SQL Server の sp_replwritetovarbin 拡張ストアド プロシージャの処理における脆弱性 |
CWE-119
バッファエラー |
CVE-2008-5416 | 2011-03-4 10:33 | 2008-12-25 | Show | GitHub Exploit DB Packet Storm |
| 252503 | 9.3 | 危険 | Sielco Sistemi | - | Sielco Sistemi Winlog にバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2011-0517 | 2011-03-3 16:57 | 2011-02-7 | Show | GitHub Exploit DB Packet Storm |
| 252504 | 9.3 | 危険 | Moxa Inc. | - | MOXA Device Manager MDM Tool にバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2010-4741 | 2011-03-3 16:54 | 2011-02-7 | Show | GitHub Exploit DB Packet Storm |
| 252505 | 9.3 | 危険 | SCADA Engine | - | SCADA Engine BACnet OPC Client におけるバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2010-4740 | 2011-03-3 16:51 | 2011-02-7 | Show | GitHub Exploit DB Packet Storm |
| 252506 | 5 | 警告 | Majordomo 2 | - | Majordomo 2 におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2011-0049 | 2011-03-3 16:47 | 2011-02-7 | Show | GitHub Exploit DB Packet Storm |
| 252507 | 7.6 | 危険 | Automated Solutions, Inc | - | Automated Solutions Modbus/TCP Master OPC Server におけるバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2010-4709 | 2011-03-3 16:32 | 2011-02-7 | Show | GitHub Exploit DB Packet Storm |
| 252508 | 10 | 危険 | シスコシステムズ | - | Cisco Tandberg E, EX および C Series における root アカウントのデフォルト認証情報の問題 |
CWE-255
証明書・パスワード管理 |
CVE-2011-0354 | 2011-03-3 16:28 | 2011-02-4 | Show | GitHub Exploit DB Packet Storm |
| 252509 | 4.6 | 警告 | サイバートラスト株式会社 VMware Linux レッドハット |
- | Linux kernel の do_gfs2_set_flags 関数におけるアクセス制限を回避される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2010-1641 | 2011-03-3 13:41 | 2010-06-1 | Show | GitHub Exploit DB Packet Storm |
| 252510 | 4.9 | 警告 | サイバートラスト株式会社 VMware Linux レッドハット |
- | Linux kernel の gfs2 におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-399
リソース管理の問題 |
CVE-2010-1436 | 2011-03-3 13:39 | 2010-05-21 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 9, 2026, 5:07 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 247961 | 9.8 |
CRITICAL
Network |
mozilla |
thunderbird firefox |
When adding a range to an object in the DOM, it is possible to use "addRange" to add the range to an incorrect root object. This triggers a use-after-free, resulting in a potentially exploitable cras… |
CWE-416
Use After Free |
CVE-2017-5403 | 2024-11-21 12:27 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |
| 247962 | 9.8 |
CRITICAL
Network |
debian redhat mozilla |
debian_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation enterprise_linux enterprise_linux_server_aus enterprise_linux_server_eus thunderbird
A use-after-free can occur when events are fired for a "FontFace" object after the object has been already been destroyed while working with fonts. This results in a potentially exploitable crash. Th…
|
CWE-416
|
Use After Free
CVE-2017-5402
|
2024-11-21 12:27 |
2018-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 247963 | 9.8 |
CRITICAL
Network |
debian redhat mozilla |
debian_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation enterprise_linux enterprise_linux_server_aus enterprise_linux_server_eus thunderbird
A crash triggerable by web content in which an "ErrorResult" references unassigned memory due to a logic error. The resulting crash may be exploitable. This vulnerability affects Firefox < 52, Firefo…
|
CWE-388
|
7PK - Errors
CVE-2017-5401
|
2024-11-21 12:27 |
2018-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 247964 | 9.8 |
CRITICAL
Network |
redhat debian mozilla |
enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation enterprise_linux_server_aus enterprise_linux_server_eus debian_linux firefox thunderbird firefox_… |
JIT-spray targeting asm.js combined with a heap spray allows for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. This vulnerability affects Firefox < 52, Firefox … |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2017-5400 | 2024-11-21 12:27 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |
| 247965 | 9.8 |
CRITICAL
Network |
mozilla |
firefox thunderbird |
Memory safety bugs were reported in Firefox 51. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary c… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2017-5399 | 2024-11-21 12:27 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |
| 247966 | 9.8 |
CRITICAL
Network |
mozilla | firefox | The cache directory on the local file system is set to be world writable. Firefox defaults to extracting libraries from this cache. This allows for the possibility of an installed malicious applicati… |
CWE-829
Inclusion of Functionality from Untrusted Control Sphere |
CVE-2017-5397 | 2024-11-21 12:27 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |
| 247967 | 9.8 |
CRITICAL
Network |
debian redhat mozilla |
debian_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation enterprise_linux_server_aus enterprise_linux_server_eus firefox firefox_esr thunderb… |
Memory safety bugs were reported in Thunderbird 45.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbit… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2017-5398 | 2024-11-21 12:27 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |
| 247968 | 9.8 |
CRITICAL
Network |
debian redhat mozilla |
debian_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation enterprise_linux enterprise_linux_server_aus enterprise_linux_server_eus thunderbird
A use-after-free vulnerability in the Media Decoder when working with media files when some events are fired after the media elements are freed from memory. This vulnerability affects Thunderbird < 4…
|
CWE-416
|
Use After Free
CVE-2017-5396
|
2024-11-21 12:27 |
2018-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 247969 | 4.3 |
MEDIUM
Network |
mozilla | firefox | Malicious sites can display a spoofed location bar on a subsequently loaded page when the existing location bar on the new page is scrolled out of view if navigations between pages can be timed corre… |
CWE-20
Improper Input Validation |
CVE-2017-5395 | 2024-11-21 12:27 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |
| 247970 | 8.8 |
HIGH
Network |
mozilla | firefox | A location bar spoofing attack where the location bar of loaded page will be shown over the content of another tab due to a series of JavaScript events combined with fullscreen mode. Note: This issue… |
CWE-352
Origin Validation Error |
CVE-2017-5394 | 2024-11-21 12:27 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |