Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 3, 2026, 6:08 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 254131 | 4.9 | 警告 | baserCMSユーザー会 | - | BaserCMS におけるアクセス制限不備の脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2011-2674 | 2011-09-30 12:04 | 2011-09-30 | Show | GitHub Exploit DB Packet Storm |
| 254132 | 4.3 | 警告 | baserCMSユーザー会 | - | BaserCMS におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2011-2673 | 2011-09-30 12:03 | 2011-09-30 | Show | GitHub Exploit DB Packet Storm |
| 254133 | 5 | 警告 | Joomla! | - | Joomla! における重要な情報を取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2011-3747 | 2011-09-29 16:56 | 2011-09-23 | Show | GitHub Exploit DB Packet Storm |
| 254134 | 9.3 | 危険 | Argonne National Laboratory | - | Bcfg2 のサーバにおける任意のコマンドを実行される脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2011-3211 | 2011-09-29 14:30 | 2011-09-16 | Show | GitHub Exploit DB Packet Storm |
| 254135 | 9.3 | 危険 | シーメンス | - | Siemens WinCC Runtime Advanced Loader におけるヒープベースのバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2011-3321 | 2011-09-29 14:27 | 2011-08-29 | Show | GitHub Exploit DB Packet Storm |
| 254136 | 10 | 危険 | Progea Srl | - | Progea Movicon / PowerHMI におけるヒープベースのバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2011-3498 | 2011-09-29 14:17 | 2011-09-16 | Show | GitHub Exploit DB Packet Storm |
| 254137 | 5 | 警告 | Cogent Real-Time Systems Inc. | - | Cogent DataHub の Web サーバにおける実行ファイルのソースコードを取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2011-3502 | 2011-09-29 14:11 | 2011-09-16 | Show | GitHub Exploit DB Packet Storm |
| 254138 | 9.3 | 危険 | Interactive Data Corporation. | - | eSignal における任意のコードを実行される脆弱性 |
CWE-Other
その他 |
CVE-2011-3503 | 2011-09-29 14:05 | 2011-09-16 | Show | GitHub Exploit DB Packet Storm |
| 254139 | 7.7 | 危険 | DELL EMC (旧 EMC Corporation) | - | EMC Avamar におけるクライアントデータを変更される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2011-1740 | 2011-09-29 14:04 | 2011-09-19 | Show | GitHub Exploit DB Packet Storm |
| 254140 | 9 | 危険 | シスコシステムズ | - | Cisco Telepresence System Integrator C の cuil コンポーネントにおけるバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2011-2543 | 2011-09-28 15:08 | 2011-09-23 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 3, 2026, 4:18 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 246411 | 9.8 |
CRITICAL
Network |
redhat debian canonical mozilla |
enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus enterprise_linux_server_tus debian_linux ubu… |
A use-after-free vulnerability can occur when an IndexedDB index is deleted while still in use by JavaScript code that is providing payload values to be stored. This results in a potentially exploita… |
CWE-416
Use After Free |
CVE-2018-12378 | 2024-11-21 12:45 | 2018-10-18 | Show | GitHub Exploit DB Packet Storm |
| 246412 | 9.8 |
CRITICAL
Network |
redhat debian canonical mozilla |
enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_eus enterprise_linux_server_tus enterprise_linux_server_aus debian_linux ubu… |
A use-after-free vulnerability can occur when refresh driver timers are refreshed in some circumstances during shutdown when the timer is deleted while still in use. This results in a potentially exp… |
CWE-416
Use After Free |
CVE-2018-12377 | 2024-11-21 12:45 | 2018-10-18 | Show | GitHub Exploit DB Packet Storm |
| 246413 | 9.8 |
CRITICAL
Network |
redhat debian canonical mozilla |
enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_eus enterprise_linux_server_tus enterprise_linux_server_aus debian_linux ubu… |
Memory safety bugs present in Firefox 61 and Firefox ESR 60.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to … |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2018-12376 | 2024-11-21 12:45 | 2018-10-18 | Show | GitHub Exploit DB Packet Storm |
| 246414 | 8.1 |
HIGH
Network |
mozilla |
firefox firefox_esr thunderbird |
Windows 10 does not warn users before opening executable files with the SettingContent-ms extension even when they have been downloaded from the internet and have the "Mark of the Web." Without the w… |
NVD-CWE-noinfo
|
CVE-2018-12368 | 2024-11-21 12:45 | 2018-10-18 | Show | GitHub Exploit DB Packet Storm |
| 246415 | 4.3 |
MEDIUM
Network |
debian canonical mozilla |
debian_linux ubuntu_linux firefox thunderbird firefox_esr |
In the previous mitigations for Spectre, the resolution or precision of various methods was reduced to counteract the ability to measure precise time intervals. In that work PerformanceNavigationTimi… |
CWE-20
Improper Input Validation |
CVE-2018-12367 | 2024-11-21 12:45 | 2018-10-18 | Show | GitHub Exploit DB Packet Storm |
| 246416 | 8.8 |
HIGH
Network |
mozilla debian canonical |
firefox thunderbird firefox_esr debian_linux ubuntu_linux |
An integer overflow can occur in the SwizzleData code while calculating buffer sizes. The overflowed value is used for subsequent graphics computations when their inputs are not sanitized which resul… |
CWE-190
Integer Overflow or Wraparound |
CVE-2018-12361 | 2024-11-21 12:45 | 2018-10-18 | Show | GitHub Exploit DB Packet Storm |
| 246417 | 4.3 |
MEDIUM
Network |
mozilla canonical |
firefox ubuntu_linux |
Service workers can use redirection to avoid the tainting of cross-origin resources in some instances, allowing a malicious site to read responses which are supposed to be opaque. This vulnerability … |
CWE-200
Information Exposure |
CVE-2018-12358 | 2024-11-21 12:45 | 2018-10-18 | Show | GitHub Exploit DB Packet Storm |
| 246418 | 6.5 |
MEDIUM
Network |
redhat debian canonical mozilla |
enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_eus enterprise_linux_server_tus enterprise_linux_server_aus debian_linux ubu… |
An invalid grid size during QCMS (color profile) transformations can result in the out-of-bounds read interpreted as a float value. This could leak private data into the output. This vulnerability af… |
CWE-125
Out-of-bounds Read |
CVE-2018-12366 | 2024-11-21 12:45 | 2018-10-18 | Show | GitHub Exploit DB Packet Storm |
| 246419 | 6.5 |
MEDIUM
Network |
redhat debian canonical mozilla |
enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_eus enterprise_linux_server_tus enterprise_linux_server_aus debian_linux ubu… |
A compromised IPC child process can escape the content sandbox and list the names of arbitrary files on the file system without user consent or interaction. This could result in exposure of private l… |
CWE-200
Information Exposure |
CVE-2018-12365 | 2024-11-21 12:45 | 2018-10-18 | Show | GitHub Exploit DB Packet Storm |
| 246420 | 8.8 |
HIGH
Network |
redhat debian canonical mozilla |
enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_eus enterprise_linux_server_tus enterprise_linux_server_aus debian_linux ubu… |
NPAPI plugins, such as Adobe Flash, can send non-simple cross-origin requests, bypassing CORS by making a same-origin POST that does a 307 redirect to the target site. This allows for a malicious sit… |
CWE-352
Origin Validation Error |
CVE-2018-12364 | 2024-11-21 12:45 | 2018-10-18 | Show | GitHub Exploit DB Packet Storm |