Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
254921 10 危険 オラクル - Oracle Secure Backup における脆弱性 CWE-noinfo
情報不足
CVE-2010-0898 2010-08-5 16:31 2010-07-13 Show GitHub Exploit DB Packet Storm
254922 5 警告 オラクル - Oracle TimesTen In-Memory Database の Data Server コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-0910 2010-08-5 16:31 2010-07-13 Show GitHub Exploit DB Packet Storm
254923 10 危険 オラクル - Oracle TimesTen In-Memory Database の Data Server コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-0873 2010-08-5 16:30 2010-07-13 Show GitHub Exploit DB Packet Storm
254924 3.2 注意 オラクル - Oracle Solaris における Solaris Management コンソールの処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2010-2384 2010-08-4 16:26 2010-07-13 Show GitHub Exploit DB Packet Storm
254925 3.2 注意 オラクル - Oracle Solaris における NFS の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2010-2383 2010-08-4 16:25 2010-07-13 Show GitHub Exploit DB Packet Storm
254926 3.2 注意 オラクル - Oracle Solaris における脆弱性 CWE-noinfo
情報不足
CVE-2010-2382 2010-08-4 16:25 2010-07-13 Show GitHub Exploit DB Packet Storm
254927 3.2 注意 オラクル - Oracle Solaris における Solaris Management コンソールの処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2010-2376 2010-08-4 16:25 2010-07-13 Show GitHub Exploit DB Packet Storm
254928 3.8 注意 オラクル - Oracle Solaris における RPCの処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2010-2393 2010-08-4 16:25 2010-07-13 Show GitHub Exploit DB Packet Storm
254929 4.6 警告 オラクル - Oracle Solaris における Kernel/Filesystem の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2010-2400 2010-08-4 16:24 2010-07-13 Show GitHub Exploit DB Packet Storm
254930 4.6 警告 オラクル - Oracle Solaris における Kernel/VM の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2010-2399 2010-08-4 16:24 2010-07-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
249561 9.8 CRITICAL
Network
redhat
debian
mozilla
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
enterprise_linux_server_aus
enterprise_linux_server_eus
debian_linux
thunderbird
firefox
firefox_…
A buffer overflow in WebGL triggerable by web content, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2017-5459 2024-11-21 12:27 2018-06-12 Show GitHub Exploit DB Packet Storm
249562 6.1 MEDIUM
Network
redhat
mozilla
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux
enterprise_linux_server
enterprise_linux_server_aus
enterprise_linux_server_eus
thunderbird
firefox
fire…
If a page is loaded from an original site through a hyperlink and contains a redirect to a "data:text/html" URL, triggering a reload will run the reloaded "data:text/html" page with its origin set in… CWE-79
Cross-site Scripting
CVE-2017-5466 2024-11-21 12:27 2018-06-12 Show GitHub Exploit DB Packet Storm
249563 9.1 CRITICAL
Network
debian
redhat
mozilla
debian_linux
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux
enterprise_linux_server
enterprise_linux_server_aus
enterprise_linux_server_eus
thunderbird
An out-of-bounds read while processing SVG content in "ConvolvePixel". This results in a crash and also allows for otherwise inaccessible memory being copied into SVG graphic content, which could the… CWE-125
Out-of-bounds Read
CVE-2017-5465 2024-11-21 12:27 2018-06-12 Show GitHub Exploit DB Packet Storm
249564 9.8 CRITICAL
Network
debian
redhat
mozilla
debian_linux
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux
enterprise_linux_server
enterprise_linux_server_aus
enterprise_linux_server_eus
firefox
thu…
During DOM manipulations of the accessibility tree through script, the DOM tree can become out of sync with the accessibility tree, leading to memory corruption and a potentially exploitable crash. T… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2017-5464 2024-11-21 12:27 2018-06-12 Show GitHub Exploit DB Packet Storm
249565 9.8 CRITICAL
Network
debian
redhat
mozilla
debian_linux
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux
enterprise_linux_server
enterprise_linux_server_aus
enterprise_linux_server_eus
firefox
thu…
A use-after-free vulnerability in frame selection triggered by a combination of malicious script content and key presses by a user. This results in a potentially exploitable crash. This vulnerability… CWE-416
 Use After Free
CVE-2017-5460 2024-11-21 12:27 2018-06-12 Show GitHub Exploit DB Packet Storm
249566 6.1 MEDIUM
Network
mozilla firefox When a "javascript:" URL is drag and dropped by a user into the addressbar, the URL will be processed and executed. This allows for users to be socially engineered to execute an XSS attack on themsel… CWE-79
Cross-site Scripting
CVE-2017-5458 2024-11-21 12:27 2018-06-12 Show GitHub Exploit DB Packet Storm
249567 9.8 CRITICAL
Network
redhat
mozilla
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux
enterprise_linux_server
enterprise_linux_server_aus
enterprise_linux_server_eus
firefox
firefox_esr
A mechanism to bypass file system access protections in the sandbox using the file system request constructor through an IPC message. This allows for read and write access to the local file system. T… CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2017-5456 2024-11-21 12:27 2018-06-12 Show GitHub Exploit DB Packet Storm
249568 7.5 HIGH
Network
redhat
mozilla
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux
enterprise_linux_server
enterprise_linux_server_aus
enterprise_linux_server_eus
firefox
firefox_esr
The internal feed reader APIs that crossed the sandbox barrier allowed for a sandbox escape and escalation of privilege if combined with another vulnerability that resulted in remote code execution i… NVD-CWE-noinfo
CVE-2017-5455 2024-11-21 12:27 2018-06-12 Show GitHub Exploit DB Packet Storm
249569 4.3 MEDIUM
Network
mozilla firefox A mechanism to inject static HTML into the RSS reader preview page due to a failure to escape characters sent as URL parameters for a feed's "TITLE" element. This vulnerability allows for spoofing bu… CWE-20
 Improper Input Validation 
CVE-2017-5453 2024-11-21 12:27 2018-06-12 Show GitHub Exploit DB Packet Storm
249570 4.3 MEDIUM
Network
mozilla firefox Malicious sites can display a spoofed addressbar on a page when the existing location bar on the new page is scrolled out of view if an HTML editable page element is user selected. Note: This attack … CWE-20
 Improper Input Validation 
CVE-2017-5452 2024-11-21 12:27 2018-06-12 Show GitHub Exploit DB Packet Storm