Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 17, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255641	7.5	危険	サン・マイクロシステムズサイバートラスト株式会社 VMware レッドハット	-	Sun Java SE および OpenJDK の X11 および Win32GraphicsDevice サブシステムにおける getConfigurations 関数による配列の複製に関する脆弱性	CWE-noinfo 情報不足	CVE-2009-3879	2010-02-23 11:51	2009-11-9	Show	GitHub Exploit DB Packet Storm

255642	5	警告	サン・マイクロシステムズ VMware レッドハット	-	Sun Java SE の TrueType フォント解析機能におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2009-3729	2010-02-23 11:51	2009-11-9	Show	GitHub Exploit DB Packet Storm

255643	5	警告	アップルサイバートラスト株式会社 VMware サン・マイクロシステムズレッドハット	-	Sun Java SE および OpenJDK の Java Runtime Environment (JRE) におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2009-3728	2010-02-23 11:51	2009-11-9	Show	GitHub Exploit DB Packet Storm

255644	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0248	2010-02-22 12:15	2010-01-21	Show	GitHub Exploit DB Packet Storm

255645	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0244	2010-02-22 12:15	2010-01-21	Show	GitHub Exploit DB Packet Storm

255646	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer の URL 検証における任意のローカルプログラムを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0027	2010-02-22 12:15	2010-01-21	Show	GitHub Exploit DB Packet Storm

255647	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0247	2010-02-22 12:14	2010-01-21	Show	GitHub Exploit DB Packet Storm

255648	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0246	2010-02-22 12:14	2010-01-21	Show	GitHub Exploit DB Packet Storm

255649	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0245	2010-02-22 12:13	2010-01-21	Show	GitHub Exploit DB Packet Storm

255650	4.3	警告	マイクロソフト	-	Microsoft Internet Explorer の XSS フィルタにおけるクロスサイトスクリプティングの脆弱性	CWE-DesignError	CVE-2009-4074	2010-02-22 12:13	2009-11-25	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
271881	-	opensuse mozilla fedoraproject	leap opensuse firefox fedora	Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allow remote attackers to bypass the Same Origin Policy via data: and view-source: URIs.	CWE-200 Information Exposure	CVE-2015-7214	2024-11-21 11:36	2015-12-16	Show	GitHub Exploit DB Packet Storm

271882	-	opensuse fedoraproject mozilla	leap opensuse fedora firefox	Integer overflow in the MPEG4Extractor::readMetaData function in MPEG4Extractor.cpp in libstagefright in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 on 64-bit platforms allows remote…	CWE-189 Numeric Errors	CVE-2015-7213	2024-11-21 11:36	2015-12-16	Show	GitHub Exploit DB Packet Storm

271883	-	fedoraproject opensuse mozilla	fedora leap opensuse firefox	Integer overflow in the mozilla::layers::BufferTextureClient::AllocateForSurface function in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allows remote attackers to execute arbitrary …	CWE-189 Numeric Errors	CVE-2015-7212	2024-11-21 11:36	2015-12-16	Show	GitHub Exploit DB Packet Storm

271884	-	mozilla fedoraproject opensuse	firefox fedora leap opensuse	Mozilla Firefox before 43.0 mishandles the # (number sign) character in a data: URI, which allows remote attackers to spoof web sites via unspecified vectors.	CWE-20 Improper Input Validation	CVE-2015-7211	2024-11-21 11:36	2015-12-16	Show	GitHub Exploit DB Packet Storm

271885	-	mozilla opensuse fedoraproject	firefox leap opensuse fedora	Use-after-free vulnerability in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allows remote attackers to execute arbitrary code by triggering attempted use of a data channel that has b…	NVD-CWE-Other	CVE-2015-7210	2024-11-21 11:36	2015-12-16	Show	GitHub Exploit DB Packet Storm

271886	-	mozilla fedoraproject opensuse	firefox fedora leap opensuse	Mozilla Firefox before 43.0 stores cookies containing vertical tab characters, which allows remote attackers to obtain sensitive information by reading HTTP Cookie headers.	CWE-200 Information Exposure	CVE-2015-7208	2024-11-21 11:36	2015-12-16	Show	GitHub Exploit DB Packet Storm

271887	-	mozilla opensuse fedoraproject	firefox leap opensuse fedora	Mozilla Firefox before 43.0 does not properly restrict the availability of IFRAME Resource Timing API times, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive inform…	CWE-200 Information Exposure	CVE-2015-7207	2024-11-21 11:36	2015-12-16	Show	GitHub Exploit DB Packet Storm

271888	-	fedoraproject mozilla opensuse	fedora firefox leap opensuse	Integer underflow in the RTPReceiverVideo::ParseRtpPacket function in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 might allow remote attackers to obtain sensitive information, cause …	CWE-189 Numeric Errors	CVE-2015-7205	2024-11-21 11:36	2015-12-16	Show	GitHub Exploit DB Packet Storm

271889	-	opensuse fedoraproject mozilla	leap opensuse fedora firefox	Mozilla Firefox before 43.0 does not properly store the properties of unboxed objects, which allows remote attackers to execute arbitrary code via crafted JavaScript variable assignments.	CWE-17 Code	CVE-2015-7204	2024-11-21 11:36	2015-12-16	Show	GitHub Exploit DB Packet Storm

271890	-	mozilla fedoraproject opensuse	firefox fedora leap opensuse	Buffer overflow in the DirectWriteFontInfo::LoadFontFamilyData function in gfx/thebes/gfxDWriteFontList.cpp in Mozilla Firefox before 43.0 might allow remote attackers to cause a denial of service or…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2015-7203	2024-11-21 11:36	2015-12-16	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed