Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
256271 4.3 警告 サイバートラスト株式会社
Mozilla Foundation
レッドハット
- Mozilla Firefox/SeaMonkey におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-0162 2010-03-9 11:02 2010-02-17 Show GitHub Exploit DB Packet Storm
256272 5 警告 サイバートラスト株式会社
Mozilla Foundation
レッドハット
- Mozilla Firefox/SeaMonkey におけるクロスサイトスクリプティングの脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-3988 2010-03-9 11:01 2010-02-17 Show GitHub Exploit DB Packet Storm
256273 10 危険 サイバートラスト株式会社
Mozilla Foundation
レッドハット
- Mozilla Firefox/SeaMonkey の Web ワーカー機能における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2010-0160 2010-03-9 11:01 2010-02-17 Show GitHub Exploit DB Packet Storm
256274 2.1 注意 サイバートラスト株式会社
GNOME Project
レッドハット
- NetworkManager の nm-connection-editor における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2009-4145 2010-03-8 12:28 2009-12-23 Show GitHub Exploit DB Packet Storm
256275 6.8 警告 サイバートラスト株式会社
GNOME Project
レッドハット
- NetworkManager における重要な情報を取得される脆弱性 CWE-310
暗号の問題
CVE-2009-4144 2010-03-8 12:28 2009-12-23 Show GitHub Exploit DB Packet Storm
256276 5 警告 Squid-cache.org - Squid の htcpHandleTstRequest 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2010-0639 2010-03-8 12:28 2010-02-12 Show GitHub Exploit DB Packet Storm
256277 9.3 危険 OpenOffice.org Project
レッドハット
- OpenOffice.org の filter/ww8/ww8par2.cxx におけるサービス運用妨害 (DoS) の脆弱性 CWE-94
コード・インジェクション
CVE-2009-3302 2010-03-5 10:33 2010-02-12 Show GitHub Exploit DB Packet Storm
256278 9.3 危険 OpenOffice.org Project
レッドハット
- OpenOffice.org の filter/ww8/ww8par2.cxx における整数アンダーフローの脆弱性 CWE-189
数値処理の問題
CVE-2009-3301 2010-03-5 10:33 2010-02-12 Show GitHub Exploit DB Packet Storm
256279 9.3 危険 OpenOffice.org Project
レッドハット
- OpenOffice.org の GIFLZWDecompressor::GIFLZWDecompressor 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-2950 2010-03-5 10:32 2010-02-12 Show GitHub Exploit DB Packet Storm
256280 9.3 危険 OpenOffice.org Project
レッドハット
- OpenOffice.org の XPMReader::ReadXPM 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2009-2949 2010-03-5 10:32 2010-02-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
278911 - redhat
debian
canonical
oracle
opensuse
freetype
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server_eus
enterprise_linux_server
enterprise_linux_hpc_node
enterprise_linux_hpc_node_eus
debian_linux
ubu…
Off-by-one error in the pcf_get_properties function in pcf/pcfread.c in FreeType before 2.5.4 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via… NVD-CWE-Other
CVE-2014-9671 2024-11-21 11:21 2015-02-8 Show GitHub Exploit DB Packet Storm
278912 - canonical
freetype
redhat
oracle
opensuse
debian
fedoraproject
ubuntu_linux
freetype
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server_eus
enterprise_linux_server
enterprise_linux_hpc_node
enterprise_linux_hpc_nod…
Multiple integer overflows in sfnt/ttcmap.c in FreeType before 2.5.4 allow remote attackers to cause a denial of service (out-of-bounds read or memory corruption) or possibly have unspecified other i… CWE-125
Out-of-bounds Read
CVE-2014-9669 2024-11-21 11:21 2015-02-8 Show GitHub Exploit DB Packet Storm
278913 - canonical
oracle
fedoraproject
redhat
opensuse
freetype
ubuntu_linux
solaris
fedora
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server_eus
enterprise_linux_server
enterprise_linux_hpc_node
enterprise_linu…
The Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.5.4 proceeds with adding to length values without validating the original values, which allows remote attackers to cause a de… NVD-CWE-Other
CVE-2014-9674 2024-11-21 11:21 2015-02-8 Show GitHub Exploit DB Packet Storm
278914 - debian
opensuse
fedoraproject
oracle
redhat
canonical
freetype
debian_linux
opensuse
fedora
solaris
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server_eus
enterprise_linux_server
enterprise_linux_hpc_node
ent…
Multiple integer signedness errors in the pcf_get_encodings function in pcf/pcfread.c in FreeType before 2.5.4 allow remote attackers to cause a denial of service (integer overflow, NULL pointer dere… CWE-189
Numeric Errors
CVE-2014-9670 2024-11-21 11:21 2015-02-8 Show GitHub Exploit DB Packet Storm
278915 - opensuse
fedoraproject
canonical
freetype
opensuse
fedora
ubuntu_linux
freetype
The woff_open_font function in sfnt/sfobjs.c in FreeType before 2.5.4 proceeds with offset+length calculations without restricting length values, which allows remote attackers to cause a denial of se… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-9668 2024-11-21 11:21 2015-02-8 Show GitHub Exploit DB Packet Storm
278916 - debian
canonical
fedoraproject
freetype
opensuse
redhat
debian_linux
ubuntu_linux
fedora
freetype
opensuse
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server_eus
enterprise_linux_server
enterprise_linu…
sfnt/ttload.c in FreeType before 2.5.4 proceeds with offset+length calculations without restricting the values, which allows remote attackers to cause a denial of service (integer overflow and out-of… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-9667 2024-11-21 11:21 2015-02-8 Show GitHub Exploit DB Packet Storm
278917 - opensuse
oracle
canonical
debian
redhat
fedoraproject
freetype
opensuse
solaris
ubuntu_linux
debian_linux
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server_eus
enterprise_linux_server
enterprise_linux_hpc_node<…
The tt_sbit_decoder_init function in sfnt/ttsbit.c in FreeType before 2.5.4 proceeds with a count-to-size association without restricting the count value, which allows remote attackers to cause a den… CWE-189
Numeric Errors
CVE-2014-9666 2024-11-21 11:21 2015-02-8 Show GitHub Exploit DB Packet Storm
278918 - fedoraproject
canonical
freetype
opensuse
fedora
ubuntu_linux
freetype
opensuse
The Load_SBit_Png function in sfnt/pngshim.c in FreeType before 2.5.4 does not restrict the rows and pitch values of PNG data, which allows remote attackers to cause a denial of service (integer over… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-9665 2024-11-21 11:21 2015-02-8 Show GitHub Exploit DB Packet Storm
278919 - redhat
debian
opensuse
canonical
fedoraproject
freetype
oracle
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server_eus
enterprise_linux_server
enterprise_linux_hpc_node
enterprise_linux_hpc_node_eus
debian_linux
ope…
FreeType before 2.5.4 does not check for the end of the data during certain parsing actions, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecifi… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-9664 2024-11-21 11:21 2015-02-8 Show GitHub Exploit DB Packet Storm
278920 - opensuse
debian
canonical
fedoraproject
freetype
opensuse
debian_linux
ubuntu_linux
fedora
freetype
cff/cf2ft.c in FreeType before 2.5.4 does not validate the return values of point-allocation functions, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or poss… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-9662 2024-11-21 11:21 2015-02-8 Show GitHub Exploit DB Packet Storm