Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 25, 2026, 12:07 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 256381 | 6.8 | 警告 | サン・マイクロシステムズ GNU Project ターボリナックス サイバートラスト株式会社 レッドハット |
- | GNU tar および GNU cpio の rmt_read__ 関数におけるヒープベースのバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2010-0624 | 2010-06-11 18:45 | 2010-03-15 | Show | GitHub Exploit DB Packet Storm |
| 256382 | 3.5 | 注意 | PostgreSQL.org サイバートラスト株式会社 レッドハット |
- | PostgreSQL における整数オーバーフローの脆弱性 |
CWE-189
数値処理の問題 |
CVE-2010-0733 | 2010-06-9 16:54 | 2010-03-19 | Show | GitHub Exploit DB Packet Storm |
| 256383 | 6.5 | 警告 | PostgreSQL.org サイバートラスト株式会社 レッドハット |
- | PostgreSQL の bitsubstr 関数におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-189
数値処理の問題 |
CVE-2010-0442 | 2010-06-9 16:54 | 2010-02-2 | Show | GitHub Exploit DB Packet Storm |
| 256384 | 6.8 | 警告 | アップル | - | Java の window drawing 実装における任意のコードを実行される脆弱性 |
CWE-189
数値処理の問題 |
CVE-2010-0539 | 2010-06-7 17:58 | 2010-05-18 | Show | GitHub Exploit DB Packet Storm |
| 256385 | 6.8 | 警告 | アップル | - | Apple Mac OS X 上で稼働する Java における任意のコードを実行される脆弱性 |
CWE-399
リソース管理の問題 |
CVE-2010-0538 | 2010-06-7 17:58 | 2010-05-18 | Show | GitHub Exploit DB Packet Storm |
| 256386 | 6.5 | 警告 | PostgreSQL.org サイバートラスト株式会社 ターボリナックス サン・マイクロシステムズ レッドハット |
- | PostgreSQL におけるインデックスの処理に関する権限を取得される脆弱性 |
CWE-Other
その他 |
CVE-2009-4136 | 2010-06-7 16:48 | 2009-12-15 | Show | GitHub Exploit DB Packet Storm |
| 256387 | - | - | コンソナ | - | Consona (旧 SupportSoft) Intelligent Assistance Suite (IAS) に複数の脆弱性 | - | - | 2010-06-4 17:58 | 2010-05-13 | Show | GitHub Exploit DB Packet Storm |
| 256388 | 7.5 | 危険 | アップル VMware サン・マイクロシステムズ ヒューレット・パッカード レッドハット |
- | JDK および JRE の Java プラグインにおける古い JRE バージョンで動作可能な脆弱性 |
CWE-DesignError
|
CVE-2009-1105 | 2010-06-4 15:54 | 2009-03-24 | Show | GitHub Exploit DB Packet Storm |
| 256389 | 10 | 危険 | 日立 | - | Collaboration - Common Utility におけるスタックベースのバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
- | 2010-06-3 15:19 | 2010-05-12 | Show | GitHub Exploit DB Packet Storm |
| 256390 | 10 | 危険 | 日立 CA Technologies |
- | CA ARCserve Backup および BrightStor ARCserve Backup における任意のコードを実行される脆弱性 |
CWE-noinfo
情報不足 |
- | 2010-06-3 15:19 | 2010-03-18 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 25, 2026, 4:01 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 248921 | 7.5 |
HIGH
Network |
redhat debian mozilla |
enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus debian_linux thunderbird firefox firefox_… |
When a page's content security policy (CSP) header contains a "sandbox" directive, other directives are ignored. This results in the incorrect enforcement of CSP. This vulnerability affects Thunderbi… |
CWE-269
Improper Privilege Management |
CVE-2017-7803 | 2024-11-21 12:32 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |
| 248922 | 6.1 |
MEDIUM
Network |
mozilla | firefox | JavaScript in the "about:webrtc" page is not sanitized properly being assigned to "innerHTML". Data on this page is supplied by WebRTC usage and is not under third-party control, making this difficul… |
CWE-79
Cross-site Scripting |
CVE-2017-7799 | 2024-11-21 12:32 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |
| 248923 | 7.5 |
HIGH
Network |
mozilla | firefox | Response header name interning does not have same-origin protections and these headers are stored in a global registry. This allows stored header names to be available cross-origin. This vulnerabilit… |
CWE-346
Origin Validation Error |
CVE-2017-7797 | 2024-11-21 12:32 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |
| 248924 | 4.7 |
MEDIUM
Local |
mozilla | firefox | On Windows systems, the logger run by the Windows updater deletes the file "update.log" before it runs in order to write a new log of that name. The path to this file is supplied at the command line … |
CWE-20
Improper Input Validation |
CVE-2017-7796 | 2024-11-21 12:32 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |
| 248925 | 7.8 |
HIGH
Local |
mozilla | firefox | On Linux systems, if the content process is compromised, the sandbox broker will allow files to be truncated even though the sandbox explicitly only has read access to the local file system and no wr… |
CWE-276
Incorrect Default Permissions |
CVE-2017-7794 | 2024-11-21 12:32 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |
| 248926 | 9.8 |
CRITICAL
Network |
debian redhat mozilla |
debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus firefox fir… |
A use-after-free vulnerability can occur when manipulating the DOM during the resize event of an image element. If these elements have been freed due to a lack of strong references, a potentially exp… |
CWE-416
Use After Free |
CVE-2017-7802 | 2024-11-21 12:32 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |
| 248927 | 9.8 |
CRITICAL
Network |
debian redhat mozilla |
debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus firefox fir… |
A use-after-free vulnerability can occur while re-computing layout for a "marquee" element during window resizing where the updated style object is freed while still in use. This results in a potenti… |
CWE-416
Use After Free |
CVE-2017-7801 | 2024-11-21 12:32 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |
| 248928 | 9.8 |
CRITICAL
Network |
debian redhat mozilla |
debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus firefox fir… |
A use-after-free vulnerability can occur in WebSockets when the object holding the connection is freed before the disconnection operation is finished. This results in an exploitable crash. This vulne… |
CWE-416
Use After Free |
CVE-2017-7800 | 2024-11-21 12:32 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |
| 248929 | 8.8 |
HIGH
Network |
debian redhat mozilla |
debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus firefox fir… |
The Developer Tools feature suffers from a XUL injection vulnerability due to improper sanitization of the web page source code. In the worst case, this could allow arbitrary code execution when open… |
CWE-94
Code Injection |
CVE-2017-7798 | 2024-11-21 12:32 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |
| 248930 | 9.8 |
CRITICAL
Network |
debian redhat mozilla |
debian_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation enterprise_linux enterprise_linux_server_aus enterprise_linux_server_eus thunderbird
A use-after-free vulnerability can occur in the Fetch API when the worker or the associated window are freed when still in use, resulting in a potentially exploitable crash. This vulnerability affect…
|
CWE-416
|
Use After Free
CVE-2017-7793
|
2024-11-21 12:32 |
2018-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|