Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 22, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 256471 | 10 | 危険 | アップル | - | Apple Mac OS X の Mail における脆弱性 |
CWE-noinfo
情報不足 |
CVE-2010-0508 | 2010-04-14 17:11 | 2010-03-29 | Show | GitHub Exploit DB Packet Storm |
| 256472 | 6.8 | 警告 | アップル | - | Apple Mac OS X の画像 RAW におけるバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2010-0507 | 2010-04-14 17:11 | 2010-03-29 | Show | GitHub Exploit DB Packet Storm |
| 256473 | 6.8 | 警告 | アップル | - | Apple Mac OS X の画像 RAW におけるバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2010-0506 | 2010-04-14 17:11 | 2010-03-29 | Show | GitHub Exploit DB Packet Storm |
| 256474 | 6.8 | 警告 | アップル | - | Apple Mac OS X の ImageIO における任意のコードを実行される脆弱性 |
CWE-119
バッファエラー |
CVE-2010-0505 | 2010-04-14 17:11 | 2010-03-29 | Show | GitHub Exploit DB Packet Storm |
| 256475 | 7.5 | 危険 | アップル | - | Apple Mac OS X の iChat サーバにおけるスタックベースのバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2010-0504 | 2010-04-14 17:11 | 2010-03-29 | Show | GitHub Exploit DB Packet Storm |
| 256476 | 6.5 | 警告 | アップル | - | Apple Mac OS X の iChat サーバにおける任意のコードを実行される脆弱性 |
CWE-399
リソース管理の問題 |
CVE-2010-0503 | 2010-04-14 17:10 | 2010-03-29 | Show | GitHub Exploit DB Packet Storm |
| 256477 | 4.3 | 警告 | アップル | - | Apple Mac OS X の iChat サーバにおけるメッセージの監査を回避可能な脆弱性 |
CWE-DesignError
|
CVE-2010-0502 | 2010-04-14 17:10 | 2010-03-29 | Show | GitHub Exploit DB Packet Storm |
| 256478 | 5 | 警告 | アップル レッドハット jabberd 2.x project |
- | Jabber Studio jabberd の SASL ネゴシエーションにおけるサービス運用妨害 (DoS) の脆弱性 | - | CVE-2006-1329 | 2010-04-14 17:10 | 2006-03-21 | Show | GitHub Exploit DB Packet Storm |
| 256479 | 7.2 | 危険 | アップル | - | Apple Mac OS X の FTP サーバにおけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2010-0501 | 2010-04-14 17:10 | 2010-03-29 | Show | GitHub Exploit DB Packet Storm |
| 256480 | 7.5 | 危険 | アップル | - | Apple Mac OS X の FreeRADIUS サーバにおけるネットワーク接続を確立される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2010-0524 | 2010-04-14 17:10 | 2010-03-29 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 23, 2026, 4:08 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 248911 | 7.5 |
HIGH
Network |
mozilla | firefox | Response header name interning does not have same-origin protections and these headers are stored in a global registry. This allows stored header names to be available cross-origin. This vulnerabilit… |
CWE-346
Origin Validation Error |
CVE-2017-7797 | 2024-11-21 12:32 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |
| 248912 | 4.7 |
MEDIUM
Local |
mozilla | firefox | On Windows systems, the logger run by the Windows updater deletes the file "update.log" before it runs in order to write a new log of that name. The path to this file is supplied at the command line … |
CWE-20
Improper Input Validation |
CVE-2017-7796 | 2024-11-21 12:32 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |
| 248913 | 7.8 |
HIGH
Local |
mozilla | firefox | On Linux systems, if the content process is compromised, the sandbox broker will allow files to be truncated even though the sandbox explicitly only has read access to the local file system and no wr… |
CWE-276
Incorrect Default Permissions |
CVE-2017-7794 | 2024-11-21 12:32 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |
| 248914 | 9.8 |
CRITICAL
Network |
debian redhat mozilla |
debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus firefox fir… |
A use-after-free vulnerability can occur when manipulating the DOM during the resize event of an image element. If these elements have been freed due to a lack of strong references, a potentially exp… |
CWE-416
Use After Free |
CVE-2017-7802 | 2024-11-21 12:32 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |
| 248915 | 9.8 |
CRITICAL
Network |
debian redhat mozilla |
debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus firefox fir… |
A use-after-free vulnerability can occur while re-computing layout for a "marquee" element during window resizing where the updated style object is freed while still in use. This results in a potenti… |
CWE-416
Use After Free |
CVE-2017-7801 | 2024-11-21 12:32 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |
| 248916 | 9.8 |
CRITICAL
Network |
debian redhat mozilla |
debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus firefox fir… |
A use-after-free vulnerability can occur in WebSockets when the object holding the connection is freed before the disconnection operation is finished. This results in an exploitable crash. This vulne… |
CWE-416
Use After Free |
CVE-2017-7800 | 2024-11-21 12:32 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |
| 248917 | 8.8 |
HIGH
Network |
debian redhat mozilla |
debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus firefox fir… |
The Developer Tools feature suffers from a XUL injection vulnerability due to improper sanitization of the web page source code. In the worst case, this could allow arbitrary code execution when open… |
CWE-94
Code Injection |
CVE-2017-7798 | 2024-11-21 12:32 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |
| 248918 | 9.8 |
CRITICAL
Network |
debian redhat mozilla |
debian_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation enterprise_linux enterprise_linux_server_aus enterprise_linux_server_eus thunderbird
A use-after-free vulnerability can occur in the Fetch API when the worker or the associated window are freed when still in use, resulting in a potentially exploitable crash. This vulnerability affect…
|
CWE-416
|
Use After Free
CVE-2017-7793
|
2024-11-21 12:32 |
2018-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 248919 | 9.8 |
CRITICAL
Network |
debian redhat mozilla |
debian_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation enterprise_linux enterprise_linux_server_aus enterprise_linux_server_eus thunderbird
A buffer overflow will occur when viewing a certificate in the certificate manager if the certificate has an extremely long object identifier (OID). This results in a potentially exploitable crash. T…
|
CWE-119
|
Incorrect Access of Indexable Resource ('Range Error')
CVE-2017-7792
|
2024-11-21 12:32 |
2018-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 248920 | 7.5 |
HIGH
Network |
mozilla | firefox | On Windows systems, if non-null-terminated strings are copied into the crash reporter for some specific registry keys, stack memory data can be copied until a null is found. This can potentially cont… |
NVD-CWE-noinfo
|
CVE-2017-7790 | 2024-11-21 12:32 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |