Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
256551 9.3 危険 サイバートラスト株式会社
Mozilla Foundation
レッドハット
- 複数の Mozilla 製品における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2009-3979 2010-04-1 13:49 2009-12-15 Show GitHub Exploit DB Packet Storm
256552 4.4 警告 サイバートラスト株式会社
Mozilla Foundation
レッドハット
- Mozilla Firefox におけるダウンロードファイルを置き換えられる脆弱性 CWE-Other
その他
CVE-2009-3274 2010-04-1 13:47 2009-09-21 Show GitHub Exploit DB Packet Storm
256553 9.3 危険 サイバートラスト株式会社
Mozilla Foundation
レッドハット
- Mozilla Firefox/SeaMonkey における意図しないファイルをダウンロードさせられる脆弱性 CWE-16
環境設定
CVE-2009-3376 2010-04-1 13:46 2009-10-27 Show GitHub Exploit DB Packet Storm
256554 10 危険 サイバートラスト株式会社
Mozilla Foundation
レッドハット
- Mozilla Firefox の ブラウザエンジンにおける任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2009-3380 2010-04-1 13:45 2009-10-27 Show GitHub Exploit DB Packet Storm
256555 10 危険 サイバートラスト株式会社
Mozilla Foundation
レッドハット
- Mozilla Firefox の JavaScript エンジンにおける任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2009-3075 2010-04-1 13:44 2009-09-9 Show GitHub Exploit DB Packet Storm
256556 10 危険 サイバートラスト株式会社
Mozilla Foundation
レッドハット
- Mozilla Firefox のブラウザエンジンにおける任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2009-3072 2010-04-1 13:43 2009-09-9 Show GitHub Exploit DB Packet Storm
256557 9.3 危険 サイバートラスト株式会社
Mozilla Foundation
レッドハット
- Mozilla Firefox における任意の PKCS11 モジュールをインストール/削除させる脆弱性 CWE-Other
その他
CVE-2009-3076 2010-04-1 13:42 2009-09-9 Show GitHub Exploit DB Packet Storm
256558 9.3 危険 サイバートラスト株式会社
Mozilla Foundation
レッドハット
- Mozilla Firefox における XUL ツリー要素に関する任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2009-3077 2010-04-1 13:41 2009-09-9 Show GitHub Exploit DB Packet Storm
256559 5 警告 Mozilla Foundation
レッドハット
- Mozilla Firefox におけるドメイン名の処理に関するサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2009-2470 2010-04-1 13:40 2009-07-21 Show GitHub Exploit DB Packet Storm
256560 10 危険 サン・マイクロシステムズ
サイバートラスト株式会社
Mozilla Foundation
レッドハット
- Mozilla Firefox/Thunderbird の JavaScript エンジンにおける任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2009-2466 2010-04-1 13:38 2009-07-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
250781 9.8 CRITICAL
Network
debian
redhat
mozilla
debian_linux
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux
enterprise_linux_server
enterprise_linux_server_aus
enterprise_linux_server_eus
thunderbird
A use-after-free vulnerability when holding a selection during scroll events. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firef… CWE-416
 Use After Free
CVE-2017-5441 2024-11-21 12:27 2018-06-12 Show GitHub Exploit DB Packet Storm
250782 7.5 HIGH
Network
debian
redhat
mozilla
debian_linux
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux
enterprise_linux_server
enterprise_linux_server_aus
enterprise_linux_server_eus
thunderbird
A vulnerability while parsing "application/http-index-format" format content where uninitialized values are used to create an array. This could allow the reading of uninitialized memory into the arra… CWE-129
 Improper Validation of Array Index
CVE-2017-5445 2024-11-21 12:27 2018-06-12 Show GitHub Exploit DB Packet Storm
250783 7.5 HIGH
Network
debian
redhat
mozilla
debian_linux
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux
enterprise_linux_server
enterprise_linux_server_aus
enterprise_linux_server_eus
thunderbird
A buffer overflow vulnerability while parsing "application/http-index-format" format content when the header contains improperly formatted data. This allows for an out-of-bounds read of data from mem… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2017-5444 2024-11-21 12:27 2018-06-12 Show GitHub Exploit DB Packet Storm
250784 9.8 CRITICAL
Network
debian
redhat
mozilla
debian_linux
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux
enterprise_linux_server
enterprise_linux_server_aus
enterprise_linux_server_eus
thunderbird
A use-after-free vulnerability during XSLT processing due to a failure to propagate error conditions during matching while evaluating context, leading to objects being used when they no longer exist.… CWE-416
 Use After Free
CVE-2017-5440 2024-11-21 12:27 2018-06-12 Show GitHub Exploit DB Packet Storm
250785 9.8 CRITICAL
Network
debian
redhat
mozilla
debian_linux
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux
enterprise_linux_server
enterprise_linux_server_aus
enterprise_linux_server_eus
firefox
thu…
A use-after-free vulnerability during XSLT processing due to poor handling of template parameters. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Fire… CWE-416
 Use After Free
CVE-2017-5439 2024-11-21 12:27 2018-06-12 Show GitHub Exploit DB Packet Storm
250786 9.8 CRITICAL
Network
debian
redhat
mozilla
debian_linux
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux
enterprise_linux_server
enterprise_linux_server_aus
enterprise_linux_server_eus
thunderbird
A use-after-free vulnerability during XSLT processing due to the result handler being held by a freed handler during handling. This results in a potentially exploitable crash. This vulnerability affe… CWE-416
 Use After Free
CVE-2017-5438 2024-11-21 12:27 2018-06-12 Show GitHub Exploit DB Packet Storm
250787 8.8 HIGH
Network
debian
redhat
sil
mozilla
debian_linux
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux
enterprise_linux_server
enterprise_linux_server_aus
enterprise_linux_server_eus
graphite2
t…
An out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite font. This results in a potentially exploitable crash. This issue was fixed in the Graphite 2 library as… CWE-787
 Out-of-bounds Write
CVE-2017-5436 2024-11-21 12:27 2018-06-12 Show GitHub Exploit DB Packet Storm
250788 9.8 CRITICAL
Network
redhat
debian
mozilla
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
debian_linux
thunderbird
firefox
firefox_esr
A use-after-free vulnerability occurs when redirecting focus handling which results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR … CWE-416
 Use After Free
CVE-2017-5434 2024-11-21 12:27 2018-06-12 Show GitHub Exploit DB Packet Storm
250789 9.8 CRITICAL
Network
debian
redhat
mozilla
debian_linux
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux
enterprise_linux_server
enterprise_linux_server_aus
enterprise_linux_server_eus
firefox
thu…
A use-after-free vulnerability occurs during certain text input selection resulting in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR … CWE-416
 Use After Free
CVE-2017-5432 2024-11-21 12:27 2018-06-12 Show GitHub Exploit DB Packet Storm
250790 9.8 CRITICAL
Network
redhat
mozilla
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
firefox_esr
thunderbird
firefox
Memory safety bugs were reported in Firefox 52, Firefox ESR 52, and Thunderbird 52. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these c… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2017-5430 2024-11-21 12:27 2018-06-12 Show GitHub Exploit DB Packet Storm