Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 4, 2026, 2 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 257281 | 9 | 危険 | アップル | - | Apple Mac OS X のパスワードサーバにおけるログインアクセスを取得される脆弱性 |
CWE-255
証明書・パスワード管理 |
CVE-2010-0510 | 2010-04-15 18:37 | 2010-03-29 | Show | GitHub Exploit DB Packet Storm |
| 257282 | 7.2 | 危険 | アップル | - | Apple Mac OS X の SFLServer における権限昇格の脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2010-0509 | 2010-04-15 18:37 | 2010-03-29 | Show | GitHub Exploit DB Packet Storm |
| 257283 | 7.8 | 危険 | アップル | - | Apple Mac OS X の Mail における重要な情報を取得される脆弱性 |
CWE-310
暗号の問題 |
CVE-2010-0525 | 2010-04-15 18:36 | 2010-03-29 | Show | GitHub Exploit DB Packet Storm |
| 257284 | 4 | 警告 | アップル サイバートラスト株式会社 MySQL AB レッドハット |
- | MySQL の mysqld におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-DesignError
|
CVE-2009-4019 | 2010-04-15 18:16 | 2009-11-30 | Show | GitHub Exploit DB Packet Storm |
| 257285 | 6.8 | 警告 | The PHP Group アップル |
- | PHP の posix_mkfifo 関数における open_basedir の制限を回避される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2009-3558 | 2010-04-15 18:16 | 2009-11-23 | Show | GitHub Exploit DB Packet Storm |
| 257286 | 4.4 | 警告 | アップル サイバートラスト株式会社 MySQL AB レッドハット |
- | MySQL における権限チェックを回避される脆弱性 |
CWE-59
リンク解釈の問題 |
CVE-2009-4030 | 2010-04-15 18:16 | 2009-11-5 | Show | GitHub Exploit DB Packet Storm |
| 257287 | 2.6 | 注意 | アップル サイバートラスト株式会社 MySQL AB レッドハット |
- | MySQL のコマンドラインクライアントにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2008-4456 | 2010-04-15 18:15 | 2008-10-6 | Show | GitHub Exploit DB Packet Storm |
| 257288 | 10 | 危険 | アップル | - | Apple Mac OS X の Mail における脆弱性 |
CWE-noinfo
情報不足 |
CVE-2010-0508 | 2010-04-14 17:11 | 2010-03-29 | Show | GitHub Exploit DB Packet Storm |
| 257289 | 6.8 | 警告 | アップル | - | Apple Mac OS X の画像 RAW におけるバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2010-0507 | 2010-04-14 17:11 | 2010-03-29 | Show | GitHub Exploit DB Packet Storm |
| 257290 | 6.8 | 警告 | アップル | - | Apple Mac OS X の画像 RAW におけるバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2010-0506 | 2010-04-14 17:11 | 2010-03-29 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 4, 2026, 4:17 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 253791 | 5.3 |
MEDIUM
Network |
mozilla | firefox | Android intents can be used to launch Firefox for Android in reader mode with a user specified URL. This allows an attacker to spoof the contents of the addressbar as displayed to users. Note: This a… |
CWE-20
Improper Input Validation |
CVE-2017-5463 | 2024-11-21 12:27 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |
| 253792 | 5.3 |
MEDIUM
Network |
debian mozilla |
debian_linux thunderbird firefox firefox_esr network_security_services |
A flaw in DRBG number generation within the Network Security Services (NSS) library where the internal state V does not correctly carry bits over. The NSS library has been updated to fix this issue t… |
CWE-682
Incorrect Calculation |
CVE-2017-5462 | 2024-11-21 12:27 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |
| 253793 | 9.8 |
CRITICAL
Network |
redhat debian mozilla |
enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus debian_linux thunderbird firefox firefox_… |
A buffer overflow in WebGL triggerable by web content, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2017-5459 | 2024-11-21 12:27 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |
| 253794 | 6.1 |
MEDIUM
Network |
redhat mozilla |
enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus thunderbird firefox fire… |
If a page is loaded from an original site through a hyperlink and contains a redirect to a "data:text/html" URL, triggering a reload will run the reloaded "data:text/html" page with its origin set in… |
CWE-79
Cross-site Scripting |
CVE-2017-5466 | 2024-11-21 12:27 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |
| 253795 | 9.1 |
CRITICAL
Network |
debian redhat mozilla |
debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus thunderbird
An out-of-bounds read while processing SVG content in "ConvolvePixel". This results in a crash and also allows for otherwise inaccessible memory being copied into SVG graphic content, which could the…
|
CWE-125
|
Out-of-bounds Read
CVE-2017-5465
|
2024-11-21 12:27 |
2018-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 253796 | 9.8 |
CRITICAL
Network |
debian redhat mozilla |
debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus firefox thu… |
During DOM manipulations of the accessibility tree through script, the DOM tree can become out of sync with the accessibility tree, leading to memory corruption and a potentially exploitable crash. T… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2017-5464 | 2024-11-21 12:27 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |
| 253797 | 9.8 |
CRITICAL
Network |
debian redhat mozilla |
debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus firefox thu… |
A use-after-free vulnerability in frame selection triggered by a combination of malicious script content and key presses by a user. This results in a potentially exploitable crash. This vulnerability… |
CWE-416
Use After Free |
CVE-2017-5460 | 2024-11-21 12:27 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |
| 253798 | 6.1 |
MEDIUM
Network |
mozilla | firefox | When a "javascript:" URL is drag and dropped by a user into the addressbar, the URL will be processed and executed. This allows for users to be socially engineered to execute an XSS attack on themsel… |
CWE-79
Cross-site Scripting |
CVE-2017-5458 | 2024-11-21 12:27 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |
| 253799 | 9.8 |
CRITICAL
Network |
redhat mozilla |
enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus firefox firefox_esr |
A mechanism to bypass file system access protections in the sandbox using the file system request constructor through an IPC message. This allows for read and write access to the local file system. T… |
CWE-732
Incorrect Permission Assignment for Critical Resource |
CVE-2017-5456 | 2024-11-21 12:27 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |
| 253800 | 7.5 |
HIGH
Network |
redhat mozilla |
enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus firefox firefox_esr |
The internal feed reader APIs that crossed the sandbox barrier allowed for a sandbox escape and escalation of privilege if combined with another vulnerability that resulted in remote code execution i… |
NVD-CWE-noinfo
|
CVE-2017-5455 | 2024-11-21 12:27 | 2018-06-12 | Show | GitHub Exploit DB Packet Storm |