Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 31, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 257341 | 6.8 | 警告 | サイバートラスト株式会社 Mozilla Foundation レッドハット |
- | Mozilla Firefox/SeaMonkey におけるコンテンツを偽装される脆弱性 |
CWE-Other
その他 |
CVE-2009-3985 | 2010-01-29 09:53 | 2009-12-15 | Show | GitHub Exploit DB Packet Storm |
| 257342 | 6.8 | 警告 | サイバートラスト株式会社 Mozilla Foundation レッドハット |
- | Mozilla Firefox/SeaMonkey における http URL または file URL の SSL インジケータを偽装される脆弱性 |
CWE-Other
その他 |
CVE-2009-3984 | 2010-01-29 09:53 | 2009-12-15 | Show | GitHub Exploit DB Packet Storm |
| 257343 | 6.8 | 警告 | サイバートラスト株式会社 Mozilla Foundation レッドハット |
- | Mozilla Firefox/SeaMonkey における認証されたリクエストを任意のアプリケーションに送信される脆弱性 |
CWE-Other
その他 |
CVE-2009-3983 | 2010-01-29 09:53 | 2009-12-15 | Show | GitHub Exploit DB Packet Storm |
| 257344 | 9.3 | 危険 | Mozilla Foundation | - | 複数の Mozilla 製品の libtheora における任意のコードを実行される脆弱性 |
CWE-189
数値処理の問題 |
CVE-2009-3389 | 2010-01-28 12:16 | 2009-12-15 | Show | GitHub Exploit DB Packet Storm |
| 257345 | 9.3 | 危険 | Mozilla Foundation | - | 複数の Mozilla 製品の liboggplay における任意のコードを実行される脆弱性 |
CWE-399
リソース管理の問題 |
CVE-2009-3388 | 2010-01-28 12:16 | 2009-12-15 | Show | GitHub Exploit DB Packet Storm |
| 257346 | 9.3 | 危険 | Mozilla Foundation | - | 複数の Mozilla 製品の JavaScript エンジンにおける任意のコードを実行される脆弱性 |
CWE-noinfo
情報不足 |
CVE-2009-3982 | 2010-01-28 12:16 | 2009-12-15 | Show | GitHub Exploit DB Packet Storm |
| 257347 | 9.3 | 危険 | サイバートラスト株式会社 Mozilla Foundation レッドハット |
- | 複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性 |
CWE-noinfo
情報不足 |
CVE-2009-3981 | 2010-01-28 12:16 | 2009-12-15 | Show | GitHub Exploit DB Packet Storm |
| 257348 | 9.3 | 危険 | Mozilla Foundation | - | 複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性 |
CWE-399
リソース管理の問題 |
CVE-2009-3980 | 2010-01-28 12:15 | 2009-12-15 | Show | GitHub Exploit DB Packet Storm |
| 257349 | 10 | 危険 | アドビシステムズ | - | Adobe Flash Media Server におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2009-3792 | 2010-01-27 10:02 | 2009-12-18 | Show | GitHub Exploit DB Packet Storm |
| 257350 | 5 | 警告 | アドビシステムズ | - | Adobe Flash Media Server におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-noinfo
情報不足 |
CVE-2009-3791 | 2010-01-27 10:02 | 2009-12-18 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 31, 2026, 4:16 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 246821 | 6.5 |
MEDIUM
Network |
miniupnp_project | ngiflib | GifIndexToTrueColor in ngiflib.c in MiniUPnP ngiflib 0.4 has a Segmentation fault. |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2018-11578 | 2024-11-21 12:43 | 2018-05-31 | Show | GitHub Exploit DB Packet Storm |
| 246822 | 8.8 |
HIGH
Network |
liblouis canonical opensuse |
liblouis ubuntu_linux leap |
Liblouis 3.5.0 has a Segmentation fault in lou_logPrint in logging.c. |
CWE-120
Classic Buffer Overflow |
CVE-2018-11577 | 2024-11-21 12:43 | 2018-05-31 | Show | GitHub Exploit DB Packet Storm |
| 246823 | 9.8 |
CRITICAL
Network |
miniupnp_project | ngiflib | ngiflib.c in MiniUPnP ngiflib 0.4 has a heap-based buffer over-read in GifIndexToTrueColor. |
CWE-125
Out-of-bounds Read |
CVE-2018-11576 | 2024-11-21 12:43 | 2018-05-31 | Show | GitHub Exploit DB Packet Storm |
| 246824 | 9.8 |
CRITICAL
Network |
miniupnp_project | ngiflib | ngiflib.c in MiniUPnP ngiflib 0.4 has a stack-based buffer overflow in DecodeGifImg. |
CWE-787
Out-of-bounds Write |
CVE-2018-11575 | 2024-11-21 12:43 | 2018-05-31 | Show | GitHub Exploit DB Packet Storm |
| 246825 | 5.4 |
MEDIUM
Network |
clippercms | clippercms | ClipperCMS 1.3.3 has XSS in the "Module name" field in a "Modules -> Manage modules -> edit" action to the manager/ URI. |
CWE-79
Cross-site Scripting |
CVE-2018-11572 | 2024-11-21 12:43 | 2018-05-31 | Show | GitHub Exploit DB Packet Storm |
| 246826 | 8.8 |
HIGH
Network |
clippercms | clippercms | ClipperCMS 1.3.3 allows Session Fixation. |
CWE-384
Session Fixation |
CVE-2018-11571 | 2024-11-21 12:43 | 2018-05-31 | Show | GitHub Exploit DB Packet Storm |
| 246827 | 6.1 |
MEDIUM
Network |
cactusthemes | gameplan-event_and_gym_fitness | Reflected XSS is possible in the GamePlan theme through 1.5.13.2 for WordPress because of insufficient input sanitization, as demonstrated by the s parameter. In some (but not all) cases, the '<' and… |
CWE-79
Cross-site Scripting |
CVE-2018-11568 | 2024-11-21 12:43 | 2018-05-31 | Show | GitHub Exploit DB Packet Storm |
| 246828 | 5.3 |
MEDIUM
Network |
mahara | mahara | Mahara 17.04 before 17.04.8 and 17.10 before 17.10.5 and 18.04 before 18.04.1 are vulnerable to mentioning the usernames that are already taken by people registered in the system rather than masking … |
CWE-200
Information Exposure |
CVE-2018-11565 | 2024-11-21 12:43 | 2018-05-31 | Show | GitHub Exploit DB Packet Storm |
| 246829 | 9.8 |
CRITICAL
Network |
tp-link |
ipc_tl-ipc223\(p\)-6_firmware tl-ipc323k-d_firmware tl-ipc325\(kp\)_firmware tl-ipc40a-4_firmware |
/usr/lib/lua/luci/websys.lua on TP-LINK IPC TL-IPC223(P)-6, TL-IPC323K-D, TL-IPC325(KP)-*, and TL-IPC40A-4 devices has a hardcoded zMiVw8Kw0oxKXL0 password. |
CWE-798
Use of Hard-coded Credentials |
CVE-2018-11482 | 2024-11-21 12:43 | 2018-05-31 | Show | GitHub Exploit DB Packet Storm |
| 246830 | 8.8 |
HIGH
Network |
tp-link |
ipc_tl-ipc223\(p\)-6_firmware tl-ipc323k-d_firmware tl-ipc325\(kp\)_firmware tl-ipc40a-4_firmware |
TP-LINK IPC TL-IPC223(P)-6, TL-IPC323K-D, TL-IPC325(KP)-*, and TL-IPC40A-4 devices allow authenticated remote code execution via crafted JSON data because /usr/lib/lua/luci/torchlight/validator.lua d… |
CWE-20
Improper Input Validation |
CVE-2018-11481 | 2024-11-21 12:43 | 2018-05-31 | Show | GitHub Exploit DB Packet Storm |