Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 9, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 257481 | 6.4 | 警告 | アップル | - | Apple Mac OS X の libsecurity における SSL サーバになりすまされる脆弱性 |
CWE-287
不適切な認証 |
CVE-2010-1802 | 2010-09-8 15:52 | 2010-08-25 | Show | GitHub Exploit DB Packet Storm |
| 257482 | 6.8 | 警告 | アップル | - | Apple Mac OS X の CoreGraphics におけるヒープベースのバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2010-1801 | 2010-09-8 15:52 | 2010-08-25 | Show | GitHub Exploit DB Packet Storm |
| 257483 | 5 | 警告 | アップル ClamAV |
- | ClamAV の libclamav/mspack.c における qtm_decompress 関数におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2010-1311 | 2010-09-8 15:52 | 2010-04-8 | Show | GitHub Exploit DB Packet Storm |
| 257484 | 5 | 警告 | アップル | - | Apple Mac OS X の CFNetwork における重要な情報を取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2010-1800 | 2010-09-8 15:51 | 2010-08-25 | Show | GitHub Exploit DB Packet Storm |
| 257485 | 6.8 | 警告 | アップル | - | Apple Mac OS X の Apple Type Services におけるスタックベースのバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2010-1808 | 2010-09-8 15:51 | 2010-08-25 | Show | GitHub Exploit DB Packet Storm |
| 257486 | 6.2 | 警告 | サイバートラスト株式会社 Todd C. Miller ターボリナックス レッドハット |
- | sudo の secure path 機能における権限昇格の脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2010-1646 | 2010-09-8 15:50 | 2010-06-7 | Show | GitHub Exploit DB Packet Storm |
| 257487 | 6.9 | 警告 | サイバートラスト株式会社 Todd C. Miller ターボリナックス レッドハット |
- | sudo における任意のコマンドを実行される脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2010-1163 | 2010-09-8 15:50 | 2010-04-16 | Show | GitHub Exploit DB Packet Storm |
| 257488 | 10 | 危険 | ESET アップル ClamAV ソースネクスト |
- | 複数のアンチウィルス製品に脆弱性 |
CWE-noinfo
情報不足 |
CVE-2010-0098 | 2010-09-8 15:50 | 2010-04-13 | Show | GitHub Exploit DB Packet Storm |
| 257489 | 7.5 | 危険 | The PHP Group アップル |
- | PHP の safe_mode 実装におけるアクセス制限を回避される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2010-1129 | 2010-09-8 15:49 | 2010-03-26 | Show | GitHub Exploit DB Packet Storm |
| 257490 | 4.4 | 警告 | サイバートラスト株式会社 Todd C. Miller ターボリナックス レッドハット |
- | sudo における権限昇格の脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2010-0427 | 2010-09-8 15:49 | 2010-02-25 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 9, 2026, 4:16 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 247701 | 6.5 |
MEDIUM
Network |
mozilla redhat debian canonical |
thunderbird enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server debian_linux ubuntu_linux |
Decrypted S/MIME parts, when included in HTML crafted for an attack, can leak plaintext when included in a a HTML reply/forward. This vulnerability affects Thunderbird < 52.9. |
CWE-200
Information Exposure |
CVE-2018-12372 | 2024-11-21 12:45 | 2018-10-18 | Show | GitHub Exploit DB Packet Storm |
| 247702 | 8.8 |
HIGH
Network |
canonical mozilla |
ubuntu_linux firefox |
In Reader View SameSite cookie protections are not checked on exiting. This allows for a payload to be triggered when Reader View is exited if loaded by a malicious site while Reader mode is active, … |
CWE-352
Origin Validation Error |
CVE-2018-12370 | 2024-11-21 12:45 | 2018-10-18 | Show | GitHub Exploit DB Packet Storm |
| 247703 | 9.8 |
CRITICAL
Network |
mozilla canonical |
firefox firefox_esr ubuntu_linux |
WebExtensions bundled with embedded experiments were not correctly checked for proper authorization. This allowed a malicious WebExtension to gain full browser permissions. This vulnerability affects… |
CWE-863
Incorrect Authorization |
CVE-2018-12369 | 2024-11-21 12:45 | 2018-10-18 | Show | GitHub Exploit DB Packet Storm |
| 247704 | 7.8 |
HIGH
Local |
redhat debian mozilla |
enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_eus enterprise_linux_server_tus enterprise_linux_server_aus debian_linux fir… |
When the Mozilla Updater opens a MAR format file which contains a very long item filename, an out-of-bounds write can be triggered, leading to a potentially exploitable crash. This requires running t… |
CWE-787
Out-of-bounds Write |
CVE-2018-12379 | 2024-11-21 12:45 | 2018-10-18 | Show | GitHub Exploit DB Packet Storm |
| 247705 | 9.8 |
CRITICAL
Network |
redhat debian canonical mozilla |
enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus enterprise_linux_server_tus debian_linux ubu… |
A use-after-free vulnerability can occur when an IndexedDB index is deleted while still in use by JavaScript code that is providing payload values to be stored. This results in a potentially exploita… |
CWE-416
Use After Free |
CVE-2018-12378 | 2024-11-21 12:45 | 2018-10-18 | Show | GitHub Exploit DB Packet Storm |
| 247706 | 9.8 |
CRITICAL
Network |
redhat debian canonical mozilla |
enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_eus enterprise_linux_server_tus enterprise_linux_server_aus debian_linux ubu… |
A use-after-free vulnerability can occur when refresh driver timers are refreshed in some circumstances during shutdown when the timer is deleted while still in use. This results in a potentially exp… |
CWE-416
Use After Free |
CVE-2018-12377 | 2024-11-21 12:45 | 2018-10-18 | Show | GitHub Exploit DB Packet Storm |
| 247707 | 9.8 |
CRITICAL
Network |
redhat debian canonical mozilla |
enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_eus enterprise_linux_server_tus enterprise_linux_server_aus debian_linux ubu… |
Memory safety bugs present in Firefox 61 and Firefox ESR 60.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to … |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2018-12376 | 2024-11-21 12:45 | 2018-10-18 | Show | GitHub Exploit DB Packet Storm |
| 247708 | 8.1 |
HIGH
Network |
mozilla |
firefox firefox_esr thunderbird |
Windows 10 does not warn users before opening executable files with the SettingContent-ms extension even when they have been downloaded from the internet and have the "Mark of the Web." Without the w… |
NVD-CWE-noinfo
|
CVE-2018-12368 | 2024-11-21 12:45 | 2018-10-18 | Show | GitHub Exploit DB Packet Storm |
| 247709 | 4.3 |
MEDIUM
Network |
debian canonical mozilla |
debian_linux ubuntu_linux firefox thunderbird firefox_esr |
In the previous mitigations for Spectre, the resolution or precision of various methods was reduced to counteract the ability to measure precise time intervals. In that work PerformanceNavigationTimi… |
CWE-20
Improper Input Validation |
CVE-2018-12367 | 2024-11-21 12:45 | 2018-10-18 | Show | GitHub Exploit DB Packet Storm |
| 247710 | 8.8 |
HIGH
Network |
mozilla debian canonical |
firefox thunderbird firefox_esr debian_linux ubuntu_linux |
An integer overflow can occur in the SwizzleData code while calculating buffer sizes. The overflowed value is used for subsequent graphics computations when their inputs are not sanitized which resul… |
CWE-190
Integer Overflow or Wraparound |
CVE-2018-12361 | 2024-11-21 12:45 | 2018-10-18 | Show | GitHub Exploit DB Packet Storm |