Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 6, 2026, 2 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 257871 | 6.8 | 警告 | IBM | - | IBM WebSphere Application Server (WAS) におけるクロスサイトリクエストフォージェリの脆弱性 |
CWE-352
同一生成元ポリシー違反 |
CVE-2009-2746 | 2010-01-12 14:48 | 2009-11-13 | Show | GitHub Exploit DB Packet Storm |
| 257872 | 5 | 警告 | アップル | - | Apple Safari におけるローカル HTML ファイルを読まれる脆弱性 |
CWE-Other
その他 |
CVE-2009-2842 | 2010-01-7 12:09 | 2009-11-11 | Show | GitHub Exploit DB Packet Storm |
| 257873 | 5.5 | 警告 | シックス・アパート株式会社 | - | Movable Type におけるアクセス制限回避の脆弱性 |
CWE-264
認可・権限・アクセス制御 |
- | 2010-01-6 15:01 | 2010-01-6 | Show | GitHub Exploit DB Packet Storm |
| 257874 | 9.3 | 危険 | マイクロソフト | - | Microsoft Office Word および Open XML File Format Converter における、任意のコードを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2009-3135 | 2010-01-6 14:44 | 2009-11-10 | Show | GitHub Exploit DB Packet Storm |
| 257875 | 5 | 警告 | トレンドマイクロ 日本電気 Apache Software Foundation 富士通 サイバートラスト株式会社 サン・マイクロシステムズ ヒューレット・パッカード レッドハット |
- | Apache Tomcat の Apache HTTP Server との組合せによるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2007-0450 | 2010-01-6 14:43 | 2007-03-16 | Show | GitHub Exploit DB Packet Storm |
| 257876 | 9.3 | 危険 | マイクロソフト | - | Microsoft Office Excel および Open XML File Format Converter におけるオブジェクトを含むスプレッドシートの処理に関する任意のコードを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2009-3133 | 2010-01-5 16:18 | 2009-11-10 | Show | GitHub Exploit DB Packet Storm |
| 257877 | 9.3 | 危険 | マイクロソフト | - | Microsoft Office Excel および Open XML File Format Converter における BIFF レコードの処理に関する任意のコードを実行される脆弱性 |
CWE-119
バッファエラー |
CVE-2009-3130 | 2010-01-5 16:18 | 2009-11-10 | Show | GitHub Exploit DB Packet Storm |
| 257878 | 9.3 | 危険 | マイクロソフト | - | 複数の Microsoft 製品におけるエクセルファイルのフォーマットの処理に関する任意のコードを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2009-3134 | 2010-01-5 16:18 | 2009-11-10 | Show | GitHub Exploit DB Packet Storm |
| 257879 | 9.3 | 危険 | マイクロソフト | - | 複数の Microsoft 製品における計算式を含むスプレッドシートの処理に関する任意のコードを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2009-3132 | 2010-01-5 16:18 | 2009-11-10 | Show | GitHub Exploit DB Packet Storm |
| 257880 | 9.3 | 危険 | マイクロソフト | - | 複数の Microsoft 製品におけるセルに含まれる計算式の処理に関する任意のコードを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2009-3131 | 2010-01-5 16:17 | 2009-11-10 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 6, 2026, 4:18 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 247341 | 9.8 |
CRITICAL
Network |
mozilla debian canonical redhat |
firefox firefox_esr thunderbird debian_linux ubuntu_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_eus enterpri… |
When manipulating user events in nested loops while opening a document through script, it is possible to trigger a potentially exploitable crash due to poor event handling. This vulnerability affects… |
NVD-CWE-noinfo
|
CVE-2018-12392 | 2024-11-21 12:45 | 2019-03-1 | Show | GitHub Exploit DB Packet Storm |
| 247342 | 8.8 |
HIGH
Network |
mozilla |
firefox firefox_esr thunderbird |
During HTTP Live Stream playback on Firefox for Android, audio data can be accessed across origins in violation of security policies. Because the problem is in the underlying Android service, this is… |
CWE-863
Incorrect Authorization |
CVE-2018-12391 | 2024-11-21 12:45 | 2019-03-1 | Show | GitHub Exploit DB Packet Storm |
| 247343 | 9.8 |
CRITICAL
Network |
mozilla debian canonical redhat |
firefox firefox_esr thunderbird debian_linux ubuntu_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_aus enterpri… |
Mozilla developers and community members reported memory safety bugs present in Firefox 62 and Firefox ESR 60.2. Some of these bugs showed evidence of memory corruption and we presume that with enoug… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2018-12390 | 2024-11-21 12:45 | 2019-03-1 | Show | GitHub Exploit DB Packet Storm |
| 247344 | 8.8 |
HIGH
Network |
mozilla debian canonical redhat |
firefox_esr thunderbird debian_linux ubuntu_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_eus enterprise_linux_se… |
Mozilla developers and community members reported memory safety bugs present in Firefox ESR 60.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that s… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2018-12389 | 2024-11-21 12:45 | 2019-03-1 | Show | GitHub Exploit DB Packet Storm |
| 247345 | 6.1 |
MEDIUM
Network |
tibco | silver_fabric | The SOAP Admin API component of TIBCO Software Inc.'s TIBCO Silver Fabric contains a vulnerability that may allow reflected cross-site scripting (XSS) attacks. Affected releases are TIBCO Software In… |
CWE-79
Cross-site Scripting |
CVE-2018-12409 | 2024-11-21 12:45 | 2019-02-14 | Show | GitHub Exploit DB Packet Storm |
| 247346 | 9.8 |
CRITICAL
Network |
eclipse redhat |
openj9 enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server satellite |
In Eclipse OpenJ9 version 0.11.0, the OpenJ9 JIT compiler may incorrectly omit a null check on the receiver object of an Unsafe call when accelerating it. |
CWE-20
Improper Input Validation |
CVE-2018-12549 | 2024-11-21 12:45 | 2019-02-12 | Show | GitHub Exploit DB Packet Storm |
| 247347 | 9.8 |
CRITICAL
Network |
eclipse redhat |
openj9 enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server satellite |
In Eclipse OpenJ9, prior to the 0.12.0 release, the jio_snprintf() and jio_vsnprintf() native methods ignored the length parameter. This affects existing APIs that called the functions to exceed the … |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2018-12547 | 2024-11-21 12:45 | 2019-02-12 | Show | GitHub Exploit DB Packet Storm |
| 247348 | 9.8 |
CRITICAL
Network |
eclipse | openj9 | In OpenJDK + Eclipse OpenJ9 version 0.11.0 builds, the public jdk.crypto.jniprovider.NativeCrypto class contains public static natives which accept pointer values that are dereferenced in the native … |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2018-12548 | 2024-11-21 12:45 | 2019-02-1 | Show | GitHub Exploit DB Packet Storm |
| 247349 | 6.1 |
MEDIUM
Network |
open-xchange | open-xchange_appsuite | OX App Suite 7.8.4 and earlier allows Directory Traversal. |
CWE-79
Cross-site Scripting |
CVE-2018-12611 | 2024-11-21 12:45 | 2019-01-31 | Show | GitHub Exploit DB Packet Storm |
| 247350 | 5.3 |
MEDIUM
Network |
open-xchange | open-xchange_appsuite | OX App Suite 7.8.4 and earlier allows Information Exposure. |
CWE-200
Information Exposure |
CVE-2018-12610 | 2024-11-21 12:45 | 2019-01-31 | Show | GitHub Exploit DB Packet Storm |