Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
258371 9.3 危険 マイクロソフト - Microsoft Windows Help and Support Center に脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2010-1885 2010-07-23 18:55 2010-06-10 Show GitHub Exploit DB Packet Storm
258372 4.9 警告 マイクロソフト - Microsoft Windows の Canonical Display Driver における任意のコードを実行される脆弱性 CWE-DesignError
CVE-2009-3678 2010-07-23 18:55 2010-05-14 Show GitHub Exploit DB Packet Storm
258373 9.3 危険 サン・マイクロシステムズ
レッドハット
リアルネットワークス
- Realnetworks RealPlayer における ASM RuleBook の処理に関する脆弱性 CWE-119
バッファエラー
CVE-2009-4247 2010-07-23 18:55 2010-01-19 Show GitHub Exploit DB Packet Storm
258374 10 危険 サイバートラスト株式会社
Apache Software Foundation
- Apache Geronimo の LoginModule 実装における認証要求を回避される脆弱性 CWE-287
不適切な認証
CVE-2007-4548 2010-07-22 20:51 2007-08-13 Show GitHub Exploit DB Packet Storm
258375 5 警告 サイバートラスト株式会社
Apache Software Foundation
- Apache Geronimo の management EJB における認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2007-5085 2010-07-22 20:51 2007-09-6 Show GitHub Exploit DB Packet Storm
258376 7.5 危険 サイバートラスト株式会社
Apache Software Foundation
- Apache Geronimo の SQLLoginModule における認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2007-5797 2010-07-22 20:51 2007-10-22 Show GitHub Exploit DB Packet Storm
258377 6.8 警告 InterSect Alliance International Pty - Snare Agent の Web インターフェースにクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2010-2594 2010-07-22 20:51 2010-06-30 Show GitHub Exploit DB Packet Storm
258378 5.5 警告 富士通 - Internet Navigware Server における情報漏えいの脆弱性 CWE-200
情報漏えい
- 2010-07-22 20:51 2010-06-18 Show GitHub Exploit DB Packet Storm
258379 7.8 危険 サイバートラスト株式会社
Linux
レッドハット
- Linux kernel の NFSv4 クライアントの nfs4_proc_lock 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2009-3726 2010-07-22 17:53 2009-11-9 Show GitHub Exploit DB Packet Storm
258380 5 警告 IBM
アップル
サイバートラスト株式会社
サン・マイクロシステムズ
ヒューレット・パッカード
マイクロソフト
オラクル
OpenOffice.org Project
レッドハット
- XML 署名の検証において認証回避が可能な問題 CWE-DesignError
CVE-2009-0217 2010-07-22 17:52 2009-07-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
256321 9.8 CRITICAL
Network
debian
redhat
mozilla
debian_linux
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux
enterprise_linux_server
enterprise_linux_server_aus
enterprise_linux_server_eus
thunderbird
An out-of-bounds write vulnerability while decoding improperly formed BinHex format archives. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53. CWE-787
 Out-of-bounds Write
CVE-2017-5443 2024-11-21 12:27 2018-06-12 Show GitHub Exploit DB Packet Storm
256322 9.8 CRITICAL
Network
debian
redhat
mozilla
debian_linux
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux
enterprise_linux_server
enterprise_linux_server_aus
enterprise_linux_server_eus
thunderbird
A use-after-free vulnerability during changes in style when manipulating DOM elements. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45… CWE-416
 Use After Free
CVE-2017-5442 2024-11-21 12:27 2018-06-12 Show GitHub Exploit DB Packet Storm
256323 9.8 CRITICAL
Network
debian
redhat
mozilla
debian_linux
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux
enterprise_linux_server
enterprise_linux_server_aus
enterprise_linux_server_eus
thunderbird
A use-after-free vulnerability when holding a selection during scroll events. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firef… CWE-416
 Use After Free
CVE-2017-5441 2024-11-21 12:27 2018-06-12 Show GitHub Exploit DB Packet Storm
256324 7.5 HIGH
Network
debian
redhat
mozilla
debian_linux
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux
enterprise_linux_server
enterprise_linux_server_aus
enterprise_linux_server_eus
thunderbird
A vulnerability while parsing "application/http-index-format" format content where uninitialized values are used to create an array. This could allow the reading of uninitialized memory into the arra… CWE-129
 Improper Validation of Array Index
CVE-2017-5445 2024-11-21 12:27 2018-06-12 Show GitHub Exploit DB Packet Storm
256325 7.5 HIGH
Network
debian
redhat
mozilla
debian_linux
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux
enterprise_linux_server
enterprise_linux_server_aus
enterprise_linux_server_eus
thunderbird
A buffer overflow vulnerability while parsing "application/http-index-format" format content when the header contains improperly formatted data. This allows for an out-of-bounds read of data from mem… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2017-5444 2024-11-21 12:27 2018-06-12 Show GitHub Exploit DB Packet Storm
256326 9.8 CRITICAL
Network
debian
redhat
mozilla
debian_linux
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux
enterprise_linux_server
enterprise_linux_server_aus
enterprise_linux_server_eus
thunderbird
A use-after-free vulnerability during XSLT processing due to a failure to propagate error conditions during matching while evaluating context, leading to objects being used when they no longer exist.… CWE-416
 Use After Free
CVE-2017-5440 2024-11-21 12:27 2018-06-12 Show GitHub Exploit DB Packet Storm
256327 9.8 CRITICAL
Network
debian
redhat
mozilla
debian_linux
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux
enterprise_linux_server
enterprise_linux_server_aus
enterprise_linux_server_eus
firefox
thu…
A use-after-free vulnerability during XSLT processing due to poor handling of template parameters. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Fire… CWE-416
 Use After Free
CVE-2017-5439 2024-11-21 12:27 2018-06-12 Show GitHub Exploit DB Packet Storm
256328 9.8 CRITICAL
Network
debian
redhat
mozilla
debian_linux
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux
enterprise_linux_server
enterprise_linux_server_aus
enterprise_linux_server_eus
thunderbird
A use-after-free vulnerability during XSLT processing due to the result handler being held by a freed handler during handling. This results in a potentially exploitable crash. This vulnerability affe… CWE-416
 Use After Free
CVE-2017-5438 2024-11-21 12:27 2018-06-12 Show GitHub Exploit DB Packet Storm
256329 8.8 HIGH
Network
debian
redhat
sil
mozilla
debian_linux
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux
enterprise_linux_server
enterprise_linux_server_aus
enterprise_linux_server_eus
graphite2
t…
An out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite font. This results in a potentially exploitable crash. This issue was fixed in the Graphite 2 library as… CWE-787
 Out-of-bounds Write
CVE-2017-5436 2024-11-21 12:27 2018-06-12 Show GitHub Exploit DB Packet Storm
256330 9.8 CRITICAL
Network
redhat
debian
mozilla
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
debian_linux
thunderbird
firefox
firefox_esr
A use-after-free vulnerability occurs when redirecting focus handling which results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR … CWE-416
 Use After Free
CVE-2017-5434 2024-11-21 12:27 2018-06-12 Show GitHub Exploit DB Packet Storm