Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
258621 3.5 注意 アップル - Apple Mac OS X の Wiki サーバにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-1382 2010-07-12 18:12 2010-06-15 Show GitHub Exploit DB Packet Storm
258622 3.5 注意 アップル - Apple Mac OS X の SMB ファイルサーバにおける任意のファイルにアクセスされる脆弱性 CWE-16
環境設定
CVE-2010-1381 2010-07-12 18:12 2010-06-15 Show GitHub Exploit DB Packet Storm
258623 7.5 危険 アップル - Apple Mac OS X の cgtexttops CUPS フィルタにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2010-1380 2010-07-12 18:11 2010-06-15 Show GitHub Exploit DB Packet Storm
258624 5 警告 アップル - Apple Mac OS X のプリンタ設定におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2010-1379 2010-07-12 18:11 2010-06-15 Show GitHub Exploit DB Packet Storm
258625 5 警告 IBM - IBM WebSphere Application Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
CWE-noinfo
CVE-2010-0775 2010-07-12 16:43 2010-05-8 Show GitHub Exploit DB Packet Storm
258626 4.3 警告 IBM - IBM WebSphere Application Server におけるアクセス制限回避の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-0774 2010-07-12 16:43 2010-05-8 Show GitHub Exploit DB Packet Storm
258627 5 警告 アップル
サイバートラスト株式会社
レッドハット
ターボリナックス
CUPS
- CUPS の cupsd におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2009-3553 2010-07-12 16:41 2009-11-20 Show GitHub Exploit DB Packet Storm
258628 9.3 危険 アップル - Apple Mac OS X の Open Directory における任意のコードを実行される脆弱性 CWE-310
暗号の問題
CVE-2010-1377 2010-07-9 16:27 2010-06-15 Show GitHub Exploit DB Packet Storm
258629 6.8 警告 アップル - Apple Mac OS X のネットワーク認証における任意のコードを実行される脆弱性 CWE-134
書式文字列の問題
CVE-2010-1376 2010-07-9 16:25 2010-06-15 Show GitHub Exploit DB Packet Storm
258630 7.2 危険 アップル - Apple Mac OS X のネットワーク認証における権限を取得される脆弱性 CWE-287
不適切な認証
CVE-2010-1375 2010-07-9 16:25 2010-06-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
249231 7.5 HIGH
Network
mozilla
canonical
firefox
ubuntu_linux
Some special resource URIs will cause a non-exploitable crash if loaded with optional parameters following a '?' in the parsed string. This could lead to denial of service (DOS) attacks. This vulnera… CWE-20
 Improper Input Validation 
CVE-2018-12401 2024-11-21 12:45 2019-03-1 Show GitHub Exploit DB Packet Storm
249232 5.3 MEDIUM
Network
mozilla firefox In private browsing mode on Firefox for Android, favicons are cached in the cache/icons folder as they are in non-private mode. This allows information leakage of sites visited during private browsin… CWE-200
Information Exposure
CVE-2018-12400 2024-11-21 12:45 2019-03-1 Show GitHub Exploit DB Packet Storm
249233 4.3 MEDIUM
Network
mozilla
canonical
firefox
ubuntu_linux
When a new protocol handler is registered, the API accepts a title argument which can be used to mislead users about which domain is registering the new protocol. This may result in the user approvin… CWE-287
Improper Authentication
CVE-2018-12399 2024-11-21 12:45 2019-03-1 Show GitHub Exploit DB Packet Storm
249234 6.5 MEDIUM
Network
mozilla
canonical
firefox
ubuntu_linux
By using the reflected URL in some special resource URIs, such as chrome:, it is possible to inject stylesheets and bypass Content Security Policy (CSP). This vulnerability affects Firefox < 63. NVD-CWE-noinfo
CVE-2018-12398 2024-11-21 12:45 2019-03-1 Show GitHub Exploit DB Packet Storm
249235 7.1 HIGH
Local
mozilla
redhat
debian
canonical
firefox
firefox_esr
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
enterprise_linux_server_eus
debian_linux
ubuntu_linux
A WebExtension can request access to local files without the warning prompt stating that the extension will "Access your data for all websites" being displayed to the user. This allows extensions to … CWE-200
Information Exposure
CVE-2018-12397 2024-11-21 12:45 2019-03-1 Show GitHub Exploit DB Packet Storm
249236 7.5 HIGH
Network
mozilla
debian
canonical
redhat
firefox
firefox_esr
debian_linux
ubuntu_linux
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
enterprise_linux_server_eus
By rewriting the Host: request headers using the webRequest API, a WebExtension can bypass domain restrictions through domain fronting. This would allow access to domains that share a host that are o… NVD-CWE-noinfo
CVE-2018-12395 2024-11-21 12:45 2019-03-1 Show GitHub Exploit DB Packet Storm
249237 8.8 HIGH
Network
mozilla
canonical
firefox
ubuntu_linux
Mozilla developers and community members reported memory safety bugs present in Firefox 62. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2018-12388 2024-11-21 12:45 2019-03-1 Show GitHub Exploit DB Packet Storm
249238 6.5 MEDIUM
Network
mozilla
debian
canonical
redhat
firefox
firefox_esr
debian_linux
ubuntu_linux
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
enterprise_linux_server_tus
enterprise_linux_server…
A vulnerability where a WebExtension can run content scripts in disallowed contexts following navigation or other events. This allows for potential privilege escalation by the WebExtension on sites w… CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2018-12396 2024-11-21 12:45 2019-03-1 Show GitHub Exploit DB Packet Storm
249239 7.5 HIGH
Network
mozilla
debian
canonical
redhat
thunderbird
firefox
firefox_esr
debian_linux
ubuntu_linux
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
enterprise_linux_server_tus
enterpri…
A potential vulnerability was found in 32-bit builds where an integer overflow during the conversion of scripts to an internal UTF-16 representation could result in allocating a buffer too small for … CWE-787
CWE-190
 Out-of-bounds Write
 Integer Overflow or Wraparound
CVE-2018-12393 2024-11-21 12:45 2019-03-1 Show GitHub Exploit DB Packet Storm
249240 9.8 CRITICAL
Network
mozilla
debian
canonical
redhat
firefox
firefox_esr
thunderbird
debian_linux
ubuntu_linux
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
enterprise_linux_server_eus
enterpri…
When manipulating user events in nested loops while opening a document through script, it is possible to trigger a potentially exploitable crash due to poor event handling. This vulnerability affects… NVD-CWE-noinfo
CVE-2018-12392 2024-11-21 12:45 2019-03-1 Show GitHub Exploit DB Packet Storm