Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
258761 6.9 警告 アップル - Windows 上で稼働する Apple iTunes のインストールパッケージにおける権限昇格の脆弱性 CWE-362
競合状態
CVE-2010-0532 2010-04-26 16:59 2010-03-31 Show GitHub Exploit DB Packet Storm
258762 4.3 警告 アップル - Apple iTunes におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2010-0531 2010-04-26 16:59 2010-03-31 Show GitHub Exploit DB Packet Storm
258763 9.3 危険 アップル - Windows 上で稼働する Apple QuickTime における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2010-0536 2010-04-26 16:59 2010-03-31 Show GitHub Exploit DB Packet Storm
258764 9.3 危険 アップル - Windows 上で稼働する Apple QuickTime の QuickTime.qts における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2010-0529 2010-04-26 16:59 2010-03-31 Show GitHub Exploit DB Packet Storm
258765 9.3 危険 アップル - Windows 上で稼働する Apple QuickTime における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2010-0528 2010-04-26 16:58 2010-03-31 Show GitHub Exploit DB Packet Storm
258766 9.3 危険 アップル - Apple QuickTime における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2010-0527 2010-04-26 16:58 2010-03-31 Show GitHub Exploit DB Packet Storm
258767 5 警告 アップル
サイバートラスト株式会社
Ruby-lang.org
レッドハット
- Ruby の BigDecimal ライブラリにおけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題
CVE-2009-1904 2010-04-26 16:46 2009-06-9 Show GitHub Exploit DB Packet Storm
258768 6.9 警告 アップル
Vim
- Vim の Python インターフェースの src/if_python.c における信頼性のない検索パスの脆弱性 CWE-Other
その他
CVE-2009-0316 2010-04-26 16:45 2009-01-28 Show GitHub Exploit DB Packet Storm
258769 9.3 危険 アップル
サイバートラスト株式会社
Vim
レッドハット
- Vim におけるエスケープ文字を適切に処理しないことに関する任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2008-4101 2010-04-26 16:45 2008-10-9 Show GitHub Exploit DB Packet Storm
258770 9.3 危険 アップル
サイバートラスト株式会社
Vim
レッドハット
- Vim における適切に入力をサニタイズしないことに関する任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2008-2712 2010-04-26 16:45 2008-10-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
254631 7.5 HIGH
Network
mozilla firefox If a long user name is used in a username/password combination in a site URL (such as " http://UserName:Password@example.com"), the resulting modal prompt will hang in a non-responsive state or crash… CWE-20
 Improper Input Validation 
CVE-2017-7783 2024-11-21 12:32 2018-06-12 Show GitHub Exploit DB Packet Storm
254632 5.3 MEDIUM
Network
mozilla firefox
firefox_esr
thunderbird
An error in the "WindowsDllDetourPatcher" where a RWX ("Read/Write/Execute") 4k block is allocated but never protected, violating DEP protections. Note: This attack only affects Windows operating sys… CWE-269
 Improper Privilege Management
CVE-2017-7782 2024-11-21 12:32 2018-06-12 Show GitHub Exploit DB Packet Storm
254633 5.9 MEDIUM
Network
mozilla firefox An error occurs in the elliptic curve point addition algorithm that uses mixed Jacobian-affine coordinates where it can yield a result "POINT_AT_INFINITY" when it should not. A man-in-the-middle atta… NVD-CWE-noinfo
CVE-2017-7781 2024-11-21 12:32 2018-06-12 Show GitHub Exploit DB Packet Storm
254634 9.8 CRITICAL
Network
mozilla firefox Memory safety bugs were reported in Firefox 54. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary c… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2017-7780 2024-11-21 12:32 2018-06-12 Show GitHub Exploit DB Packet Storm
254635 9.8 CRITICAL
Network
mozilla
debian
sil
firefox
thunderbird
firefox_esr
debian_linux
graphite2
A number of security vulnerabilities in the Graphite 2 library including out-of-bounds reads, buffer overflow reads and writes, and the use of uninitialized memory. These issues were addressed in Gra… CWE-119
CWE-125
CWE-787
Incorrect Access of Indexable Resource ('Range Error') 
Out-of-bounds Read
 Out-of-bounds Write
CVE-2017-7778 2024-11-21 12:32 2018-06-12 Show GitHub Exploit DB Packet Storm
254636 5.9 MEDIUM
Network
mozilla firefox A mechanism where when a new tab is loaded through JavaScript events, if fullscreen mode is then entered, the addressbar will not be rendered. This would allow a malicious site to displayed a spoofed… CWE-20
 Improper Input Validation 
CVE-2017-7770 2024-11-21 12:32 2018-06-12 Show GitHub Exploit DB Packet Storm
254637 9.8 CRITICAL
Network
debian
redhat
mozilla
debian_linux
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
enterprise_linux_server_aus
enterprise_linux_server_eus
firefox
firefox_esr
thunderb…
Memory safety bugs were reported in Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of the… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2017-7779 2024-11-21 12:32 2018-06-12 Show GitHub Exploit DB Packet Storm
254638 5.5 MEDIUM
Local
mozilla firefox
firefox_esr
The Mozilla Maintenance Service can be invoked by an unprivileged user to read 32 bytes of any arbitrary file on the local system by convincing the service that it is reading a status file provided b… CWE-200
Information Exposure
CVE-2017-7768 2024-11-21 12:32 2018-06-12 Show GitHub Exploit DB Packet Storm
254639 5.5 MEDIUM
Local
mozilla firefox
firefox_esr
The Mozilla Maintenance Service can be invoked by an unprivileged user to overwrite arbitrary files with junk data using the Mozilla Windows Updater, which runs with the Maintenance Service's privile… CWE-269
 Improper Privilege Management
CVE-2017-7767 2024-11-21 12:32 2018-06-12 Show GitHub Exploit DB Packet Storm
254640 7.8 HIGH
Local
mozilla firefox
firefox_esr
An attack using manipulation of "updater.ini" contents, used by the Mozilla Windows Updater, and privilege escalation through the Mozilla Maintenance Service to allow for arbitrary file execution and… NVD-CWE-noinfo
CVE-2017-7766 2024-11-21 12:32 2018-06-12 Show GitHub Exploit DB Packet Storm