Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 21, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
259011	9.3	危険	アップル	-	Apple Safari の ImageIO における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0043	2010-07-13 16:30	2010-03-15	Show	GitHub Exploit DB Packet Storm

259012	4.3	警告	アップル	-	Apple Safari の ImageIO における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-0041	2010-07-13 16:29	2010-03-15	Show	GitHub Exploit DB Packet Storm

259013	6.8	警告	アップルサイバートラスト株式会社 Mozilla Foundation レッドハット	-	libc における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2009-0689	2010-07-13 16:28	2009-07-1	Show	GitHub Exploit DB Packet Storm

259014	6.8	警告	アップル	-	WebKit におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2009-2816	2010-07-13 16:28	2009-11-11	Show	GitHub Exploit DB Packet Storm

259015	9.3	危険	アップル	-	Apple Safari の WebKit におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-2195	2010-07-13 16:27	2009-08-11	Show	GitHub Exploit DB Packet Storm

259016	4.3	警告	xmlsoft.org アップルサイバートラスト株式会社サン・マイクロシステムズ OpenOffice.org Project レッドハット	-	libxml2 および libxml の Notation または Enumeration 属性タイプの処理におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-2416	2010-07-13 16:27	2009-08-11	Show	GitHub Exploit DB Packet Storm

259017	4.3	警告	xmlsoft.org アップルサイバートラスト株式会社サン・マイクロシステムズ OpenOffice.org Project レッドハット	-	libxml2 および libxml における DTD 内の要素宣言の処理に関するサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2009-2414	2010-07-13 16:26	2009-08-11	Show	GitHub Exploit DB Packet Storm

259018	4.3	警告	アップル	-	Apple Mac OS の CFNetwork における任意の HTTPS Web サイトを訪問しているように偽装可能な脆弱性	CWE-Other その他	CVE-2009-1723	2010-07-13 16:25	2009-08-5	Show	GitHub Exploit DB Packet Storm

259019	3.5	注意	アップル	-	Apple Mac OS X の Wiki サーバにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1382	2010-07-12 18:12	2010-06-15	Show	GitHub Exploit DB Packet Storm

259020	3.5	注意	アップル	-	Apple Mac OS X の SMB ファイルサーバにおける任意のファイルにアクセスされる脆弱性	CWE-16 環境設定	CVE-2010-1381	2010-07-12 18:12	2010-06-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
255101	7.5	HIGH Network	eclipse debian	jetty debian_linux	In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), HTTP/0.9 is handled poorly. An HTTP/1 style request line…	NVD-CWE-noinfo	CVE-2017-7656	2024-11-21 12:32	2018-06-27	Show	GitHub Exploit DB Packet Storm

255102	5.3	MEDIUM Network	netapp	oncommand_unified_manager	NetApp OnCommand Unified Manager for 7-Mode (core package) versions prior to 5.2.3 may disclose sensitive LDAP account information to authenticated users when the LDAP authentication configuration is…	CWE-200 Information Exposure	CVE-2017-7568	2024-11-21 12:32	2018-06-23	Show	GitHub Exploit DB Packet Storm

255103	5.3	MEDIUM Network	mozilla redhat debian	thunderbird enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus debian_linux	RSS fields can inject new lines into the created email structure, modifying the message body. This vulnerability affects Thunderbird < 52.5.2.	CWE-74 Injection	CVE-2017-7848	2024-11-21 12:32	2018-06-12	Show	GitHub Exploit DB Packet Storm

255104	4.3	MEDIUM Network	debian redhat mozilla	debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_aus enterprise_linux_eus thunderbird	Crafted CSS in an RSS feed can leak and reveal local path strings, which may contain user name. This vulnerability affects Thunderbird < 52.5.2.	CWE-200 Information Exposure	CVE-2017-7847	2024-11-21 12:32	2018-06-12	Show	GitHub Exploit DB Packet Storm

255105	8.8	HIGH Network	redhat debian mozilla	enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus debian_linux thunderbird	It is possible to execute JavaScript in the parsed RSS feed when RSS feed is viewed as a website, e.g. via "View -> Feed article -> Website" or in the standard format of "View -> Feed article -> defa…	CWE-74 Injection	CVE-2017-7846	2024-11-21 12:32	2018-06-12	Show	GitHub Exploit DB Packet Storm

255106	8.8	HIGH Network	mozilla	firefox firefox_esr thunderbird	A buffer overflow occurs when drawing and validating elements using Direct 3D 9 with the ANGLE graphics library, used for WebGL content. This is due to an incorrect value being passed within the libr…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-7845	2024-11-21 12:32	2018-06-12	Show	GitHub Exploit DB Packet Storm

255107	6.5	MEDIUM Network	mozilla	firefox	A combination of an external SVG image referenced on a page and the coloring of anchor links stored within this image can be used to determine which pages a user has in their history. This can allow …	CWE-200 Information Exposure	CVE-2017-7844	2024-11-21 12:32	2018-06-12	Show	GitHub Exploit DB Packet Storm

255108	5.3	MEDIUM Network	mozilla	firefox	If a document's Referrer Policy attribute is set to "no-referrer" sometimes two network requests are made for "<link>" elements instead of one. One of these requests includes the referrer instead of …	CWE-200 Information Exposure	CVE-2017-7842	2024-11-21 12:32	2018-06-12	Show	GitHub Exploit DB Packet Storm

255109	6.1	MEDIUM Network	mozilla	firefox	JavaScript can be injected into an exported bookmarks file by placing JavaScript code into user-supplied tags in saved bookmarks. If the resulting exported HTML file is later opened in a browser this…	CWE-79 Cross-site Scripting	CVE-2017-7840	2024-11-21 12:32	2018-06-12	Show	GitHub Exploit DB Packet Storm

255110	7.5	HIGH Network	debian mozilla redhat	debian_linux firefox firefox_esr enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus	When Private Browsing mode is used, it is possible for a web worker to write persistent data to IndexedDB and fingerprint a user uniquely. IndexedDB should not be available in Private Browsing mode a…	CWE-200 Information Exposure	CVE-2017-7843	2024-11-21 12:32	2018-06-12	Show	GitHub Exploit DB Packet Storm