Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 22, 2026, 2 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 259061 | 9.3 | 危険 | Mozilla Foundation | - | Apple Mac OS X 上で稼働する複数の Mozilla 製品における任意のコードを実行される脆弱性 |
CWE-119
バッファエラー |
CVE-2010-2770 | 2010-09-30 17:56 | 2010-09-7 | Show | GitHub Exploit DB Packet Storm |
| 259062 | 7.2 | 危険 | レッドハット | - | Red Hat Package Manager の lib/fsm.c における 権限昇格の脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2005-4889 | 2010-09-29 16:00 | 2010-06-8 | Show | GitHub Exploit DB Packet Storm |
| 259063 | 10 | 危険 | シスコシステムズ | - | Cisco Industrial Ethernet 3000 シリーズに SNMP Community String がハードコードされている問題 |
CWE-264
認可・権限・アクセス制御 |
CVE-2010-1574 | 2010-09-29 16:00 | 2010-07-13 | Show | GitHub Exploit DB Packet Storm |
| 259064 | 4.3 | 警告 | IBM | - | IBM WebSphere Application Server の管理コンソールにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-0778 | 2010-09-29 16:00 | 2010-06-18 | Show | GitHub Exploit DB Packet Storm |
| 259065 | 4.3 | 警告 | IBM | - | IBM WebSphere Application Server の管理コンソールにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-0779 | 2010-09-29 16:00 | 2010-06-18 | Show | GitHub Exploit DB Packet Storm |
| 259066 | 4.3 | 警告 | IBM | - | IBM HTTP Server の mod_ibm_ssl におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2010-2327 | 2010-09-29 15:59 | 2010-03-18 | Show | GitHub Exploit DB Packet Storm |
| 259067 | 6.9 | 警告 | アップル | - | Windows 上で稼働する Apple Safari における権限を取得される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2010-1805 | 2010-09-28 14:46 | 2010-09-7 | Show | GitHub Exploit DB Packet Storm |
| 259068 | 4.3 | 警告 | Zope Foundation | - | Zope の ZServer におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-DesignError
|
CVE-2010-3198 | 2010-09-28 14:46 | 2010-09-1 | Show | GitHub Exploit DB Packet Storm |
| 259069 | - | - | Blackboard, Inc. | - | Blackboard Transact データベースに情報漏えいの脆弱性 | - | - | 2010-09-28 14:46 | 2010-09-2 | Show | GitHub Exploit DB Packet Storm |
| 259070 | 6.8 | 警告 | w3m project ターボリナックス サイバートラスト株式会社 レッドハット |
- | w3m のistream.c における X.509 証明書の処理に関する任意の SSL サーバになりすまされる脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2010-2074 | 2010-09-27 16:24 | 2010-06-16 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 22, 2026, 4 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 249821 | 9.8 |
CRITICAL
Network |
redhat debian canonical mozilla |
enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus enterprise_linux_server_tus debian_linux ubu… |
A use-after-free vulnerability can occur when an IndexedDB index is deleted while still in use by JavaScript code that is providing payload values to be stored. This results in a potentially exploita… |
CWE-416
Use After Free |
CVE-2018-12378 | 2024-11-21 12:45 | 2018-10-18 | Show | GitHub Exploit DB Packet Storm |
| 249822 | 9.8 |
CRITICAL
Network |
redhat debian canonical mozilla |
enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_eus enterprise_linux_server_tus enterprise_linux_server_aus debian_linux ubu… |
A use-after-free vulnerability can occur when refresh driver timers are refreshed in some circumstances during shutdown when the timer is deleted while still in use. This results in a potentially exp… |
CWE-416
Use After Free |
CVE-2018-12377 | 2024-11-21 12:45 | 2018-10-18 | Show | GitHub Exploit DB Packet Storm |
| 249823 | 9.8 |
CRITICAL
Network |
redhat debian canonical mozilla |
enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_eus enterprise_linux_server_tus enterprise_linux_server_aus debian_linux ubu… |
Memory safety bugs present in Firefox 61 and Firefox ESR 60.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to … |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2018-12376 | 2024-11-21 12:45 | 2018-10-18 | Show | GitHub Exploit DB Packet Storm |
| 249824 | 8.1 |
HIGH
Network |
mozilla |
firefox firefox_esr thunderbird |
Windows 10 does not warn users before opening executable files with the SettingContent-ms extension even when they have been downloaded from the internet and have the "Mark of the Web." Without the w… |
NVD-CWE-noinfo
|
CVE-2018-12368 | 2024-11-21 12:45 | 2018-10-18 | Show | GitHub Exploit DB Packet Storm |
| 249825 | 4.3 |
MEDIUM
Network |
debian canonical mozilla |
debian_linux ubuntu_linux firefox thunderbird firefox_esr |
In the previous mitigations for Spectre, the resolution or precision of various methods was reduced to counteract the ability to measure precise time intervals. In that work PerformanceNavigationTimi… |
CWE-20
Improper Input Validation |
CVE-2018-12367 | 2024-11-21 12:45 | 2018-10-18 | Show | GitHub Exploit DB Packet Storm |
| 249826 | 8.8 |
HIGH
Network |
mozilla debian canonical |
firefox thunderbird firefox_esr debian_linux ubuntu_linux |
An integer overflow can occur in the SwizzleData code while calculating buffer sizes. The overflowed value is used for subsequent graphics computations when their inputs are not sanitized which resul… |
CWE-190
Integer Overflow or Wraparound |
CVE-2018-12361 | 2024-11-21 12:45 | 2018-10-18 | Show | GitHub Exploit DB Packet Storm |
| 249827 | 4.3 |
MEDIUM
Network |
mozilla canonical |
firefox ubuntu_linux |
Service workers can use redirection to avoid the tainting of cross-origin resources in some instances, allowing a malicious site to read responses which are supposed to be opaque. This vulnerability … |
CWE-200
Information Exposure |
CVE-2018-12358 | 2024-11-21 12:45 | 2018-10-18 | Show | GitHub Exploit DB Packet Storm |
| 249828 | 6.5 |
MEDIUM
Network |
redhat debian canonical mozilla |
enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_eus enterprise_linux_server_tus enterprise_linux_server_aus debian_linux ubu… |
An invalid grid size during QCMS (color profile) transformations can result in the out-of-bounds read interpreted as a float value. This could leak private data into the output. This vulnerability af… |
CWE-125
Out-of-bounds Read |
CVE-2018-12366 | 2024-11-21 12:45 | 2018-10-18 | Show | GitHub Exploit DB Packet Storm |
| 249829 | 6.5 |
MEDIUM
Network |
redhat debian canonical mozilla |
enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_eus enterprise_linux_server_tus enterprise_linux_server_aus debian_linux ubu… |
A compromised IPC child process can escape the content sandbox and list the names of arbitrary files on the file system without user consent or interaction. This could result in exposure of private l… |
CWE-200
Information Exposure |
CVE-2018-12365 | 2024-11-21 12:45 | 2018-10-18 | Show | GitHub Exploit DB Packet Storm |
| 249830 | 8.8 |
HIGH
Network |
redhat debian canonical mozilla |
enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_eus enterprise_linux_server_tus enterprise_linux_server_aus debian_linux ubu… |
NPAPI plugins, such as Adobe Flash, can send non-simple cross-origin requests, bypassing CORS by making a same-origin POST that does a 307 redirect to the target site. This allows for a malicious sit… |
CWE-352
Origin Validation Error |
CVE-2018-12364 | 2024-11-21 12:45 | 2018-10-18 | Show | GitHub Exploit DB Packet Storm |