Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
691	7.5	重要 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2026-8966	2026-05-22 10:51	2026-05-19	Show	GitHub Exploit DB Packet Storm

692	7.5	重要 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2026-8967	2026-05-22 10:51	2026-05-19	Show	GitHub Exploit DB Packet Storm

693	7.5	重要 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品におけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-8968	2026-05-22 10:51	2026-05-19	Show	GitHub Exploit DB Packet Storm

694	8.1	重要 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における保護メカニズムの不具合に関する脆弱性	CWE-693 保護メカニズムの不具合	CVE-2026-8969	2026-05-22 10:51	2026-05-19	Show	GitHub Exploit DB Packet Storm

695	8.8	重要 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における権限管理に関する脆弱性	CWE-269 不適切な権限管理	CVE-2026-8970	2026-05-22 10:51	2026-05-19	Show	GitHub Exploit DB Packet Storm

696	6.5	警告 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における同一生成元ポリシー違反に関する脆弱性	CWE-346 同一生成元ポリシー違反	CVE-2026-8971	2026-05-22 10:51	2026-05-19	Show	GitHub Exploit DB Packet Storm

697	8.8	重要 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における権限管理に関する脆弱性	CWE-269 不適切な権限管理	CVE-2026-8972	2026-05-22 10:51	2026-05-19	Show	GitHub Exploit DB Packet Storm

698	8.8	重要 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-8973	2026-05-22 10:51	2026-05-19	Show	GitHub Exploit DB Packet Storm

699	8.8	重要 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-8974	2026-05-22 10:51	2026-05-19	Show	GitHub Exploit DB Packet Storm

700	8.8	重要 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-8975	2026-05-22 10:51	2026-05-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
356331	-	imatix	xitami	Xitami 2.5b installs the testcgi.exe program by default in the cgi-bin directory, which allows remote attackers to gain sensitive configuration information about the web server by accessing the progr…	NVD-CWE-Other	CVE-2000-1225	2008-09-6 05:22	2000-12-31	Show	GitHub Exploit DB Packet Storm

356332	-	snort	snort	Snort 1.6, when running in straight ASCII packet logging mode or IDS mode with straight decoded ASCII packet logging selected, allows remote attackers to cause a denial of service (crash) by sending …	NVD-CWE-Other	CVE-2000-1226	2008-09-6 05:22	2000-12-31	Show	GitHub Exploit DB Packet Storm

356333	-	phorum	phorum	Phorum 3.0.7 allows remote attackers to change the administrator password without authentication via an HTTP request for admin.php3 that sets step, option, confirm and newPssword variables.	NVD-CWE-Other	CVE-2000-1228	2008-09-6 05:22	2000-12-31	Show	GitHub Exploit DB Packet Storm

356334	-	phorum	phorum	Directory traversal vulnerability in Phorum 3.0.7 allows remote Phorum administrators to read arbitrary files via ".." (dot dot) sequences in the default .langfile name field in the Master Settings a…	NVD-CWE-Other	CVE-2000-1229	2008-09-6 05:22	2000-12-31	Show	GitHub Exploit DB Packet Storm

356335	-	phorum	phorum	Backdoor in auth.php3 in Phorum 3.0.7 allows remote attackers to access restricted web pages via an HTTP request with the PHP_AUTH_USER parameter set to "boogieman".	NVD-CWE-Other	CVE-2000-1230	2008-09-6 05:22	2000-12-31	Show	GitHub Exploit DB Packet Storm

356336	-	phorum	phorum	code.php3 in Phorum 3.0.7 allows remote attackers to read arbitrary files in the phorum directory via the query string.	NVD-CWE-Other	CVE-2000-1231	2008-09-6 05:22	2000-12-31	Show	GitHub Exploit DB Packet Storm

356337	-	phorum	phorum	upgrade.php3 in Phorum 3.0.7 could allow remote attackers to modify certain Phorum database tables via an unknown method.	NVD-CWE-Other	CVE-2000-1232	2008-09-6 05:22	2000-12-31	Show	GitHub Exploit DB Packet Storm

356338	-	phorum	phorum	SQL injection vulnerability in read.php3 and other scripts in Phorum 3.0.7 allows remote attackers to execute arbitrary SQL queries via the sSQL parameter.	NVD-CWE-Other	CVE-2000-1233	2008-09-6 05:22	2000-12-31	Show	GitHub Exploit DB Packet Storm

356339	-	phorum	phorum	violation.php3 in Phorum 3.0.7 allows remote attackers to send e-mails to arbitrary addresses and possibly use Phorum as a "spam proxy" by setting the Mod and ForumName parameters.	NVD-CWE-Other	CVE-2000-1234	2008-09-6 05:22	2000-12-31	Show	GitHub Exploit DB Packet Storm

356340	-	oracle	application_server	The default configurations of (1) the port listener and (2) modplsql in Oracle Internet Application Server (IAS) 3.0.7 and earlier allow remote attackers to view privileged database information via H…	NVD-CWE-Other	CVE-2000-1235	2008-09-6 05:22	2000-12-31	Show	GitHub Exploit DB Packet Storm