Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Oct. 23, 2024, 6:02 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
197751	7.8	危険	シスコシステムズ	-	Cisco TelePresence Multipoint Switch デバイスにおけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-0389	2011-11-29 10:32	2011-02-23	Show	GitHub Exploit DB Packet Storm

197752	7.8	危険	シスコシステムズ	-	Cisco TelePresence Recording Server および Cisco TelePresence Multipoint Switch における脆弱性	CWE-399 リソース管理の問題	CVE-2011-0388	2011-11-29 10:31	2011-02-23	Show	GitHub Exploit DB Packet Storm

197753	8	危険	シスコシステムズ	-	Cisco TelePresence Multipoint Switch (CTMS) デバイスにおけるサービス運用妨害 (DoS) の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-0387	2011-11-29 10:31	2011-02-23	Show	GitHub Exploit DB Packet Storm

197754	9.3	危険	シスコシステムズ	-	Cisco TelePresence Recording Server 上の XML-RPC の実装におけるファイルを上書きされる脆弱性	CWE-94 コード・インジェクション	CVE-2011-0386	2011-11-29 10:30	2011-02-23	Show	GitHub Exploit DB Packet Storm

197755	10	危険	シスコシステムズ	-	Cisco TelePresence Recording Server および Cisco TelePresence Multipoint Switch における脆弱性	CWE-Other その他	CVE-2011-0385	2011-11-29 10:29	2011-02-23	Show	GitHub Exploit DB Packet Storm

197756	10	危険	シスコシステムズ	-	Cisco TelePresence Multipoint Switch における任意のコードを実行される脆弱性	CWE-287 不適切な認証	CVE-2011-0384	2011-11-29 10:28	2011-02-23	Show	GitHub Exploit DB Packet Storm

197757	10	危険	シスコシステムズ	-	Cisco TelePresence Recording Server および Cisco TelePresence Multipoint Switch における脆弱性	CWE-287 不適切な認証	CVE-2011-0383	2011-11-29 10:27	2011-02-23	Show	GitHub Exploit DB Packet Storm

197758	10	危険	シスコシステムズ	-	Cisco TelePresence Recording Server における任意のコードを実行される脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2011-0382	2011-11-29 09:55	2011-02-23	Show	GitHub Exploit DB Packet Storm

197759	10	危険	シスコシステムズ	-	Cisco TelePresence Manager における任意のコードを実行される脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2011-0381	2011-11-29 09:55	2011-02-23	Show	GitHub Exploit DB Packet Storm

197760	7.5	危険	シスコシステムズ	-	Cisco TelePresence Manager における認証を回避される脆弱性	CWE-287 不適切な認証	CVE-2011-0380	2011-11-29 09:54	2011-02-23	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Oct. 23, 2024, 8:45 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
351	8.8	HIGH Network	suse opensuse oracle sil mozilla	linux_enterprise leap opensuse linux graphite2 firefox	The Machine::Code::decoder::analysis::set_ref function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to execute arbitrar… Update	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-1977	2024-10-22 22:42	2016-03-14	Show	GitHub Exploit DB Packet Storm

352	8.8	HIGH Network	mozilla oracle suse opensuse	firefox thunderbird linux linux_enterprise leap opensuse	The nsScannerString::AppendUnicodeTo function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 does not verify that memory allocation succeeds, which allows remote attackers to execute… Update	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-1974	2024-10-22 22:42	2016-03-14	Show	GitHub Exploit DB Packet Storm

353	8.8	HIGH Network	sil mozilla	graphite2 firefox	The setAttr function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.6.1, allows remote attackers to cause a denial of service (out-of-bounds write) … Update	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-1969	2024-10-22 22:42	2016-03-14	Show	GitHub Exploit DB Packet Storm

354	8.8	HIGH Network	oracle mozilla opensuse	linux firefox thunderbird opensuse	The nsNPObjWrapper::GetNewOrUsed function in dom/plugins/base/nsJSNPRuntime.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or ca… Update	NVD-CWE-Other	CVE-2016-1966	2024-10-22 22:42	2016-03-14	Show	GitHub Exploit DB Packet Storm

355	4.3	MEDIUM Network	mozilla opensuse oracle	firefox opensuse linux	Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 mishandle a navigation sequence that returns to the original page, which allows remote attackers to spoof the address bar via vectors invo… Update	CWE-254 7PK - Security Features	CVE-2016-1965	2024-10-22 22:42	2016-03-14	Show	GitHub Exploit DB Packet Storm

356	8.8	HIGH Network	oracle suse opensuse mozilla	linux linux_enterprise leap opensuse firefox thunderbird	Use-after-free vulnerability in the AtomicBaseIncDec function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or cause a denial of se… Update	NVD-CWE-Other	CVE-2016-1964	2024-10-22 22:42	2016-03-14	Show	GitHub Exploit DB Packet Storm

357	9.8	CRITICAL Network	mozilla opensuse oracle	firefox opensuse linux	Use-after-free vulnerability in the mozilla::DataChannelConnection::Close function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code by… Update	NVD-CWE-Other	CVE-2016-1962	2024-10-22 22:42	2016-03-14	Show	GitHub Exploit DB Packet Storm

358	8.8	HIGH Network	suse opensuse mozilla oracle	linux_enterprise leap opensuse firefox thunderbird linux	Use-after-free vulnerability in the nsHTMLDocument::SetBody function in dom/html/nsHTMLDocument.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute … Update	NVD-CWE-Other	CVE-2016-1961	2024-10-22 22:42	2016-03-14	Show	GitHub Exploit DB Packet Storm

359	8.8	HIGH Network	oracle mozilla suse opensuse	linux firefox thunderbird linux_enterprise leap opensuse	Integer underflow in the nsHtml5TreeBuilder class in the HTML5 string parser in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or cause… Update	NVD-CWE-Other	CVE-2016-1960	2024-10-22 22:42	2016-03-14	Show	GitHub Exploit DB Packet Storm

360	4.3	MEDIUM Network	oracle opensuse mozilla	linux opensuse firefox	browser/base/content/browser.js in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to spoof the address bar via a javascript: URL. Update	CWE-254 7PK - Security Features	CVE-2016-1958	2024-10-22 22:42	2016-03-14	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed