Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Oct. 23, 2024, 6:02 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
202071	9.3	危険	マイクロソフト	-	Microsoft Windows の kernel における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-2514	2010-01-4 15:24	2009-11-10	Show	GitHub Exploit DB Packet Storm

202072	6.8	警告	マイクロソフト	-	Microsoft Windows の kernel の Graphics Device Interface (GDI) における権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2009-2513	2010-01-4 15:24	2009-11-10	Show	GitHub Exploit DB Packet Storm

202073	6.8	警告	マイクロソフト	-	Microsoft Windows の kernel における権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2009-1127	2010-01-4 15:24	2009-11-10	Show	GitHub Exploit DB Packet Storm

202074	10	危険	マイクロソフト	-	Microsoft Windows の License Logging Server (llssrv.exe) における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2009-2523	2010-01-4 15:24	2009-11-10	Show	GitHub Exploit DB Packet Storm

202075	9.3	危険	マイクロソフト	-	Microsoft Windows の Web Services on Devices API (WSDAPI) における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-2512	2010-01-4 15:23	2009-11-10	Show	GitHub Exploit DB Packet Storm

202076	10	危険	アップル VMware サン・マイクロシステムズ	-	Sun Java SE の Provider クラスにおける詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2009-2722	2010-01-4 14:56	2009-08-10	Show	GitHub Exploit DB Packet Storm

202077	10	危険	アップル VMware サン・マイクロシステムズ	-	Sun Java SE の Provider クラスにおける詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2009-2723	2010-01-4 14:55	2009-08-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Oct. 23, 2024, 8:45 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
351	8.8	HIGH Network	suse opensuse oracle sil mozilla	linux_enterprise leap opensuse linux graphite2 firefox	The Machine::Code::decoder::analysis::set_ref function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to execute arbitrar… Update	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-1977	2024-10-22 22:42	2016-03-14	Show	GitHub Exploit DB Packet Storm

352	8.8	HIGH Network	mozilla oracle suse opensuse	firefox thunderbird linux linux_enterprise leap opensuse	The nsScannerString::AppendUnicodeTo function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 does not verify that memory allocation succeeds, which allows remote attackers to execute… Update	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-1974	2024-10-22 22:42	2016-03-14	Show	GitHub Exploit DB Packet Storm

353	8.8	HIGH Network	sil mozilla	graphite2 firefox	The setAttr function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.6.1, allows remote attackers to cause a denial of service (out-of-bounds write) … Update	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-1969	2024-10-22 22:42	2016-03-14	Show	GitHub Exploit DB Packet Storm

354	8.8	HIGH Network	oracle mozilla opensuse	linux firefox thunderbird opensuse	The nsNPObjWrapper::GetNewOrUsed function in dom/plugins/base/nsJSNPRuntime.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or ca… Update	NVD-CWE-Other	CVE-2016-1966	2024-10-22 22:42	2016-03-14	Show	GitHub Exploit DB Packet Storm

355	4.3	MEDIUM Network	mozilla opensuse oracle	firefox opensuse linux	Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 mishandle a navigation sequence that returns to the original page, which allows remote attackers to spoof the address bar via vectors invo… Update	CWE-254 7PK - Security Features	CVE-2016-1965	2024-10-22 22:42	2016-03-14	Show	GitHub Exploit DB Packet Storm

356	8.8	HIGH Network	oracle suse opensuse mozilla	linux linux_enterprise leap opensuse firefox thunderbird	Use-after-free vulnerability in the AtomicBaseIncDec function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or cause a denial of se… Update	NVD-CWE-Other	CVE-2016-1964	2024-10-22 22:42	2016-03-14	Show	GitHub Exploit DB Packet Storm

357	9.8	CRITICAL Network	mozilla opensuse oracle	firefox opensuse linux	Use-after-free vulnerability in the mozilla::DataChannelConnection::Close function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code by… Update	NVD-CWE-Other	CVE-2016-1962	2024-10-22 22:42	2016-03-14	Show	GitHub Exploit DB Packet Storm

358	8.8	HIGH Network	suse opensuse mozilla oracle	linux_enterprise leap opensuse firefox thunderbird linux	Use-after-free vulnerability in the nsHTMLDocument::SetBody function in dom/html/nsHTMLDocument.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute … Update	NVD-CWE-Other	CVE-2016-1961	2024-10-22 22:42	2016-03-14	Show	GitHub Exploit DB Packet Storm

359	8.8	HIGH Network	oracle mozilla suse opensuse	linux firefox thunderbird linux_enterprise leap opensuse	Integer underflow in the nsHtml5TreeBuilder class in the HTML5 string parser in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or cause… Update	NVD-CWE-Other	CVE-2016-1960	2024-10-22 22:42	2016-03-14	Show	GitHub Exploit DB Packet Storm

360	4.3	MEDIUM Network	oracle opensuse mozilla	linux opensuse firefox	browser/base/content/browser.js in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to spoof the address bar via a javascript: URL. Update	CWE-254 7PK - Security Features	CVE-2016-1958	2024-10-22 22:42	2016-03-14	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed