Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
226721 7.5 危険 BigAntSoft - BigAntSoft BigAnt IM Message Server における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-6273 2013-02-26 16:02 2013-02-24 Show GitHub Exploit DB Packet Storm
226722 7.6 危険 VMware - 複数の VMware 製品における任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2013-1659 2013-02-26 15:37 2013-02-21 Show GitHub Exploit DB Packet Storm
226723 7.8 危険 VMware - VMware vCenter Server におけるサービス運用妨害 (ディスクの消費) の脆弱性 CWE-119
バッファエラー
CVE-2012-6326 2013-02-26 15:36 2012-12-20 Show GitHub Exploit DB Packet Storm
226724 7.5 危険 Google - Google Chrome の WebKit の MathML の実装における脆弱性 CWE-noinfo
情報不足
CVE-2013-2268 2013-02-26 15:35 2013-02-21 Show GitHub Exploit DB Packet Storm
226725 6.8 警告 ジャストシステム - 複数のジャストシステム製品において任意のコードが実行される脆弱性 CWE-noinfo
情報不足
CVE-2013-0707 2013-02-26 12:02 2013-02-26 Show GitHub Exploit DB Packet Storm
226726 9.3 危険 Mozilla Foundation - 複数の Mozilla 製品におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2013-0771 2013-02-25 16:06 2013-01-8 Show GitHub Exploit DB Packet Storm
226727 10 危険 Mozilla Foundation - 複数の Mozilla 製品におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2013-0768 2013-02-25 16:04 2013-01-8 Show GitHub Exploit DB Packet Storm
226728 9.3 危険 Mozilla Foundation - 複数の Mozilla 製品の nsSOCKSSocketInfo::ConnectToProxy 関数における任意のコードを実行される脆弱性 CWE-310
暗号の問題
CVE-2013-0764 2013-02-25 16:03 2013-01-8 Show GitHub Exploit DB Packet Storm
226729 10 危険 Mozilla Foundation - 複数の Mozilla 製品における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2013-0763 2013-02-25 16:02 2013-01-8 Show GitHub Exploit DB Packet Storm
226730 10 危険 Mozilla Foundation - 複数の Mozilla 製品の mozilla::TrackUnionStream::EndTrack の実装における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2013-0761 2013-02-25 16:01 2013-01-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
214491 6.5 MEDIUM
Network
mozilla firefox When browsing a document hosted on an IP address, an attacker could insert certain characters to flip domain and path information in the address bar. This vulnerability affects Firefox < 77. NVD-CWE-noinfo
CVE-2020-12408 2024-11-21 13:59 2020-07-10 Show GitHub Exploit DB Packet Storm
214492 6.5 MEDIUM
Network
mozilla firefox Mozilla Developer Nicolas Silva found that when using WebRender, Firefox would under certain conditions leak arbitrary GPU memory to the visible screen. The leaked memory content was visible to the u… CWE-125
Out-of-bounds Read
CVE-2020-12407 2024-11-21 13:59 2020-07-10 Show GitHub Exploit DB Packet Storm
214493 8.8 HIGH
Network
mozilla
canonical
thunderbird
firefox
firefox_esr
ubuntu_linux
Mozilla Developer Iain Ireland discovered a missing type check during unboxed objects removal, resulting in a crash. We presume that with enough effort that it could be exploited to run arbitrary cod… CWE-345
 Insufficient Verification of Data Authenticity
CVE-2020-12406 2024-11-21 13:59 2020-07-10 Show GitHub Exploit DB Packet Storm
214494 5.3 MEDIUM
Network
mozilla
canonical
thunderbird
firefox
firefox_esr
ubuntu_linux
When browsing a malicious page, a race condition in our SharedWorkerService could occur and lead to a potentially exploitable crash. This vulnerability affects Thunderbird < 68.9.0, Firefox < 77, and… CWE-362
CWE-416
Race Condition
 Use After Free
CVE-2020-12405 2024-11-21 13:59 2020-07-10 Show GitHub Exploit DB Packet Storm
214495 4.3 MEDIUM
Network
mozilla firefox For native-to-JS bridging the app requires a unique token to be passed that ensures non-app code can't call the bridging functions. That token could leak when used for downloading files. This vulnera… CWE-79
Cross-site Scripting
CVE-2020-12404 2024-11-21 13:59 2020-07-10 Show GitHub Exploit DB Packet Storm
214496 4.4 MEDIUM
Local
mozilla
opensuse
fedoraproject
debian
firefox
leap
fedora
debian_linux
During RSA key generation, bignum implementations used a variation of the Binary Extended Euclidean Algorithm which entailed significantly input-dependent flow. This allowed an attacker able to perfo… CWE-203
 Information Exposure Through Discrepancy
CVE-2020-12402 2024-11-21 13:59 2020-07-10 Show GitHub Exploit DB Packet Storm
214497 4.4 MEDIUM
Local
mozilla
debian
thunderbird
firefox
firefox_esr
debian_linux
NSS has shown timing differences when performing DSA signatures, which was exploitable and could eventually leak private keys. This vulnerability affects Thunderbird < 68.9.0, Firefox < 77, and Firef… CWE-203
 Information Exposure Through Discrepancy
CVE-2020-12399 2024-11-21 13:59 2020-07-10 Show GitHub Exploit DB Packet Storm
214498 7.5 HIGH
Network
mozilla
canonical
thunderbird
ubuntu_linux
If Thunderbird is configured to use STARTTLS for an IMAP server, and the server sends a PREAUTH response, then Thunderbird will continue with an unencrypted connection, causing email data to be sent … CWE-319
Cleartext Transmission of Sensitive Information
CVE-2020-12398 2024-11-21 13:59 2020-07-10 Show GitHub Exploit DB Packet Storm
214499 6.5 MEDIUM
Network
mozilla
opensuse
firefox
leap
When constructing a permission prompt for WebRTC, a URI was supplied from the content process. This URI was untrusted, and could have been the URI of an origin that was previously granted permission;… CWE-276
Incorrect Default Permissions 
CVE-2020-12424 2024-11-21 13:59 2020-07-9 Show GitHub Exploit DB Packet Storm
214500 7.5 HIGH
Network
apache
oracle
camel
enterprise_repository
enterprise_manager_base_platform
communications_diameter_signaling_router
Server-Side Template Injection and arbitrary file disclosure on Camel templating components CWE-74
Injection
CVE-2020-11994 2024-11-21 13:59 2020-07-9 Show GitHub Exploit DB Packet Storm