Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228441 7.5 危険 witchakorn kamolpornwijit - Joomla! 用の facebook コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-3438 2012-12-20 19:28 2009-09-28 Show GitHub Exploit DB Packet Storm
228442 7.2 危険 サン・マイクロシステムズ - Sun Solaris Cluster の configuration utility における権限を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2009-3433 2012-12-20 19:28 2009-09-22 Show GitHub Exploit DB Packet Storm
228443 9.3 危険 pirateradio - Pirate Radio Destiny Media Player におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-3429 2012-12-20 19:28 2009-09-25 Show GitHub Exploit DB Packet Storm
228444 6.8 警告 zenas - Zenas PaoLink の login.php における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2009-3423 2012-12-20 19:28 2009-09-25 Show GitHub Exploit DB Packet Storm
228445 6.8 警告 zenas - Zenas PaoLiber の login.php における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2009-3422 2012-12-20 19:28 2009-09-25 Show GitHub Exploit DB Packet Storm
228446 6.8 警告 zenas - Zenas PaoBacheca Guestbook の login.php における認証を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-3421 2012-12-20 19:28 2009-09-25 Show GitHub Exploit DB Packet Storm
228447 6.5 警告 Plume CMS - Plume CMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-3418 2012-12-20 19:28 2009-09-25 Show GitHub Exploit DB Packet Storm
228448 4.3 警告 Plohni - An image gallery におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-3367 2012-12-20 19:28 2009-09-24 Show GitHub Exploit DB Packet Storm
228449 5 警告 Plohni - An image gallery の navigation.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-3366 2012-12-20 19:28 2009-09-24 Show GitHub Exploit DB Packet Storm
228450 7.5 危険 traza - Aurora CMS の add-ons/modules/sysmanager/plugins/install.plugin.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2009-3365 2012-12-20 19:28 2009-09-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
194811 6.1 MEDIUM
Network 		mozilla firefox The browser could have been confused into transferring a pointer lock state into another tab, which could have lead to clickjacking attacks. This vulnerability affects Firefox < 85. CWE-1021
 Improper Restriction of Rendered UI Layers or Frames 		CVE-2021-23955 2024-11-21 14:52 2021-02-26 Show GitHub Exploit DB Packet Storm
194812 8.8 HIGH
Network 		mozilla firefox
firefox_esr
thunderbird 		Using the new logical assignment operators in a JavaScript switch statement could have caused a type confusion, leading to a memory corruption and a potentially exploitable crash. This vulnerability … CWE-843
Type Confusion 		CVE-2021-23954 2024-11-21 14:52 2021-02-26 Show GitHub Exploit DB Packet Storm
194813 4.3 MEDIUM
Network 		mozilla firefox
firefox_esr
thunderbird 		If a user clicked into a specifically crafted PDF, the PDF reader could be confused into leaking cross-origin information, when said information is served as chunked data. This vulnerability affects … NVD-CWE-noinfo
CVE-2021-23953 2024-11-21 14:52 2021-02-26 Show GitHub Exploit DB Packet Storm
194814 8.1 HIGH
Network 		mozilla firefox When accepting a malicious intent from other installed apps, Firefox for Android accepted manifests from arbitrary file paths and allowed declaring webapp manifests for other origins. This could be u… CWE-1021
 Improper Restriction of Rendered UI Layers or Frames 		CVE-2021-23976 2024-11-21 14:52 2021-02-26 Show GitHub Exploit DB Packet Storm
194815 6.5 MEDIUM
Network 		mozilla firefox The developer page about:memory has a Measure function for exploring what object types the browser has allocated and their sizes. When this function was invoked we incorrectly called the sizeof funct… CWE-862
 Missing Authorization 		CVE-2021-23975 2024-11-21 14:52 2021-02-26 Show GitHub Exploit DB Packet Storm
194816 6.1 MEDIUM
Network 		mozilla firefox The DOMParser API did not properly process '<noscript>' elements for escaping. This could be used as an mXSS vector to bypass an HTML Sanitizer. This vulnerability affects Firefox < 86. NVD-CWE-noinfo
CVE-2021-23974 2024-11-21 14:52 2021-02-26 Show GitHub Exploit DB Packet Storm
194817 6.5 MEDIUM
Network 		mozilla
debian 		firefox
firefox_esr
thunderbird
debian_linux 		When trying to load a cross-origin resource in an audio/video context a decoding error may have resulted, and the content of that error may have revealed information about the resource. This vulnerab… CWE-209
Information Exposure Through an Error Message 		CVE-2021-23973 2024-11-21 14:52 2021-02-26 Show GitHub Exploit DB Packet Storm
194818 8.8 HIGH
Network 		mozilla firefox One phishing tactic on the web is to provide a link with HTTP Auth. For example 'https://www.phishingtarget.com@evil.com'. To mitigate this type of attack, Firefox will display a warning dialog; howe… NVD-CWE-noinfo
CVE-2021-23972 2024-11-21 14:52 2021-02-26 Show GitHub Exploit DB Packet Storm
194819 6.5 MEDIUM
Network 		mozilla firefox When processing a redirect with a conflicting Referrer-Policy, Firefox would have adopted the redirect's Referrer-Policy. This would have potentially resulted in more information than intended by the… NVD-CWE-noinfo
CVE-2021-23971 2024-11-21 14:52 2021-02-26 Show GitHub Exploit DB Packet Storm
194820 6.5 MEDIUM
Network 		mozilla firefox Context-specific code was included in a shared jump table; resulting in assertions being triggered in multithreaded wasm code. This vulnerability affects Firefox < 86. CWE-617
 Reachable Assertion 		CVE-2021-23970 2024-11-21 14:52 2021-02-26 Show GitHub Exploit DB Packet Storm