Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229021 7.5 危険 web-album - WEBalbum の photo.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0446 2012-12-20 19:10 2009-02-10 Show GitHub Exploit DB Packet Storm
229022 7.5 危険 SIRINI.NET - GRBoard における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2009-0444 2012-12-20 19:10 2009-02-10 Show GitHub Exploit DB Packet Storm
229023 6.8 警告 phpbbbook - PHPbbBook の bbcode.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-0442 2012-12-20 19:10 2009-02-10 Show GitHub Exploit DB Packet Storm
229024 6.8 警告 technote - Technote の skin_shop/standard/2_view_body/body_default.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2009-0441 2012-12-20 19:10 2009-02-10 Show GitHub Exploit DB Packet Storm
229025 7.5 危険 Tincan - phpList の lists/admin.php におけるローカルファイルをインクルードされる脆弱性 CWE-94
コード・インジェクション 		CVE-2009-0422 2012-12-20 19:10 2009-02-4 Show GitHub Exploit DB Packet Storm
229026 7.5 危険 rd-media - Joomla! 用の RD-Autos コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0420 2012-12-20 19:10 2009-02-4 Show GitHub Exploit DB Packet Storm
229027 6.9 警告 Standards Based Linux Instrumentation (SBLIM) - SBLIM sblim-sfcb の SSL certificate setup program における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2009-0416 2012-12-20 19:10 2009-02-3 Show GitHub Exploit DB Packet Storm
229028 10 危険 The Tor Project - Tor における脆弱性 CWE-399
リソース管理の問題 		CVE-2009-0414 2012-12-20 19:10 2009-02-3 Show GitHub Exploit DB Packet Storm
229029 4.3 警告 Roundcube.net - roundcubemail におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-0413 2012-12-20 19:10 2009-01-20 Show GitHub Exploit DB Packet Storm
229030 7.5 危険 smartsitecms - smartSite CMS の articles.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0405 2012-12-20 19:10 2009-02-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
215631 6.5 MEDIUM
Network 		mozilla
opensuse 		firefox
leap 		When "%2F" was present in a manifest URL, Firefox's AppCache behavior may have become confused and allowed a manifest to be served from a subdirectory. This could cause the appcache to be used to ser… CWE-276
Incorrect Default Permissions  		CVE-2020-12415 2024-11-21 13:59 2020-07-10 Show GitHub Exploit DB Packet Storm
215632 6.5 MEDIUM
Network 		mozilla firefox IndexedDB should be cleared when leaving private browsing mode and it is not, the API for WKWebViewConfiguration was being used incorrectly and requires the private instance of this object be deleted… CWE-459
 Incomplete Cleanup 		CVE-2020-12414 2024-11-21 13:59 2020-07-10 Show GitHub Exploit DB Packet Storm
215633 4.3 MEDIUM
Network 		mozilla firefox By navigating a tab using the history API, an attacker could cause the address bar to display the incorrect domain (with the https:// scheme, a blocked port number such as '1', and without a lock ico… NVD-CWE-Other
CVE-2020-12412 2024-11-21 13:59 2020-07-10 Show GitHub Exploit DB Packet Storm
215634 8.8 HIGH
Network 		mozilla firefox Mozilla developers reported memory safety bugs present in Firefox 76. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been expl… CWE-787
 Out-of-bounds Write 		CVE-2020-12411 2024-11-21 13:59 2020-07-10 Show GitHub Exploit DB Packet Storm
215635 8.8 HIGH
Network 		mozilla
canonical 		firefox
firefox_esr
ubuntu_linux 		Mozilla developers reported memory safety bugs present in Firefox 76 and Firefox ESR 68.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these… CWE-787
 Out-of-bounds Write 		CVE-2020-12410 2024-11-21 13:59 2020-07-10 Show GitHub Exploit DB Packet Storm
215636 8.8 HIGH
Network 		mozilla firefox When using certain blank characters in a URL, they where incorrectly rendered as spaces instead of an encoded URL. This vulnerability affects Firefox < 77. NVD-CWE-Other
CVE-2020-12409 2024-11-21 13:59 2020-07-10 Show GitHub Exploit DB Packet Storm
215637 6.5 MEDIUM
Network 		mozilla firefox When browsing a document hosted on an IP address, an attacker could insert certain characters to flip domain and path information in the address bar. This vulnerability affects Firefox < 77. NVD-CWE-noinfo
CVE-2020-12408 2024-11-21 13:59 2020-07-10 Show GitHub Exploit DB Packet Storm
215638 6.5 MEDIUM
Network 		mozilla firefox Mozilla Developer Nicolas Silva found that when using WebRender, Firefox would under certain conditions leak arbitrary GPU memory to the visible screen. The leaked memory content was visible to the u… CWE-125
Out-of-bounds Read 		CVE-2020-12407 2024-11-21 13:59 2020-07-10 Show GitHub Exploit DB Packet Storm
215639 8.8 HIGH
Network 		mozilla
canonical 		thunderbird
firefox
firefox_esr
ubuntu_linux 		Mozilla Developer Iain Ireland discovered a missing type check during unboxed objects removal, resulting in a crash. We presume that with enough effort that it could be exploited to run arbitrary cod… CWE-345
 Insufficient Verification of Data Authenticity 		CVE-2020-12406 2024-11-21 13:59 2020-07-10 Show GitHub Exploit DB Packet Storm
215640 5.3 MEDIUM
Network 		mozilla
canonical 		thunderbird
firefox
firefox_esr
ubuntu_linux 		When browsing a malicious page, a race condition in our SharedWorkerService could occur and lead to a potentially exploitable crash. This vulnerability affects Thunderbird < 68.9.0, Firefox < 77, and… CWE-362
CWE-416
Race Condition
 Use After Free 		CVE-2020-12405 2024-11-21 13:59 2020-07-10 Show GitHub Exploit DB Packet Storm