Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 16, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229411 7.5 危険 project alumni - Project Alumni の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-6184 2012-12-20 18:34 2007-11-29 Show GitHub Exploit DB Packet Storm
229412 6.8 警告 ruby gnome2 - Ruby-GNOME 2 の gtk/src/rbgtkmessagedialog.c におけるフォーマットストリングの脆弱性 CWE-134
書式文字列の問題 		CVE-2007-6183 2012-12-20 18:34 2007-11-29 Show GitHub Exploit DB Packet Storm
229413 8.5 危険 レッドハット - Cygwin の cygwin1.dll におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-6181 2012-12-20 18:34 2007-11-8 Show GitHub Exploit DB Packet Storm
229414 8.5 危険 phpdevshell - PHPDevShell における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-6174 2012-12-20 18:34 2007-11-29 Show GitHub Exploit DB Packet Storm
229415 10 危険 wire plastic design - wpQuiz における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6172 2012-12-20 18:34 2007-11-29 Show GitHub Exploit DB Packet Storm
229416 7.5 危険 vu - VU Case Manager の default.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6168 2012-12-20 18:34 2007-11-28 Show GitHub Exploit DB Packet Storm
229417 7.2 危険 SUSE - SUSE Linux の yast2-core における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-6167 2012-12-20 18:34 2007-11-22 Show GitHub Exploit DB Packet Storm
229418 4.3 警告 wsdeluxe - FMDeluxe の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6162 2012-12-20 18:34 2007-11-28 Show GitHub Exploit DB Packet Storm
229419 5 警告 tilde.dk - Tilde CMS の index.php における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2007-6161 2012-12-20 18:34 2007-11-28 Show GitHub Exploit DB Packet Storm
229420 4.3 警告 tilde.dk - Tilde CMS の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6160 2012-12-20 18:34 2007-11-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209561 8.8 HIGH
Network 		mozilla firefox Mozilla developers reported memory safety bugs present in Firefox 80. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been expl… CWE-787
CWE-667
 Out-of-bounds Write
 Improper Locking 		CVE-2020-15674 2024-11-21 14:05 2020-10-2 Show GitHub Exploit DB Packet Storm
209562 8.8 HIGH
Network 		mozilla
debian
opensuse 		firefox_esr
thunderbird
firefox
debian_linux
leap 		Mozilla developers reported memory safety bugs present in Firefox 80 and Firefox ESR 78.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these… CWE-416
 Use After Free 		CVE-2020-15673 2024-11-21 14:05 2020-10-2 Show GitHub Exploit DB Packet Storm
209563 3.1 LOW
Network 		mozilla firefox When typing in a password under certain conditions, a race may have occured where the InputContext was not being correctly set for the input field, resulting in the typed password being saved to the … CWE-200
CWE-362
Information Exposure
Race Condition 		CVE-2020-15671 2024-11-21 14:05 2020-10-2 Show GitHub Exploit DB Packet Storm
209564 8.8 HIGH
Network 		mozilla firefox
firefox_esr
thunderbird 		Mozilla developers reported memory safety bugs present in Firefox for Android 79. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could ha… CWE-362
CWE-416
CWE-617
Race Condition
 Use After Free
 Reachable Assertion 		CVE-2020-15670 2024-11-21 14:05 2020-10-2 Show GitHub Exploit DB Packet Storm
209565 8.8 HIGH
Network 		mozilla firefox_esr
thunderbird 		When aborting an operation, such as a fetch, an abort signal may be deleted while alerting the objects to be notified. This results in a use-after-free and we presume that with enough effort it could… CWE-416
 Use After Free 		CVE-2020-15669 2024-11-21 14:05 2020-10-2 Show GitHub Exploit DB Packet Storm
209566 4.3 MEDIUM
Network 		mozilla firefox A lock was missing when accessing a data structure and importing certificate information into the trust database. This vulnerability affects Firefox < 80 and Firefox for Android < 80. CWE-667
 Improper Locking 		CVE-2020-15668 2024-11-21 14:05 2020-10-2 Show GitHub Exploit DB Packet Storm
209567 8.8 HIGH
Network 		mozilla firefox When processing a MAR update file, after the signature has been validated, an invalid name length could result in a heap overflow, leading to memory corruption and potentially arbitrary code executio… CWE-787
 Out-of-bounds Write 		CVE-2020-15667 2024-11-21 14:05 2020-10-2 Show GitHub Exploit DB Packet Storm
209568 6.5 MEDIUM
Network 		mozilla firefox When trying to load a non-video in an audio/video context the exact status code (200, 302, 404, 500, 412, 403, etc.) was disclosed via the MediaError Message. This level of information leakage is inc… CWE-209
Information Exposure Through an Error Message 		CVE-2020-15666 2024-11-21 14:05 2020-10-2 Show GitHub Exploit DB Packet Storm
209569 4.3 MEDIUM
Network 		mozilla firefox Firefox did not reset the address bar after the beforeunload dialog was shown if the user chose to remain on the page. This could have resulted in an incorrect URL being shown when used in conjunctio… NVD-CWE-Other
CVE-2020-15665 2024-11-21 14:05 2020-10-2 Show GitHub Exploit DB Packet Storm
209570 6.5 MEDIUM
Network 		mozilla firefox
firefox_esr
thunderbird 		By holding a reference to the eval() function from an about:blank window, a malicious webpage could have gained access to the InstallTrigger object which would allow them to prompt the user to instal… CWE-863
 Incorrect Authorization 		CVE-2020-15664 2024-11-21 14:05 2020-10-2 Show GitHub Exploit DB Packet Storm