Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229611 7.5 危険 XOOPS - Xoops 用の MyConference モジュールにおける SQL インジェクションの脆弱性 - CVE-2007-2737 2012-12-20 18:19 2007-05-17 Show GitHub Exploit DB Packet Storm
229612 7.5 危険 touteresa - Xoops 用の ResManager モジュールにおける SQL インジェクションの脆弱性 - CVE-2007-2735 2012-12-20 18:19 2007-05-17 Show GitHub Exploit DB Packet Storm
229613 10 危険 snaps gallery - Snaps! Gallery の Admin/users.php における任意のユーザ名を変更される脆弱性 - CVE-2007-2715 2012-12-20 18:19 2007-05-16 Show GitHub Exploit DB Packet Storm
229614 10 危険 tinyirc - TinyIdentD におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-2711 2012-12-20 18:19 2007-05-16 Show GitHub Exploit DB Packet Storm
229615 6.8 警告 simple php scripts gallery - sphp の Ivan Peevski gallery における任意の PHP コードを実行される脆弱性 - CVE-2007-2679 2012-12-20 18:19 2007-05-14 Show GitHub Exploit DB Packet Storm
229616 7.5 危険 phpchess - phpChess Community Edition における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2677 2012-12-20 18:19 2007-05-14 Show GitHub Exploit DB Packet Storm
229617 7.5 危険 PreProject.com - Pre Classifieds Listings の search.php における SQL インジェクションの脆弱性 - CVE-2007-2675 2012-12-20 18:19 2007-05-14 Show GitHub Exploit DB Packet Storm
229618 7.5 危険 PreProject.com - Pre Shopping Mall の detail.php における SQL インジェクションの脆弱性 - CVE-2007-2674 2012-12-20 18:19 2007-05-14 Show GitHub Exploit DB Packet Storm
229619 7.5 危険 thinc4orce marketing group - PHP Coupon Script の index.php における SQL インジェクションの脆弱性 - CVE-2007-2672 2012-12-20 18:19 2007-05-14 Show GitHub Exploit DB Packet Storm
229620 6.8 警告 webdesproxy - webdesproxy におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-2668 2012-12-20 18:19 2007-05-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
214011 9.8 CRITICAL
Network 		mozilla firefox_esr
firefox
thunderbird 		A use-after-free vulnerability can occur in the chrome event handler when it is freed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 60.… CWE-416
 Use After Free 		CVE-2019-9820 2024-11-21 13:52 2019-07-23 Show GitHub Exploit DB Packet Storm
214012 9.8 CRITICAL
Network 		mozilla thunderbird
firefox_esr
firefox 		A vulnerability where a JavaScript compartment mismatch can occur while working with the fetch API, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird < 60.7, Firefo… CWE-843
Type Confusion 		CVE-2019-9819 2024-11-21 13:52 2019-07-23 Show GitHub Exploit DB Packet Storm
214013 8.3 HIGH
Network 		mozilla firefox
firefox_esr
thunderbird 		A race condition is present in the crash generation server used to generate data for the crash reporter. This issue can lead to a use-after-free in the main process, resulting in a potentially exploi… CWE-362
CWE-416
Race Condition
 Use After Free 		CVE-2019-9818 2024-11-21 13:52 2019-07-23 Show GitHub Exploit DB Packet Storm
214014 5.3 MEDIUM
Network 		mozilla thunderbird
firefox_esr
firefox 		Images from a different domain can be read using a canvas object in some circumstances. This could be used to steal image data from a different site in violation of same-origin policy. This vulnerabi… CWE-346
 Origin Validation Error 		CVE-2019-9817 2024-11-21 13:52 2019-07-23 Show GitHub Exploit DB Packet Storm
214015 5.9 MEDIUM
Network 		mozilla thunderbird
firefox_esr
firefox 		A possible vulnerability exists where type confusion can occur when manipulating JavaScript objects in object groups, allowing for the bypassing of security checks within these groups. *Note: this vu… CWE-843
Type Confusion 		CVE-2019-9816 2024-11-21 13:52 2019-07-23 Show GitHub Exploit DB Packet Storm
214016 9.8 CRITICAL
Network 		mozilla firefox Mozilla developers and community members reported memory safety bugs present in Firefox 66. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of… CWE-787
 Out-of-bounds Write 		CVE-2019-9814 2024-11-21 13:52 2019-07-23 Show GitHub Exploit DB Packet Storm
214017 8.3 HIGH
Network 		mozilla
debian
novell
opensuse 		firefox
firefox_esr
thunderbird
debian_linux
suse_package_hub_for_suse_linux_enterprise
leap 		As part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a malicious language pack and then opening a browser feature that used the compromised translation. This v… CWE-74
Injection 		CVE-2019-9811 2024-11-21 13:52 2019-07-23 Show GitHub Exploit DB Packet Storm
214018 9.8 CRITICAL
Network 		mozilla thunderbird
firefox_esr
firefox 		Mozilla developers and community members reported memory safety bugs present in Firefox 66, Firefox ESR 60.6, and Thunderbird 60.6. Some of these bugs showed evidence of memory corruption and we pres… CWE-787
 Out-of-bounds Write 		CVE-2019-9800 2024-11-21 13:52 2019-07-23 Show GitHub Exploit DB Packet Storm
214019 6.5 MEDIUM
Network 		freedesktop
debian
fedoraproject
redhat 		poppler
debian_linux
fedora
enterprise_linux
enterprise_linux_eus
enterprise_linux_server_tus
enterprise_linux_server_aus 		The JPXStream::init function in Poppler 0.78.0 and earlier doesn't check for negative values of stream length, leading to an Integer Overflow, thereby making it possible to allocate a large memory ch… CWE-190
 Integer Overflow or Wraparound 		CVE-2019-9959 2024-11-21 13:52 2019-07-23 Show GitHub Exploit DB Packet Storm
214020 8.1 HIGH
Network 		mozilla firefox
firefox_esr
thunderbird 		If hyperthreading is not disabled, a timing attack vulnerability exists, similar to previous Spectre attacks. Apple has shipped macOS 10.14.5 with an option to disable hyperthreading in applications … CWE-203
 Information Exposure Through Discrepancy 		CVE-2019-9815 2024-11-21 13:52 2019-07-23 Show GitHub Exploit DB Packet Storm