Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
253251 1.7 注意 オラクル - Oracle Solaris における ZFS の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-2312 2011-10-27 09:50 2011-10-18 Show GitHub Exploit DB Packet Storm
253252 1.7 注意 オラクル - Oracle Solaris における ZFS の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-2311 2011-10-27 09:49 2011-10-18 Show GitHub Exploit DB Packet Storm
253253 4.3 警告 オラクル - Oracle Solaris における libnsl の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-2304 2011-10-27 09:49 2011-10-18 Show GitHub Exploit DB Packet Storm
253254 2.4 注意 オラクル - Oracle Solaris における xscreensaver の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-2292 2011-10-27 09:48 2011-10-18 Show GitHub Exploit DB Packet Storm
253255 2.1 注意 オラクル - Oracle Solaris における ZFS の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-2286 2011-10-27 09:47 2011-10-18 Show GitHub Exploit DB Packet Storm
253256 7.8 危険 オラクル - Oracle Sun Products Suite の複数の製品における Web Container の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-3559 2011-10-26 16:43 2011-10-18 Show GitHub Exploit DB Packet Storm
253257 6.5 警告 オラクル - Oracle Database Server の Application Express コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-3525 2011-10-26 16:42 2011-10-18 Show GitHub Exploit DB Packet Storm
253258 5.5 警告 オラクル - Oracle Database Server の Core RDBMS コンポーネントおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-3512 2011-10-26 16:42 2011-10-18 Show GitHub Exploit DB Packet Storm
253259 3.6 注意 オラクル - Oracle Database Server の Database Vault コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-3511 2011-10-26 16:40 2011-10-18 Show GitHub Exploit DB Packet Storm
253260 3.6 注意 オラクル - Oracle Database Server の Database Vault コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-2322 2011-10-26 16:40 2011-10-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
225441 7.5 HIGH
Network 		mozilla
opensuse
canonical 		firefox
firefox_esr
thunderbird
leap
ubuntu_linux 		Under certain conditions, when checking the Resist Fingerprinting preference during device orientation checks, a race condition could have caused a use-after-free and a potentially exploitable crash.… CWE-362
Race Condition 		CVE-2019-17010 2024-11-21 13:31 2020-01-9 Show GitHub Exploit DB Packet Storm
225442 7.8 HIGH
Local 		mozilla
opensuse 		firefox
firefox_esr
thunderbird
leap 		When running, the updater service wrote status and log files to an unrestricted location; potentially allowing an unprivileged process to locate and exploit a vulnerability in file handling in the up… NVD-CWE-noinfo
CVE-2019-17009 2024-11-21 13:31 2020-01-9 Show GitHub Exploit DB Packet Storm
225443 8.8 HIGH
Network 		mozilla
opensuse 		firefox
firefox_esr
thunderbird
leap 		When using nested workers, a use-after-free could occur during worker destruction. This resulted in a potentially exploitable crash. This vulnerability affects Thunderbird < 68.3, Firefox ESR < 68.3,… CWE-416
 Use After Free 		CVE-2019-17008 2024-11-21 13:31 2020-01-9 Show GitHub Exploit DB Packet Storm
225444 8.8 HIGH
Network 		mozilla
opensuse
canonical 		firefox
firefox_esr
thunderbird
leap
ubuntu_linux 		The plain text serializer used a fixed-size array for the number of <ol> elements it could process; however it was possible to overflow the static-sized array leading to memory corruption and a poten… CWE-787
 Out-of-bounds Write 		CVE-2019-17005 2024-11-21 13:31 2020-01-9 Show GitHub Exploit DB Packet Storm
225445 4.3 MEDIUM
Network 		mozilla firefox If upgrade-insecure-requests was specified in the Content Security Policy, and a link was dragged and dropped from that page, the link was not upgraded to https. This vulnerability affects Firefox < … NVD-CWE-noinfo
CVE-2019-17002 2024-11-21 13:31 2020-01-9 Show GitHub Exploit DB Packet Storm
225446 6.1 MEDIUM
Network 		mozilla firefox A Content-Security-Policy that blocks in-line scripts could be bypassed using an object tag to execute JavaScript in the protected document (cross-site scripting). This is a separate bypass from CVE-… CWE-79
Cross-site Scripting 		CVE-2019-17001 2024-11-21 13:31 2020-01-9 Show GitHub Exploit DB Packet Storm
225447 6.1 MEDIUM
Network 		mozilla firefox An object tag with a data URI did not correctly inherit the document's Content Security Policy. This allowed a CSP bypass in a cross-origin frame if the document's policy explicitly allowed data: URI… CWE-79
Cross-site Scripting 		CVE-2019-17000 2024-11-21 13:31 2020-01-9 Show GitHub Exploit DB Packet Storm
225448 9.8 CRITICAL
Network 		jamf jamf An issue was discovered in Jamf Pro 9.x and 10.x before 10.15.1. Deserialization of untrusted data when parsing JSON in several APIs may cause Denial of Service (DoS), remote code execution (RCE), an… CWE-502
 Deserialization of Untrusted Data 		CVE-2019-17076 2024-11-21 13:31 2020-01-9 Show GitHub Exploit DB Packet Storm
225449 5.4 MEDIUM
Network 		tencent wechat This vulnerability allows remote attackers redirect users to an external resource on affected installations of Tencent WeChat Prior to 7.0.9. User interaction is required to exploit this vulnerabilit… CWE-601
Open Redirect 		CVE-2019-17151 2024-11-21 13:31 2020-01-8 Show GitHub Exploit DB Packet Storm
225450 7.8 HIGH
Local 		parallels parallels_desktop This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop Parallels Desktop version 14.1.3 (45485). An attacker must first obtain the ability to … CWE-78
OS Command  		CVE-2019-17148 2024-11-21 13:31 2020-01-8 Show GitHub Exploit DB Packet Storm