Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
255351 5 警告 The PHP Group - PHP の chunk_split 関数における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2010-1862 2010-08-18 18:25 2010-05-4 Show GitHub Exploit DB Packet Storm
255352 5 警告 The PHP Group - PHP の addcslashes 関数における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2010-1864 2010-08-17 17:37 2010-05-3 Show GitHub Exploit DB Packet Storm
255353 5 警告 The PHP Group - PHP における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2010-2190 2010-08-17 17:36 2010-05-30 Show GitHub Exploit DB Packet Storm
255354 6.4 警告 The PHP Group - PHP における重要な情報を取得される脆弱性 CWE-119
バッファエラー
CVE-2010-2191 2010-08-17 17:35 2010-05-31 Show GitHub Exploit DB Packet Storm
255355 5 警告 The PHP Group - PHP の Zend Engine における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2010-1914 2010-08-17 17:34 2010-05-8 Show GitHub Exploit DB Packet Storm
255356 6.4 警告 The PHP Group - PHP の sysvshm 拡張における任意のメモリアドレスを書かれる脆弱性 CWE-399
リソース管理の問題
CVE-2010-1861 2010-08-17 17:33 2010-05-5 Show GitHub Exploit DB Packet Storm
255357 4.3 警告 サイバートラスト株式会社
Mozilla Foundation
レッドハット
- 複数の Mozilla 製品における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2010-0654 2010-08-16 18:57 2010-02-18 Show GitHub Exploit DB Packet Storm
255358 7.6 危険 アップル - Apple Safari における window オブジェクトの処理に脆弱性 CWE-399
リソース管理の問題
CVE-2010-1939 2010-08-16 15:08 2010-05-12 Show GitHub Exploit DB Packet Storm
255359 7.6 危険 IBM - IBM Lotus Domino Web Access の ActiveX コントロールにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-0919 2010-08-16 15:05 2010-03-3 Show GitHub Exploit DB Packet Storm
255360 4.3 警告 サイバートラスト株式会社
Mozilla Foundation
レッドハット
- 複数の Mozilla 製品における重要な cross-origin 情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-1207 2010-08-13 17:15 2010-07-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
215301 7.5 HIGH
Network
mozilla firefox If a Sandbox content process is compromised, it can initiate an FTP download which will then use a child process to render the downloaded data. The downloaded data can then be passed to the Chrome pr… CWE-125
Out-of-bounds Read
CVE-2019-9802 2024-11-21 13:52 2019-04-27 Show GitHub Exploit DB Packet Storm
215302 7.5 HIGH
Network
mozilla firefox Insufficient bounds checking of data during inter-process communication might allow a compromised content process to be able to read memory from the parent process under certain conditions. This vuln… CWE-20
CWE-125
 Improper Input Validation 
Out-of-bounds Read
CVE-2019-9799 2024-11-21 13:52 2019-04-27 Show GitHub Exploit DB Packet Storm
215303 7.4 HIGH
Network
mozilla firefox On Android systems, Firefox can load a library from APITRACE_LIB, which is writable by all users and applications. This could allow malicious third party applications to execute a man-in-the-middle a… CWE-426
 Untrusted Search Path
CVE-2019-9798 2024-11-21 13:52 2019-04-27 Show GitHub Exploit DB Packet Storm
215304 5.3 MEDIUM
Network
mozilla firefox Cross-origin images can be read in violation of the same-origin policy by exporting an image after using createImageBitmap to read the image and then rendering the resulting bitmap image within a can… CWE-346
 Origin Validation Error
CVE-2019-9797 2024-11-21 13:52 2019-04-27 Show GitHub Exploit DB Packet Storm
215305 5.3 MEDIUM
Network
mozilla firefox
firefox_esr
thunderbird
Firefox will accept any registered Program ID as an external protocol handler and offer to launch this local application when given a matching URL on Windows operating systems. This should only happe… CWE-20
 Improper Input Validation 
CVE-2019-9801 2024-11-21 13:52 2019-04-27 Show GitHub Exploit DB Packet Storm
215306 9.8 CRITICAL
Network
mozilla firefox
firefox_esr
thunderbird
A use-after-free vulnerability can occur when the SMIL animation controller incorrectly registers with the refresh driver twice when only a single registration is expected. When a registration is lat… CWE-416
 Use After Free
CVE-2019-9796 2024-11-21 13:52 2019-04-27 Show GitHub Exploit DB Packet Storm
215307 9.8 CRITICAL
Network
mozilla firefox
firefox_esr
thunderbird
A vulnerability where type-confusion in the IonMonkey just-in-time (JIT) compiler could potentially be used by malicious JavaScript to trigger a potentially exploitable crash. This vulnerability affe… CWE-617
CWE-843
 Reachable Assertion
Type Confusion
CVE-2019-9795 2024-11-21 13:52 2019-04-27 Show GitHub Exploit DB Packet Storm
215308 9.8 CRITICAL
Network
mozilla firefox
firefox_esr
thunderbird
A vulnerability was discovered where specific command line arguments are not properly discarded during Firefox invocation as a shell handler for URLs. This could be used to retrieve and execute files… CWE-88
Argument Injection
CVE-2019-9794 2024-11-21 13:52 2019-04-27 Show GitHub Exploit DB Packet Storm
215309 5.9 MEDIUM
Network
mozilla firefox
firefox_esr
thunderbird
A mechanism was discovered that removes some bounds checking for string, array, or typed array accesses if Spectre mitigations have been disabled. This vulnerability could allow an attacker to create… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2019-9793 2024-11-21 13:52 2019-04-27 Show GitHub Exploit DB Packet Storm
215310 9.8 CRITICAL
Network
mozilla
redhat
firefox
firefox_esr
thunderbird
enterprise_linux
enterprise_linux_eus
enterprise_linux_server_tus
enterprise_linux_server_aus
The IonMonkey just-in-time (JIT) compiler can leak an internal JS_OPTIMIZED_OUT magic value to the running script during a bailout. This magic value can then be used by JavaScript to achieve memory c… CWE-787
 Out-of-bounds Write
CVE-2019-9792 2024-11-21 13:52 2019-04-27 Show GitHub Exploit DB Packet Storm