Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
256131 7.5 危険 オラクル - Oracle Sun Product Suite の Sun Java System Directory Server コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-0897 2010-05-14 18:40 2010-04-13 Show GitHub Exploit DB Packet Storm
256132 10 危険 オラクル - Oracle Sun Product Suite の Sun Ray Server Software コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-0888 2010-05-14 18:40 2010-04-13 Show GitHub Exploit DB Packet Storm
256133 5 警告 サン・マイクロシステムズ
Pidgin
レッドハット
- Pidgin の gtkimhtml.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2010-0423 2010-05-14 18:39 2010-02-18 Show GitHub Exploit DB Packet Storm
256134 4.3 警告 サン・マイクロシステムズ
Pidgin
レッドハット
- Pidgin の libpurple におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2010-0420 2010-05-14 18:38 2010-02-18 Show GitHub Exploit DB Packet Storm
256135 7.5 危険 Carnegie Mellon University (Project Cyrus)
アップル
サイバートラスト株式会社
サン・マイクロシステムズ
オラクル
レッドハット
- Cyrus SASL ライブラリにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-0688 2010-05-14 18:37 2009-05-15 Show GitHub Exploit DB Packet Storm
256136 7.5 危険 サン・マイクロシステムズ
GNOME Project
レッドハット
- Evolution Data Server (別名 evolution-data-server) における複数の整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2009-0587 2010-05-14 18:37 2009-03-14 Show GitHub Exploit DB Packet Storm
256137 5.8 警告 サン・マイクロシステムズ
GNOME Project
レッドハット
- Evolution Data Server (別名 evolution-data-server) の ntlm_challenge 関数におけるプロセスメモリ情報の漏洩またはサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2009-0582 2010-05-14 18:37 2009-03-14 Show GitHub Exploit DB Packet Storm
256138 1.2 注意 日本電気
サイバートラスト株式会社
サン・マイクロシステムズ
ターボリナックス
OpenSSL Project
レッドハット
- RSA key reconstruction vulnerability - CVE-2007-3108 2010-05-14 18:37 2007-08-16 Show GitHub Exploit DB Packet Storm
256139 5 警告 ヒューレット・パッカード
サイバートラスト株式会社
OpenSSL Project
ターボリナックス
レッドハット
- OpenSSL の zlib_stateful_finish 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2009-4355 2010-05-13 17:21 2010-01-13 Show GitHub Exploit DB Packet Storm
256140 9.3 危険 日立 - XMAP3 における任意のコードが実行される脆弱性 CWE-noinfo
情報不足
- 2010-05-13 15:14 2010-04-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212861 6.5 MEDIUM
Network
mozilla firefox When browsing a document hosted on an IP address, an attacker could insert certain characters to flip domain and path information in the address bar. This vulnerability affects Firefox < 77. NVD-CWE-noinfo
CVE-2020-12408 2024-11-21 13:59 2020-07-10 Show GitHub Exploit DB Packet Storm
212862 6.5 MEDIUM
Network
mozilla firefox Mozilla Developer Nicolas Silva found that when using WebRender, Firefox would under certain conditions leak arbitrary GPU memory to the visible screen. The leaked memory content was visible to the u… CWE-125
Out-of-bounds Read
CVE-2020-12407 2024-11-21 13:59 2020-07-10 Show GitHub Exploit DB Packet Storm
212863 8.8 HIGH
Network
mozilla
canonical
thunderbird
firefox
firefox_esr
ubuntu_linux
Mozilla Developer Iain Ireland discovered a missing type check during unboxed objects removal, resulting in a crash. We presume that with enough effort that it could be exploited to run arbitrary cod… CWE-345
 Insufficient Verification of Data Authenticity
CVE-2020-12406 2024-11-21 13:59 2020-07-10 Show GitHub Exploit DB Packet Storm
212864 5.3 MEDIUM
Network
mozilla
canonical
thunderbird
firefox
firefox_esr
ubuntu_linux
When browsing a malicious page, a race condition in our SharedWorkerService could occur and lead to a potentially exploitable crash. This vulnerability affects Thunderbird < 68.9.0, Firefox < 77, and… CWE-362
CWE-416
Race Condition
 Use After Free
CVE-2020-12405 2024-11-21 13:59 2020-07-10 Show GitHub Exploit DB Packet Storm
212865 4.3 MEDIUM
Network
mozilla firefox For native-to-JS bridging the app requires a unique token to be passed that ensures non-app code can't call the bridging functions. That token could leak when used for downloading files. This vulnera… CWE-79
Cross-site Scripting
CVE-2020-12404 2024-11-21 13:59 2020-07-10 Show GitHub Exploit DB Packet Storm
212866 4.4 MEDIUM
Local
mozilla
opensuse
fedoraproject
debian
firefox
leap
fedora
debian_linux
During RSA key generation, bignum implementations used a variation of the Binary Extended Euclidean Algorithm which entailed significantly input-dependent flow. This allowed an attacker able to perfo… CWE-203
 Information Exposure Through Discrepancy
CVE-2020-12402 2024-11-21 13:59 2020-07-10 Show GitHub Exploit DB Packet Storm
212867 4.4 MEDIUM
Local
mozilla
debian
thunderbird
firefox
firefox_esr
debian_linux
NSS has shown timing differences when performing DSA signatures, which was exploitable and could eventually leak private keys. This vulnerability affects Thunderbird < 68.9.0, Firefox < 77, and Firef… CWE-203
 Information Exposure Through Discrepancy
CVE-2020-12399 2024-11-21 13:59 2020-07-10 Show GitHub Exploit DB Packet Storm
212868 7.5 HIGH
Network
mozilla
canonical
thunderbird
ubuntu_linux
If Thunderbird is configured to use STARTTLS for an IMAP server, and the server sends a PREAUTH response, then Thunderbird will continue with an unencrypted connection, causing email data to be sent … CWE-319
Cleartext Transmission of Sensitive Information
CVE-2020-12398 2024-11-21 13:59 2020-07-10 Show GitHub Exploit DB Packet Storm
212869 6.5 MEDIUM
Network
mozilla
opensuse
firefox
leap
When constructing a permission prompt for WebRTC, a URI was supplied from the content process. This URI was untrusted, and could have been the URI of an origin that was previously granted permission;… CWE-276
Incorrect Default Permissions 
CVE-2020-12424 2024-11-21 13:59 2020-07-9 Show GitHub Exploit DB Packet Storm
212870 7.5 HIGH
Network
apache
oracle
camel
enterprise_repository
enterprise_manager_base_platform
communications_diameter_signaling_router
Server-Side Template Injection and arbitrary file disclosure on Camel templating components CWE-74
Injection
CVE-2020-11994 2024-11-21 13:59 2020-07-9 Show GitHub Exploit DB Packet Storm