Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, noon

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
257501 5 警告 アップル - Apple Safari の WebKit 内にある JavaScript 実装におけるユーザを追跡可能な脆弱性 CWE-310
暗号の問題
CVE-2010-3804 2010-12-15 14:29 2010-11-22 Show GitHub Exploit DB Packet Storm
257502 9.3 危険 アップル - Apple Safari の WebKit における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2010-3803 2010-12-15 14:25 2010-11-22 Show GitHub Exploit DB Packet Storm
257503 2.6 注意 マイクロソフト - Internet Explorer におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-3348 2010-12-15 14:08 2010-12-15 Show GitHub Exploit DB Packet Storm
257504 2.6 注意 マイクロソフト - Internet Explorer におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-3342 2010-12-15 14:07 2010-12-15 Show GitHub Exploit DB Packet Storm
257505 2.6 注意 マイクロソフト - Internet Explorer におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-3342 2010-12-15 14:05 2010-12-15 Show GitHub Exploit DB Packet Storm
257506 4.3 警告 マイクロソフト - Internet Explorer におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-3342 2010-12-15 14:03 2010-12-15 Show GitHub Exploit DB Packet Storm
257507 7.5 危険 Samba Project
アップル
サイバートラスト株式会社
ヒューレット・パッカード
ターボリナックス
オラクル
レッドハット
- Samba の chain_reply 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-2063 2010-12-15 12:51 2010-06-16 Show GitHub Exploit DB Packet Storm
257508 7.5 危険 IBM
Apache Software Foundation
アップル
サイバートラスト株式会社
富士通
ヒューレット・パッカード
ターボリナックス
オラクル
レッドハット
- Apache HTTP Server の mod_proxy_ftp モジュールにおけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-3095 2010-12-15 12:45 2009-09-8 Show GitHub Exploit DB Packet Storm
257509 5.4 警告 IBM
Apache Software Foundation
富士通
サイバートラスト株式会社
ヒューレット・パッカード
ターボリナックス
オラクル
レッドハット
- Apache HTTP Server の ap_proxy_ftp_handler 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2009-3094 2010-12-15 12:44 2009-09-8 Show GitHub Exploit DB Packet Storm
257510 7.5 危険 The PHP Group
アップル
ターボリナックス
ヒューレット・パッカード
- PHP におけるスーパーグローバル配列 SESSION の割り込み領域が破壊される脆弱性 CWE-Other
その他
CVE-2009-4143 2010-12-15 12:44 2009-12-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211441 6.8 MEDIUM
Network
mozilla firefox If the Remote Debugging via USB feature was enabled in Firefox for Android on an Android version prior to Android 6.0, untrusted apps could have connected to the feature and operated with the privile… NVD-CWE-noinfo
CVE-2020-26964 2024-11-21 14:20 2020-12-9 Show GitHub Exploit DB Packet Storm
211442 6.1 MEDIUM
Network
mozilla firefox Cross-origin iframes that contained a login form could have been recognized by the login autofill service, and populated. This could have been used in clickjacking attacks, as well as be read across … CWE-1021
 Improper Restriction of Rendered UI Layers or Frames
CVE-2020-26962 2024-11-21 14:20 2020-12-9 Show GitHub Exploit DB Packet Storm
211443 6.5 MEDIUM
Network
mozilla firefox
firefox_esr
thunderbird
When DNS over HTTPS is in use, it intentionally filters RFC1918 and related IP ranges from the responses as these do not make sense coming from a DoH resolver. However when an IPv4 address was mapped… NVD-CWE-noinfo
CVE-2020-26961 2024-11-21 14:20 2020-12-9 Show GitHub Exploit DB Packet Storm
211444 8.8 HIGH
Network
mozilla firefox
firefox_esr
thunderbird
If the Compact() method was called on an nsTArray, the array could have been reallocated without updating other pointers, leading to a potential use-after-free and exploitable crash. This vulnerabili… CWE-416
 Use After Free
CVE-2020-26960 2024-11-21 14:20 2020-12-9 Show GitHub Exploit DB Packet Storm
211445 8.8 HIGH
Network
mozilla firefox
firefox_esr
thunderbird
During browser shutdown, reference decrementing could have occured on a previously freed object, resulting in a use-after-free, memory corruption, and a potentially exploitable crash. This vulnerabil… CWE-416
 Use After Free
CVE-2020-26959 2024-11-21 14:20 2020-12-9 Show GitHub Exploit DB Packet Storm
211446 6.1 MEDIUM
Network
mozilla firefox
firefox_esr
thunderbird
Firefox did not block execution of scripts with incorrect MIME types when the response was intercepted and cached through a ServiceWorker. This could lead to a cross-site script inclusion vulnerabili… CWE-79
Cross-site Scripting
CVE-2020-26958 2024-11-21 14:20 2020-12-9 Show GitHub Exploit DB Packet Storm
211447 6.5 MEDIUM
Network
mozilla firefox OneCRL was non-functional in the new Firefox for Android due to a missing service initialization. This could result in a failure to enforce some certificate revocations. *Note: This issue only affect… CWE-665
 Improper Initialization
CVE-2020-26957 2024-11-21 14:20 2020-12-9 Show GitHub Exploit DB Packet Storm
211448 6.1 MEDIUM
Network
mozilla firefox
firefox_esr
thunderbird
In some cases, removing HTML elements during sanitization would keep existing SVG event handlers and therefore lead to XSS. This vulnerability affects Firefox < 83, Firefox ESR < 78.5, and Thunderbir… CWE-79
Cross-site Scripting
CVE-2020-26956 2024-11-21 14:20 2020-12-9 Show GitHub Exploit DB Packet Storm
211449 6.5 MEDIUM
Network
mozilla firefox When a user downloaded a file in Firefox for Android, if a cookie is set, it would have been re-sent during a subsequent file download operation on the same domain, regardless of whether the original… CWE-565
 Reliance on Cookies without Validation and Integrity Checking
CVE-2020-26955 2024-11-21 14:20 2020-12-9 Show GitHub Exploit DB Packet Storm
211450 4.3 MEDIUM
Network
mozilla firefox When accepting a malicious intent from other installed apps, Firefox for Android accepted manifests from arbitrary file paths and allowed declaring webapp manifests for other origins. This could be u… NVD-CWE-Other
CVE-2020-26954 2024-11-21 14:20 2020-12-9 Show GitHub Exploit DB Packet Storm