VULNERABILITY

CVE search

Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.

Severity

严重高危中危低危Exploited in the wild (KEV)

Language / ecosystem

JavaScript / TypeScript (npm)Python (PyPI)PHP (Packagist)Java / Kotlin (Maven)GoRuby (RubyGems).NET (NuGet)

Stack

JavaScript / Node.js

Next.jsNuxtReactAngularSvelte / SvelteKitAstroRemixViteExpressNestJSFastifyNode.jsaxios

PHP

LaravelSymfonyPHP

Python

DjangoFlaskFastAPI / Starlette

Ruby

Ruby on Rails

Java

Spring

GinFiber

CMS

WordPressWooCommerceDrupalGhostStrapi

Servers & databases

nginxApache HTTP ServerMySQLPostgreSQLRedis

Vendor1

mozillaoracleibmgoogleadobemicrosoftciscoapacheappleredhatjenkinshpAll vendors →

mozilla products

firefox 3421thunderbird 2054seamonkey 694firefox esr 487thunderbird esr 228bugzilla 144mozilla 100firefox mobile 86network security services 46mozilla suite 27firefox focus 18focus 16nss 6bleach 5

401,051 vulnerabilities · 1,766 actively exploited (CISA KEV)

mozilla ✕Clear filters

3,879 results

ID	Severity	Summary	Published
CVE-2026-100814	高危8.8	Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.	29/09/2026
CVE-2026-100813	高危8.8	Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.	29/09/2026
CVE-2026-100812	中危6.5	Denial-of-service in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.	29/09/2026
CVE-2026-100811	严重9.6	Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.