|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
Update Date":May 13, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 226341 | 5 | 警告 | ViewVC | - | ViewVC における脆弱性 |
CWE-noinfo
情報不足 |
CVE-2009-3619 | 2012-12-20 19:28 | 2009-08-11 | Show | GitHub Exploit DB Packet Storm |
| 226342 | 4.3 | 警告 | ViewVC | - | ViewVC の viewvc.py におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング(XSS) |
CVE-2009-3618 | 2012-12-20 19:28 | 2009-08-11 | Show | GitHub Exploit DB Packet Storm |
| 226343 | 7.6 | 危険 | tatsuhiro tsujikawa | - | aria の src/AbstractCommand.cc におけるフォーマットストリングの脆弱性 |
CWE-134
書式文字列の問題 |
CVE-2009-3617 | 2012-12-20 19:28 | 2009-10-20 | Show | GitHub Exploit DB Packet Storm |
| 226344 | 8.5 | 危険 | Fabrice Bellard | - | QEMU の VNC server におけるホストの OS 上で任意のコードを実行される脆弱性 |
CWE-399
リソース管理の問題 |
CVE-2009-3616 | 2012-12-20 19:28 | 2009-10-23 | Show | GitHub Exploit DB Packet Storm |
| 226345 | 9.3 | 危険 | freedesktop.org | - | Poppler の glib/poppler-page.cc における整数オーバーフローの脆弱性 |
CWE-189
数値処理の問題 |
CVE-2009-3607 | 2012-12-20 19:28 | 2009-10-21 | Show | GitHub Exploit DB Packet Storm |
| 226346 | 4.3 | 警告 | Scriptsez.net | - | Scriptsez Ultimate Poll の demo_page.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング(XSS) |
CVE-2009-3601 | 2012-12-20 19:28 | 2009-10-8 | Show | GitHub Exploit DB Packet Storm |
| 226347 | 7.5 | 危険 | vspanel | - | VS PANEL の results.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2009-3595 | 2012-12-20 19:28 | 2009-10-8 | Show | GitHub Exploit DB Packet Storm |
| 226348 | 4.3 | 警告 | qtmsoft | - | Qualiteam X-Cart の customer/home.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング(XSS) |
CVE-2009-3592 | 2012-12-20 19:28 | 2009-10-8 | Show | GitHub Exploit DB Packet Storm |
| 226349 | 7.5 | 危険 | vspanel | - | VS PANEL の showcat.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2009-3590 | 2012-12-20 19:28 | 2009-10-8 | Show | GitHub Exploit DB Packet Storm |
| 226350 | 5 | 警告 | sql-ledger | - | SQL-Ledger におけるクッキーをキャプチャされる脆弱性 |
CWE-16
環境設定 |
CVE-2009-3584 | 2012-12-20 19:28 | 2009-12-23 | Show | GitHub Exploit DB Packet Storm |
Update Date:May 14, 2026, 4 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 210691 | 5.5 |
MEDIUM
Local |
amd |
epyc_7003_firmware epyc_7002_firmware epyc_7001_firmware epyc_72f3_firmware epyc_7313_firmware epyc_7313p_firmware epyc_7343_firmware epyc_73f3_firmware epyc_7413_firmware … |
A side effect of an integrated chipset option may be able to be used by an attacker to bypass SPI ROM protections, allowing unauthorized SPI ROM modification. |
NVD-CWE-Other
|
CVE-2020-12954 | 2024-11-21 14:00 | 2021-11-17 | Show | GitHub Exploit DB Packet Storm |
| 210692 | 7.0 |
HIGH
Local |
amd |
epyc_7003_firmware epyc_7002_firmware epyc_7001_firmware epyc_72f3_firmware epyc_7313_firmware epyc_7313p_firmware epyc_7343_firmware epyc_73f3_firmware epyc_7413_firmware … |
Race condition in ASP firmware could allow less privileged x86 code to perform ASP SMM (System Management Mode) operations. |
CWE-362
Race Condition |
CVE-2020-12951 | 2024-11-21 14:00 | 2021-11-17 | Show | GitHub Exploit DB Packet Storm |
| 210693 | 7.1 |
HIGH
Local |
amd |
epyc_7f72_firmware epyc_7f52_firmware epyc_7f32_firmware epyc_7h12_firmware epyc_7742_firmware epyc_7702_firmware epyc_7702p_firmware epyc_7662_firmware epyc_7642_firmware … |
Insufficient input validation in ASP firmware for discrete TPM commands could allow a potential loss of integrity and denial of service. |
CWE-20
Improper Input Validation |
CVE-2020-12946 | 2024-11-21 14:00 | 2021-11-17 | Show | GitHub Exploit DB Packet Storm |
| 210694 | 7.8 |
HIGH
Local |
amd |
epyc_7601_firmware epyc_7551p_firmware epyc_7551_firmware epyc_7501_firmware epyc_7451_firmware epyc_7401_firmware epyc_7371_firmware epyc_7351p_firmware epyc_7351_firmware | Insufficient validation of BIOS image length by ASP Firmware could lead to arbitrary code execution. |
CWE-20
Improper Input Validation |
CVE-2020-12944 | 2024-11-21 14:00 | 2021-11-17 | Show | GitHub Exploit DB Packet Storm |
| 210695 | 7.8 |
HIGH
Local |
amd | radeon_software | Escape call interface in the AMD Graphics Driver for Windows may cause privilege escalation. |
NVD-CWE-noinfo
|
CVE-2020-12962 | 2024-11-21 14:00 | 2021-11-16 | Show | GitHub Exploit DB Packet Storm |
| 210696 | 5.5 |
MEDIUM
Local |
amd | radeon_software | AMD Graphics Driver for Windows 10, amdfender.sys may improperly handle input validation on InputBuffer which may result in a denial of service (DoS). |
CWE-20
Improper Input Validation |
CVE-2020-12960 | 2024-11-21 14:00 | 2021-11-16 | Show | GitHub Exploit DB Packet Storm |
| 210697 | 5.5 |
MEDIUM
Local |
amd | radeon_software | Out of Bounds Read in AMD Graphics Driver for Windows 10 in Escape 0x3004403 may lead to arbitrary information disclosure. |
CWE-125
Out-of-bounds Read |
CVE-2020-12905 | 2024-11-21 14:00 | 2021-11-16 | Show | GitHub Exploit DB Packet Storm |
| 210698 | 7.8 |
HIGH
Local |
amd | radeon_software | Out of Bounds Write and Read in AMD Graphics Driver for Windows 10 in Escape 0x6002d03 may lead to escalation of privilege or denial of service. |
CWE-787
Out-of-bounds Write |
CVE-2020-12903 | 2024-11-21 14:00 | 2021-11-16 | Show | GitHub Exploit DB Packet Storm |
| 210699 | 5.5 |
MEDIUM
Local |
amd | radeon_software | Arbitrary Free After Use in AMD Graphics Driver for Windows 10 may lead to KASLR bypass or information disclosure. |
CWE-416
Use After Free |
CVE-2020-12901 | 2024-11-21 14:00 | 2021-11-16 | Show | GitHub Exploit DB Packet Storm |
| 210700 | 7.1 |
HIGH
Local |
amd | radeon_software | Arbitrary Write in AMD Graphics Driver for Windows 10 in Escape 0x40010d may lead to arbitrary write to kernel memory or denial of service. |
CWE-787
Out-of-bounds Write |
CVE-2020-12894 | 2024-11-21 14:00 | 2021-11-16 | Show | GitHub Exploit DB Packet Storm |