|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
Update Date":May 13, 2026, 12:06 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 226371 | 7.5 | 危険 | Vastal I-Tech & Co. | - | Vastal I-Tech DVD Zone の view_mag.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2009-3495 | 2012-12-20 19:28 | 2009-09-30 | Show | GitHub Exploit DB Packet Storm |
| 226372 | 6.8 | 警告 | todor lazarov | - | T-HTB Manager の index.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2009-3494 | 2012-12-20 19:28 | 2009-09-30 | Show | GitHub Exploit DB Packet Storm |
| 226373 | 4.3 | 警告 | zenas | - | Zenas PaoBacheca Guestbook におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング(XSS) |
CVE-2009-3493 | 2012-12-20 19:28 | 2009-09-30 | Show | GitHub Exploit DB Packet Storm |
| 226374 | 2.1 | 注意 | ron jerome | - | Drupal 用の Bibliography モジュールにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング(XSS) |
CVE-2009-3488 | 2012-12-20 19:28 | 2009-09-30 | Show | GitHub Exploit DB Packet Storm |
| 226375 | 6.8 | 警告 | TrustPort | - | TrustPort Antivirus などにおける権限を取得される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2009-3482 | 2012-12-20 19:28 | 2009-09-30 | Show | GitHub Exploit DB Packet Storm |
| 226376 | 5 | 警告 | radactive | - | RADactive I-Load の WebCoreModule.ashx における重要な情報を取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2009-3452 | 2012-12-20 19:28 | 2009-09-29 | Show | GitHub Exploit DB Packet Storm |
| 226377 | 5 | 警告 | radactive | - | RADactive I-Load の WebCoreModule.ashx におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2009-3451 | 2012-12-20 19:28 | 2009-09-29 | Show | GitHub Exploit DB Packet Storm |
| 226378 | 4.7 | 警告 | reductivelabs | - | puppet の puppetmasterd における制限ファイルにアクセスされる脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2009-3564 | 2012-12-20 19:28 | 2008-12-8 | Show | GitHub Exploit DB Packet Storm |
| 226379 | 4.3 | 警告 | radactive | - | RADactive I-Load の WebCoreModule.ashx におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング(XSS) |
CVE-2009-3450 | 2012-12-20 19:28 | 2009-09-29 | Show | GitHub Exploit DB Packet Storm |
| 226380 | 6.8 | 警告 | radactive | - | RADactive I-Load における任意のコードを実行される脆弱性 |
CWE-362
競合状態 |
CVE-2009-3447 | 2012-12-20 19:28 | 2009-09-29 | Show | GitHub Exploit DB Packet Storm |
Update Date:May 13, 2026, 5:05 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 210691 | 5.5 |
MEDIUM
Local |
amd |
epyc_7003_firmware epyc_7002_firmware epyc_7001_firmware epyc_72f3_firmware epyc_7313_firmware epyc_7313p_firmware epyc_7343_firmware epyc_73f3_firmware epyc_7413_firmware … |
A side effect of an integrated chipset option may be able to be used by an attacker to bypass SPI ROM protections, allowing unauthorized SPI ROM modification. |
NVD-CWE-Other
|
CVE-2020-12954 | 2024-11-21 14:00 | 2021-11-17 | Show | GitHub Exploit DB Packet Storm |
| 210692 | 7.0 |
HIGH
Local |
amd |
epyc_7003_firmware epyc_7002_firmware epyc_7001_firmware epyc_72f3_firmware epyc_7313_firmware epyc_7313p_firmware epyc_7343_firmware epyc_73f3_firmware epyc_7413_firmware … |
Race condition in ASP firmware could allow less privileged x86 code to perform ASP SMM (System Management Mode) operations. |
CWE-362
Race Condition |
CVE-2020-12951 | 2024-11-21 14:00 | 2021-11-17 | Show | GitHub Exploit DB Packet Storm |
| 210693 | 7.1 |
HIGH
Local |
amd |
epyc_7f72_firmware epyc_7f52_firmware epyc_7f32_firmware epyc_7h12_firmware epyc_7742_firmware epyc_7702_firmware epyc_7702p_firmware epyc_7662_firmware epyc_7642_firmware … |
Insufficient input validation in ASP firmware for discrete TPM commands could allow a potential loss of integrity and denial of service. |
CWE-20
Improper Input Validation |
CVE-2020-12946 | 2024-11-21 14:00 | 2021-11-17 | Show | GitHub Exploit DB Packet Storm |
| 210694 | 7.8 |
HIGH
Local |
amd |
epyc_7601_firmware epyc_7551p_firmware epyc_7551_firmware epyc_7501_firmware epyc_7451_firmware epyc_7401_firmware epyc_7371_firmware epyc_7351p_firmware epyc_7351_firmware | Insufficient validation of BIOS image length by ASP Firmware could lead to arbitrary code execution. |
CWE-20
Improper Input Validation |
CVE-2020-12944 | 2024-11-21 14:00 | 2021-11-17 | Show | GitHub Exploit DB Packet Storm |
| 210695 | 7.8 |
HIGH
Local |
amd | radeon_software | Escape call interface in the AMD Graphics Driver for Windows may cause privilege escalation. |
NVD-CWE-noinfo
|
CVE-2020-12962 | 2024-11-21 14:00 | 2021-11-16 | Show | GitHub Exploit DB Packet Storm |
| 210696 | 5.5 |
MEDIUM
Local |
amd | radeon_software | AMD Graphics Driver for Windows 10, amdfender.sys may improperly handle input validation on InputBuffer which may result in a denial of service (DoS). |
CWE-20
Improper Input Validation |
CVE-2020-12960 | 2024-11-21 14:00 | 2021-11-16 | Show | GitHub Exploit DB Packet Storm |
| 210697 | 5.5 |
MEDIUM
Local |
amd | radeon_software | Out of Bounds Read in AMD Graphics Driver for Windows 10 in Escape 0x3004403 may lead to arbitrary information disclosure. |
CWE-125
Out-of-bounds Read |
CVE-2020-12905 | 2024-11-21 14:00 | 2021-11-16 | Show | GitHub Exploit DB Packet Storm |
| 210698 | 7.8 |
HIGH
Local |
amd | radeon_software | Out of Bounds Write and Read in AMD Graphics Driver for Windows 10 in Escape 0x6002d03 may lead to escalation of privilege or denial of service. |
CWE-787
Out-of-bounds Write |
CVE-2020-12903 | 2024-11-21 14:00 | 2021-11-16 | Show | GitHub Exploit DB Packet Storm |
| 210699 | 5.5 |
MEDIUM
Local |
amd | radeon_software | Arbitrary Free After Use in AMD Graphics Driver for Windows 10 may lead to KASLR bypass or information disclosure. |
CWE-416
Use After Free |
CVE-2020-12901 | 2024-11-21 14:00 | 2021-11-16 | Show | GitHub Exploit DB Packet Storm |
| 210700 | 7.1 |
HIGH
Local |
amd | radeon_software | Arbitrary Write in AMD Graphics Driver for Windows 10 in Escape 0x40010d may lead to arbitrary write to kernel memory or denial of service. |
CWE-787
Out-of-bounds Write |
CVE-2020-12894 | 2024-11-21 14:00 | 2021-11-16 | Show | GitHub Exploit DB Packet Storm |