Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 10, 2026, noon
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 227091 | 6 | 警告 | typosphere | - | Typo の "ページを管理する" 機能における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-4904 | 2012-12-20 18:52 | 2008-11-3 | Show | GitHub Exploit DB Packet Storm |
| 227092 | 4.3 | 警告 | typosphere | - | Typo のコメントを残す機能におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2008-4903 | 2012-12-20 18:52 | 2008-11-3 | Show | GitHub Exploit DB Packet Storm |
| 227093 | 7.5 | 危険 | scripts frenzy | - | Article Publisher Pro の contact_author.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-4902 | 2012-12-20 18:52 | 2008-11-3 | Show | GitHub Exploit DB Packet Storm |
| 227094 | 7.5 | 危険 | scripts frenzy | - | Article Publisher Pro の admin/admin.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-4901 | 2012-12-20 18:52 | 2008-11-3 | Show | GitHub Exploit DB Packet Storm |
| 227095 | 9.3 | 危険 | SAP | - | SAP GUI の KWEdit ActiveX コントロールにおける任意のファイルを上書きされる脆弱性 |
CWE-Other
その他 |
CVE-2008-4830 | 2012-12-20 18:52 | 2009-04-16 | Show | GitHub Exploit DB Packet Storm |
| 227096 | 7.5 | 危険 | YourFreeWorld.com | - | YourFreeWorld Classifieds Blaster Script の tr.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-4900 | 2012-12-20 18:52 | 2008-11-3 | Show | GitHub Exploit DB Packet Storm |
| 227097 | 6.8 | 警告 | planetluc | - | Planetluc RateMe におけるクロスサイトリクエストフォージェリの脆弱性 |
CWE-352
同一生成元ポリシー違反 |
CVE-2008-4899 | 2012-12-20 18:52 | 2008-11-3 | Show | GitHub Exploit DB Packet Storm |
| 227098 | 4.3 | 警告 | planetluc | - | planetluc RateMe におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2008-4898 | 2012-12-20 18:52 | 2008-11-3 | Show | GitHub Exploit DB Packet Storm |
| 227099 | 7.5 | 危険 | YourFreeWorld.com | - | YourFreeWorld Downline Builder の tr.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-4895 | 2012-12-20 18:52 | 2008-11-3 | Show | GitHub Exploit DB Packet Storm |
| 227100 | 5.1 | 警告 | Tribal Ltd. | - | Tribiq CMS の templates/mytribiqsite/tribal-GPL-1066/includes/header.inc.php におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2008-4894 | 2012-12-20 18:52 | 2008-11-3 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 10, 2026, 4:58 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 210221 | 5.5 |
MEDIUM
Local |
intel | graphics_drivers | Null pointer reference in some Intel(R) Graphics Drivers for Windows* before version 26.20.100.7212 and before version Linux kernel version 5.5 may allow a privileged user to potentially enable a den… |
CWE-476
NULL Pointer Dereference |
CVE-2020-12364 | 2024-11-21 13:59 | 2021-02-17 | Show | GitHub Exploit DB Packet Storm |
| 210222 | 5.5 |
MEDIUM
Local |
intel | graphics_drivers | Improper input validation in some Intel(R) Graphics Drivers for Windows* before version 26.20.100.7212 and before Linux kernel version 5.5 may allow a privileged user to potentially enable a denial o… |
CWE-20
Improper Input Validation |
CVE-2020-12363 | 2024-11-21 13:59 | 2021-02-17 | Show | GitHub Exploit DB Packet Storm |
| 210223 | 7.8 |
HIGH
Local |
intel | graphics_drivers | Integer overflow in the firmware for some Intel(R) Graphics Drivers for Windows * before version 26.20.100.7212 and before Linux kernel version 5.5 may allow a privileged user to potentially enable a… |
CWE-190
Integer Overflow or Wraparound |
CVE-2020-12362 | 2024-11-21 13:59 | 2021-02-17 | Show | GitHub Exploit DB Packet Storm |
| 210224 | 5.5 |
MEDIUM
Local |
intel | graphics_drivers | Use after free in some Intel(R) Graphics Drivers before version 15.33.51.5146 may allow an authenticated user to potentially enable denial of service via local access. |
CWE-416
Use After Free |
CVE-2020-12361 | 2024-11-21 13:59 | 2021-02-17 | Show | GitHub Exploit DB Packet Storm |
| 210225 | 8.8 |
HIGH
Network |
intel | collaboration_suite | Insufficient control flow management in the API for the Intel(R) Collaboration Suite for WebRTC before version 4.3.1 may allow an authenticated user to potentially enable escalation of privilege via … |
NVD-CWE-Other
|
CVE-2020-12339 | 2024-11-21 13:59 | 2021-02-17 | Show | GitHub Exploit DB Packet Storm |
| 210226 | 7.8 |
HIGH
Local |
maxpcsecure | max_spyware_detector | In Max Secure Max Spyware Detector 1.0.0.044, the driver file (MaxProc64.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validatin… |
CWE-20
Improper Input Validation |
CVE-2020-12122 | 2024-11-21 13:59 | 2021-02-6 | Show | GitHub Exploit DB Packet Storm |
| 210227 | 7.8 |
HIGH
Local |
wago pepperl-fuchs emerson weidmueller |
fdtcontainer_component pactware rosemount_transmitter_interface_software dtminspector_3 fdtcontainer_application wi_manager io-link_master_firmware |
M&M Software fdtCONTAINER Component in versions below 3.5.20304.x and between 3.6 and 3.6.20304.x is vulnerable to deserialization of untrusted data in its project storage. |
CWE-502
Deserialization of Untrusted Data |
CVE-2020-12525 | 2024-11-21 13:59 | 2021-01-23 | Show | GitHub Exploit DB Packet Storm |
| 210228 | 4.9 |
MEDIUM
Network |
pepperl-fuchs |
io-link_master_4-eip_firmware io-link_master_8-eip_firmware io-link_master_8-eip-l_firmware io-link_master_dr-8-eip_firmware io-link_master_dr-8-eip-p_firmware io-link_master_dr-8-eip-… |
Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to a NULL Pointer Dereference that leads to a DoS in discoveryd |
CWE-476
NULL Pointer Dereference |
CVE-2020-12514 | 2024-11-21 13:59 | 2021-01-23 | Show | GitHub Exploit DB Packet Storm |
| 210229 | 8.8 |
HIGH
Network |
pepperl-fuchs |
io-link_master_4-eip_firmware io-link_master_8-eip_firmware io-link_master_8-eip-l_firmware io-link_master_dr-8-eip_firmware io-link_master_dr-8-eip-p_firmware io-link_master_dr-8-eip-… |
Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to an authenticated blind OS Command Injection. |
CWE-78
OS Command |
CVE-2020-12513 | 2024-11-21 13:59 | 2021-01-23 | Show | GitHub Exploit DB Packet Storm |
| 210230 | 5.4 |
MEDIUM
Network |
pepperl-fuchs |
io-link_master_4-eip_firmware io-link_master_8-eip_firmware io-link_master_8-eip-l_firmware io-link_master_dr-8-eip_firmware io-link_master_dr-8-eip-p_firmware io-link_master_dr-8-eip-… |
Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to an authenticated reflected POST Cross-Site Scripting |
CWE-79
Cross-site Scripting |
CVE-2020-12512 | 2024-11-21 13:59 | 2021-01-23 | Show | GitHub Exploit DB Packet Storm |