Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 13, 2026, noon
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 229931 | 7.5 | 危険 | ryan haudenschilt | - | Family Connections における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2009-4791 | 2012-12-20 19:28 | 2010-04-22 | Show | GitHub Exploit DB Packet Storm |
| 229932 | 5 | 警告 | XOOPS | - | XOOPS の Profiles モジュールにおける管理者による承認を回避される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2009-4851 | 2012-12-20 19:28 | 2009-11-11 | Show | GitHub Exploit DB Packet Storm |
| 229933 | 7.5 | 危険 | phplivesupport | - | PHP Live! における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2009-4749 | 2012-12-20 19:28 | 2010-03-26 | Show | GitHub Exploit DB Packet Storm |
| 229934 | 7.5 | 危険 | Tecnick.com | - | AIOCP の public/code/cp_html2xhtmlbasic.php における PHP リモートファイルインクルージョンの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2009-4747 | 2012-12-20 19:28 | 2010-03-26 | Show | GitHub Exploit DB Packet Storm |
| 229935 | 10 | 危険 | Skype Technologies S.A. | - | Windows 上で稼動する Skype の Extras Manager における脆弱性 |
CWE-noinfo
情報不足 |
CVE-2009-4741 | 2012-12-20 19:28 | 2010-03-26 | Show | GitHub Exploit DB Packet Storm |
| 229936 | 7.5 | 危険 | TYPO3 Association | - | TYPO3 用の Webesse E-Card エクステンションにおけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2009-4740 | 2012-12-20 19:28 | 2010-03-26 | Show | GitHub Exploit DB Packet Storm |
| 229937 | 6.8 | 警告 | skadate | - | SkaDate Dating の index.php における PHP リモートファイルインクルージョンの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2009-4739 | 2012-12-20 19:28 | 2010-03-26 | Show | GitHub Exploit DB Packet Storm |
| 229938 | 4.3 | 警告 | sensesites | - | CommonSense CMS の search.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2009-4736 | 2012-12-20 19:28 | 2010-03-23 | Show | GitHub Exploit DB Packet Storm |
| 229939 | 6.8 | 警告 | supercrackmunkey | - | SimpleLoginSys の checkuser.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2009-4733 | 2012-12-20 19:28 | 2010-03-18 | Show | GitHub Exploit DB Packet Storm |
| 229940 | 6.8 | 警告 | technotoad | - | TT Web Site Manager の tt/index.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2009-4732 | 2012-12-20 19:28 | 2010-03-18 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 13, 2026, 4:20 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 195941 | 7.1 |
HIGH
Local |
amd |
radeon_software athlon_3050ge_firmware athlon_3150g_firmware athlon_3150ge_firmware ryzen_3_2200u_firmware ryzen_3_2300u_firmware ryzen_3_3100_firmware ryzen_3_3300g_firmware … |
An attacker, who gained elevated privileges via some other vulnerability, may be able to read data from Boot ROM resulting in a loss of system integrity. |
NVD-CWE-noinfo
|
CVE-2021-26366 | 2024-11-21 14:56 | 2022-05-13 | Show | GitHub Exploit DB Packet Storm |
| 195942 | 7.1 |
HIGH
Local |
amd |
radeon_software ryzen_3_2200u_firmware ryzen_3_2300u_firmware ryzen_3_5125c_firmware ryzen_3_5400u_firmware athlon_3050ge_firmware athlon_3150ge_firmware athlon_3150g_firmware
A malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system call which results in mapping sensitive System Management Network (SMN) registers leading to a loss of in…
|
NVD-CWE-noinfo
|
CVE-2021-26362
|
2024-11-21 14:56 |
2022-05-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 195943 | 5.5 |
MEDIUM
Local |
amd |
radeon_software ryzen_3_2200u_firmware ryzen_3_2300u_firmware ryzen_3_5125c_firmware ryzen_3_5400u_firmware athlon_3050ge_firmware athlon_3150ge_firmware athlon_3150g_firmware
A malicious or compromised User Application (UApp) or AGESA Boot Loader (ABL) could be used by an attacker to exfiltrate arbitrary memory from the ASP stage 2 bootloader potentially leading to inform…
|
NVD-CWE-noinfo
|
CVE-2021-26361
|
2024-11-21 14:56 |
2022-05-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 195944 | 5.5 |
MEDIUM
Local |
amd |
ryzen_3_3100_firmware ryzen_3_3300g_firmware ryzen_3_3300x_firmware ryzen_3_5125c_firmware ryzen_3_5400u_firmware ryzen_3_5425c_firmware ryzen_3_5425u_firmware ryzen_5_3400g_firm… |
Insufficient DRAM address validation in System Management Unit (SMU) may result in a DMA (Direct Memory Access) read/write from/to invalid DRAM address that could result in denial of service. |
CWE-20
Improper Input Validation |
CVE-2021-26351 | 2024-11-21 14:56 | 2022-05-13 | Show | GitHub Exploit DB Packet Storm |
| 195945 | 4.0 |
MEDIUM
Local |
amd | cpu | AMD processors may speculatively re-order load instructions which can result in stale data being observed when multiple processors are operating on shared memory, resulting in potential data leakage. |
NVD-CWE-noinfo
|
CVE-2021-26400 | 2024-11-21 14:56 | 2022-05-12 | Show | GitHub Exploit DB Packet Storm |
| 195946 | 5.5 |
MEDIUM
Local |
amd |
epyc_7232p_firmware epyc_7302p_firmware epyc_7402p_firmware epyc_7502p_firmware epyc_7702p_firmware epyc_7252_firmware epyc_7262_firmware epyc_7272_firmware epyc_7282_firmware… |
Improper validation of the BIOS directory may allow for searches to read beyond the directory table copy in RAM, exposing out of bounds memory contents, resulting in a potential denial of service. |
CWE-125
Out-of-bounds Read |
CVE-2021-26388 | 2024-11-21 14:56 | 2022-05-12 | Show | GitHub Exploit DB Packet Storm |
| 195947 | 5.5 |
MEDIUM
Local |
amd |
epyc_7232p_firmware epyc_7302p_firmware epyc_7402p_firmware epyc_7502p_firmware epyc_7702p_firmware epyc_7252_firmware epyc_7262_firmware epyc_7272_firmware epyc_7282_firmware… |
Insufficient bound checks in the System Management Unit (SMU) may result in access to an invalid address space that could result in denial of service. |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2021-26378 | 2024-11-21 14:56 | 2022-05-12 | Show | GitHub Exploit DB Packet Storm |
| 195948 | 5.5 |
MEDIUM
Local |
amd |
epyc_7232p_firmware epyc_7302p_firmware epyc_7402p_firmware epyc_7502p_firmware epyc_7702p_firmware epyc_7252_firmware epyc_7262_firmware epyc_7272_firmware epyc_7282_firmware… |
Insufficient checks in System Management Unit (SMU) FeatureConfig may result in reenabling features potentially resulting in denial of resources and/or denial of service. |
NVD-CWE-noinfo
|
CVE-2021-26376 | 2024-11-21 14:56 | 2022-05-12 | Show | GitHub Exploit DB Packet Storm |
| 195949 | 5.5 |
MEDIUM
Local |
amd |
epyc_7232p_firmware epyc_7302p_firmware epyc_7402p_firmware epyc_7502p_firmware epyc_7702p_firmware epyc_7252_firmware epyc_7262_firmware epyc_7272_firmware epyc_7282_firmware… |
Insufficient General Purpose IO (GPIO) bounds check in System Management Unit (SMU) may result in access/updates from/to invalid address space that could result in denial of service. |
NVD-CWE-noinfo
|
CVE-2021-26375 | 2024-11-21 14:56 | 2022-05-12 | Show | GitHub Exploit DB Packet Storm |
| 195950 | 5.5 |
MEDIUM
Local |
amd |
epyc_7232p_firmware epyc_7302p_firmware epyc_7402p_firmware epyc_7502p_firmware epyc_7702p_firmware epyc_7252_firmware epyc_7262_firmware epyc_7272_firmware epyc_7282_firmware… |
Insufficient bound checks in the System Management Unit (SMU) may result in a system voltage malfunction that could result in denial of resources and/or possibly denial of service. |
CWE-20
Improper Input Validation |
CVE-2021-26373 | 2024-11-21 14:56 | 2022-05-12 | Show | GitHub Exploit DB Packet Storm |