Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 15, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 230761 | 6.8 | 警告 | Transmission Project | - | Transmission におけるクロスサイトリクエストフォージェリの脆弱性 |
CWE-352
同一生成元ポリシー違反 |
CVE-2009-1757 | 2012-12-20 19:10 | 2009-05-22 | Show | GitHub Exploit DB Packet Storm |
| 230762 | 2.1 | 注意 | simone rota | - | SLiM Simple Login Manager における X セッションにアクセスされる脆弱性 |
CWE-200
情報漏えい |
CVE-2009-1756 | 2012-12-20 19:10 | 2009-05-22 | Show | GitHub Exploit DB Packet Storm |
| 230763 | 7.5 | 危険 | realtywebware | - | Realty Webware Technologies Web-Base の list_list.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2009-1751 | 2012-12-20 19:10 | 2009-05-22 | Show | GitHub Exploit DB Packet Storm |
| 230764 | 4.3 | 警告 | pinnaclesys | - | Pinnacle Systems Pinnacle Studio の Pinnacle Hollywood Effects モジュールの InstallHFZ.exe におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2009-1744 | 2012-12-20 19:10 | 2009-05-20 | Show | GitHub Exploit DB Packet Storm |
| 230765 | 9.3 | 危険 | pinnaclesys | - | Pinnacle Systems Pinnacle Studio の Pinnacle Hollywood Effects モジュールの InstallHFZ.exe におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2009-1743 | 2012-12-20 19:10 | 2009-05-20 | Show | GitHub Exploit DB Packet Storm |
| 230766 | 7.5 | 危険 | phpeasycode | - | PAD Site Scripts における管理者権限を含む他のユーザとして権限を取得される脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2009-1739 | 2012-12-20 19:10 | 2009-05-20 | Show | GitHub Exploit DB Packet Storm |
| 230767 | 6.8 | 警告 | richard ellerbrock | - | IPplan におけるクロスサイトリクエストフォージェリの脆弱性 |
CWE-352
同一生成元ポリシー違反 |
CVE-2009-1733 | 2012-12-20 19:10 | 2009-05-20 | Show | GitHub Exploit DB Packet Storm |
| 230768 | 4.3 | 警告 | richard ellerbrock | - | IPplan の admin/usermanager におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2009-1732 | 2012-12-20 19:10 | 2009-05-20 | Show | GitHub Exploit DB Packet Storm |
| 230769 | 4.3 | 警告 | サン・マイクロシステムズ | - | Sun Java System Communications Express におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2009-1729 | 2012-12-20 19:10 | 2009-05-20 | Show | GitHub Exploit DB Packet Storm |
| 230770 | 9.3 | 危険 | サン・マイクロシステムズ | - | Sun Java SE Runtime Environment の deploytk.dll における任意のコードを実行される脆弱性 |
CWE-119
バッファエラー |
CVE-2009-1672 | 2012-12-20 19:10 | 2009-05-18 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 15, 2026, 4:10 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 196111 | 5.5 |
MEDIUM
Local |
amd |
epyc_7232p_firmware epyc_7302p_firmware epyc_7402p_firmware epyc_7502p_firmware epyc_7702p_firmware epyc_7252_firmware epyc_7262_firmware epyc_7272_firmware epyc_7282_firmware… |
Insufficient bound checks in the System Management Unit (SMU) may result in a system voltage malfunction that could result in denial of resources and/or possibly denial of service. |
CWE-20
Improper Input Validation |
CVE-2021-26373 | 2024-11-21 14:56 | 2022-05-12 | Show | GitHub Exploit DB Packet Storm |
| 196112 | 5.5 |
MEDIUM
Local |
amd |
epyc_7232p_firmware epyc_7302p_firmware epyc_7402p_firmware epyc_7502p_firmware epyc_7702p_firmware epyc_7252_firmware epyc_7262_firmware epyc_7272_firmware epyc_7282_firmware… |
Insufficient bound checks related to PCIE in the System Management Unit (SMU) may result in access to an invalid address space that could result in denial of service. |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2021-26372 | 2024-11-21 14:56 | 2022-05-12 | Show | GitHub Exploit DB Packet Storm |
| 196113 | 5.5 |
MEDIUM
Local |
amd |
epyc_7232p_firmware epyc_7302p_firmware epyc_7402p_firmware epyc_7502p_firmware epyc_7702p_firmware epyc_7252_firmware epyc_7262_firmware epyc_7272_firmware epyc_7282_firmware… |
Insufficient bounds checking in an SMU mailbox register could allow an attacker to potentially read outside of the SRAM address range which could result in an exception handling leading to a potentia… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2021-26364 | 2024-11-21 14:56 | 2022-05-12 | Show | GitHub Exploit DB Packet Storm |
| 196114 | 4.7 |
MEDIUM
Local |
amd |
epyc_7232p_firmware epyc_7302p_firmware epyc_7402p_firmware epyc_7502p_firmware epyc_7702p_firmware epyc_7252_firmware epyc_7262_firmware epyc_7272_firmware epyc_7282_firmware… |
A TOCTOU race condition in SMU may allow for the caller to obtain and manipulate the address of a message port register which may result in a potential denial of service. |
CWE-367
Time-of-check Time-of-use (TOCTOU) Race Condition |
CVE-2021-26350 | 2024-11-21 14:56 | 2022-05-12 | Show | GitHub Exploit DB Packet Storm |
| 196115 | 5.5 |
MEDIUM
Local |
amd |
epyc_7763_firmware epyc_7713p_firmware epyc_7713_firmware epyc_7663_firmware epyc_7643_firmware epyc_75f3_firmware epyc_7543p_firmware epyc_7543_firmware epyc_7513_firmware
Failure to assign a new report ID to an imported guest may potentially result in an SEV-SNP guest VM being tricked into trusting a dishonest Migration Agent (MA).
|
NVD-CWE-noinfo
|
CVE-2021-26349
|
2024-11-21 14:56 |
2022-05-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 196116 | 5.5 |
MEDIUM
Local |
amd |
epyc_7763_firmware epyc_7713p_firmware epyc_7713_firmware epyc_7663_firmware epyc_7643_firmware epyc_75f3_firmware epyc_7543p_firmware epyc_7543_firmware epyc_7513_firmware
Failure to flush the Translation Lookaside Buffer (TLB) of the I/O memory management unit (IOMMU) may lead an IO device to write to memory it should not be able to access, resulting in a potential lo…
|
NVD-CWE-noinfo
|
CVE-2021-26348
|
2024-11-21 14:56 |
2022-05-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 196117 | 4.7 |
MEDIUM
Local |
amd |
epyc_7763_firmware epyc_7713p_firmware epyc_7713_firmware epyc_7663_firmware epyc_7643_firmware epyc_75f3_firmware epyc_7543p_firmware epyc_7543_firmware epyc_7513_firmware
Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an integer overflow in the L2 directory table in SPI flash resulting in a potential…
|
CWE-1284
|
Improper Validation of Specified Quantity in Input
CVE-2021-26347
|
2024-11-21 14:56 |
2022-05-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 196118 | 3.3 |
LOW
Local |
amd |
epyc_7763_firmware epyc_7713p_firmware epyc_7713_firmware epyc_7663_firmware epyc_7643_firmware epyc_75f3_firmware epyc_7543p_firmware epyc_7543_firmware epyc_7513_firmware
In SEV guest VMs, the CPU may fail to flush the Translation Lookaside Buffer (TLB) following a particular sequence of operations that includes creation of a new virtual machine control block (VMCB). …
|
NVD-CWE-noinfo
|
CVE-2021-26342
|
2024-11-21 14:56 |
2022-05-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 196119 | 5.5 |
MEDIUM
Local |
amd |
epyc_7763_firmware epyc_7713p_firmware epyc_7713_firmware epyc_7663_firmware epyc_7643_firmware epyc_75f3_firmware epyc_7543p_firmware epyc_7543_firmware epyc_7513_firmware
A bug in AMD CPU’s core logic may allow for an attacker, using specific code from an unprivileged VM, to trigger a CPU core hang resulting in a potential denial of service. AMD believes the specific …
|
NVD-CWE-noinfo
|
CVE-2021-26339
|
2024-11-21 14:56 |
2022-05-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 196120 | 7.1 |
HIGH
Local |
amd |
epyc_7002_firmware epyc_7001_firmware epyc_7232p_firmware epyc_7252_firmware epyc_7262_firmware epyc_7272_firmware epyc_7282_firmware epyc_7302_firmware epyc_7302p_firmware
Insufficient validation of elliptic curve points in SEV-legacy firmware may compromise SEV-legacy guest migration potentially resulting in loss of guest's integrity or confidentiality.
|
NVD-CWE-noinfo
|
CVE-2021-26408
|
2024-11-21 14:56 |
2022-05-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|