Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 17, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 231001 | 6.8 | 警告 | supersimple | - | Super Simple Blog Script の comments.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2009-2553 | 2012-12-20 19:10 | 2009-07-20 | Show | GitHub Exploit DB Packet Storm |
| 231002 | 6.8 | 警告 | supersimple | - | Super Simple Blog Script の comments.php におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2009-2552 | 2012-12-20 19:10 | 2009-07-20 | Show | GitHub Exploit DB Packet Storm |
| 231003 | 4.3 | 警告 | Scriptsez.net | - | ScriptsEz Easy Image Downloader におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2009-2551 | 2012-12-20 19:10 | 2009-07-20 | Show | GitHub Exploit DB Packet Storm |
| 231004 | 7.8 | 危険 | ソニー・コンピュータエンタテインメント | - | PS3 の Web ブラウザにおけるサービス運用妨害 (DoS) の脆弱性 |
CWE-399
リソース管理の問題 |
CVE-2009-2541 | 2012-12-20 19:10 | 2009-07-20 | Show | GitHub Exploit DB Packet Storm |
| 231005 | 5 | 警告 | リアルネットワークス | - | RealNetworks Helix Server などにおけるサービス運用妨害 (DoS) の脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2009-2534 | 2012-12-20 19:10 | 2009-07-14 | Show | GitHub Exploit DB Packet Storm |
| 231006 | 5 | 警告 | リアルネットワークス | - | RealNetworks Helix Server などの rmserver におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2009-2533 | 2012-12-20 19:10 | 2009-07-14 | Show | GitHub Exploit DB Packet Storm |
| 231007 | 4.4 | 警告 | サン・マイクロシステムズ | - | SRSS の utaudiod デーモンにおける任意のユーザのセッションへアクセスされる脆弱性 |
CWE-noinfo
情報不足 |
CVE-2009-2491 | 2012-12-20 19:10 | 2009-07-14 | Show | GitHub Exploit DB Packet Storm |
| 231008 | 1.9 | 注意 | サン・マイクロシステムズ | - | SRSS の utaudiod デーモンにおけるサービス運用妨害 (DoS) の脆弱性 |
CWE-noinfo
情報不足 |
CVE-2009-2490 | 2012-12-20 19:10 | 2009-07-14 | Show | GitHub Exploit DB Packet Storm |
| 231009 | 2.1 | 注意 | サン・マイクロシステムズ | - | SRSS の utdmsession プログラムにおける任意のユーザのセッションへアクセスされる脆弱性 |
CWE-noinfo
情報不足 |
CVE-2009-2489 | 2012-12-20 19:10 | 2009-07-14 | Show | GitHub Exploit DB Packet Storm |
| 231010 | 9.3 | 危険 | tingan | - | HT-MP3Player におけるスタックベースのバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2009-2485 | 2012-12-20 19:10 | 2009-07-16 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 18, 2026, 4 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 196181 | 7.8 |
HIGH
Local |
beego | beego | An issue was discovered in file profile.go in function MemProf in beego through 2.0.2, allows attackers to launch symlink attacks locally. |
CWE-59
Link Following |
CVE-2021-27116 | 2024-11-21 14:57 | 2022-04-6 | Show | GitHub Exploit DB Packet Storm |
| 196182 | 5.5 |
MEDIUM
Local |
kaspersky |
total_security small_office_security security_cloud endpoint_security anti-virus internet_security |
A denial-of-service issue existed in one of modules that was incorporated in Kaspersky Anti-Virus products for home and Kaspersky Endpoint Security. A local user could cause Windows crash by running … |
NVD-CWE-noinfo
|
CVE-2021-27223 | 2024-11-21 14:57 | 2022-04-2 | Show | GitHub Exploit DB Packet Storm |
| 196183 | 6.8 |
MEDIUM
Physics |
ge | ur_bootloader_binary | GE UR bootloader binary Version 7.00, 7.01 and 7.02 included unused hardcoded credentials. Additionally, a user with physical access to the UR IED can interrupt the boot sequence by rebooting the UR. |
CWE-798
Use of Hard-coded Credentials |
CVE-2021-27430 | 2024-11-21 14:57 | 2022-03-24 | Show | GitHub Exploit DB Packet Storm |
| 196184 | 9.8 |
CRITICAL
Network |
ge |
multilin_b30_firmware multilin_b90_firmware multilin_c60_firmware multilin_c70_firmware multilin_c95_firmware multilin_d30_firmware multilin_d60_firmware multilin_f35_firmware
GE UR IED firmware versions prior to version 8.1x supports upgrading firmware using UR Setup configuration tool – Enervista UR Setup. This UR Setup tool validates the authenticity and integrity of fi…
|
CWE-434
|
Unrestricted Upload of File with Dangerous Type
CVE-2021-27428
|
2024-11-21 14:57 |
2022-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 196185 | 9.8 |
CRITICAL
Network |
ge |
multilin_b30_firmware multilin_b90_firmware multilin_c60_firmware multilin_c70_firmware multilin_c95_firmware multilin_d30_firmware multilin_d60_firmware multilin_f35_firmware
GE UR IED firmware versions prior to version 8.1x with “Basic” security variant does not allow the disabling of the “Factory Mode,” which is used for servicing the IED by a “Factory” user.
|
NVD-CWE-Other
|
CVE-2021-27426
|
2024-11-21 14:57 |
2022-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 196186 | 5.3 |
MEDIUM
Network |
ge |
multilin_b30_firmware multilin_b90_firmware multilin_c60_firmware multilin_c70_firmware multilin_c95_firmware multilin_d30_firmware multilin_d60_firmware multilin_f35_firmware
GE UR firmware versions prior to version 8.1x shares MODBUS memory map as part of the communications guide. GE was made aware a “Last-key pressed” MODBUS register can be used to gain unauthorized inf…
|
CWE-668
|
Exposure of Resource to Wrong Sphere
CVE-2021-27424
|
2024-11-21 14:57 |
2022-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 196187 | 7.5 |
HIGH
Network |
ge |
multilin_b30_firmware multilin_b90_firmware multilin_c60_firmware multilin_c70_firmware multilin_c95_firmware multilin_d30_firmware multilin_d60_firmware multilin_f35_firmware
GE UR firmware versions prior to version 8.1x web server interface is supported on UR over HTTP protocol. It allows sensitive information exposure without authentication.
|
CWE-319
|
Cleartext Transmission of Sensitive Information
CVE-2021-27422
|
2024-11-21 14:57 |
2022-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 196188 | 5.3 |
MEDIUM
Network |
ge |
multilin_b30_firmware multilin_b90_firmware multilin_c60_firmware multilin_c70_firmware multilin_c95_firmware multilin_d30_firmware multilin_d60_firmware multilin_f35_firmware
GE UR firmware versions prior to version 8.1x web server task does not properly handle receipt of unsupported HTTP verbs, resulting in the web server becoming temporarily unresponsive after receiving…
|
CWE-20
|
Improper Input Validation
CVE-2021-27420
|
2024-11-21 14:57 |
2022-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 196189 | 6.1 |
MEDIUM
Network |
ge |
multilin_b30_firmware multilin_b90_firmware multilin_c60_firmware multilin_c70_firmware multilin_c95_firmware multilin_d30_firmware multilin_d60_firmware multilin_f35_firmware
GE UR firmware versions prior to version 8.1x supports web interface with read-only access. The device fails to properly validate user input, making it possible to perform cross-site scripting attack…
|
CWE-79
|
Cross-site Scripting
CVE-2021-27418
|
2024-11-21 14:57 |
2022-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 196190 | 5.4 |
MEDIUM
Network |
hitachienergy | ellipse_enterprise_asset_management | An attacker could exploit this vulnerability in Hitachi ABB Power Grids Ellipse Enterprise Asset Management (EAM) versions prior to and including 9.0.25 by tricking a user to click on a link containi… |
CWE-79
Cross-site Scripting |
CVE-2021-27416 | 2024-11-21 14:57 | 2022-03-12 | Show | GitHub Exploit DB Packet Storm |