Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 29, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 232521 | 7.5 | 危険 | WordPress.org | - | WordPress の wp-login.php におけるデータベースの最初のユーザパスワードを強制的にリセットされる脆弱性 |
CWE-255
証明書・パスワード管理 |
CVE-2009-2762 | 2012-12-20 19:10 | 2009-08-12 | Show | GitHub Exploit DB Packet Storm |
| 232522 | 5.5 | 警告 | Roundup | - | Roundup の cgi/actions.py におけるクラス内の任意の項目を変更される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2009-2737 | 2012-12-20 19:10 | 2009-08-11 | Show | GitHub Exploit DB Packet Storm |
| 232523 | 6.5 | 警告 | sun-jester | - | sun-jester OpenNews の admin.php における任意の PHP コードを挿入される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2009-2736 | 2012-12-20 19:10 | 2009-08-11 | Show | GitHub Exploit DB Packet Storm |
| 232524 | 6.8 | 警告 | sun-jester | - | sun-jester OpenNews の admin.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2009-2735 | 2012-12-20 19:10 | 2009-08-11 | Show | GitHub Exploit DB Packet Storm |
| 232525 | 5 | 警告 | サン・マイクロシステムズ | - | Sun Java SE の Swing 実装におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-noinfo
情報不足 |
CVE-2009-2720 | 2012-12-20 19:10 | 2009-08-10 | Show | GitHub Exploit DB Packet Storm |
| 232526 | 5 | 警告 | サン・マイクロシステムズ | - | Sun Java SE の Java Web Start 実装におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-119
バッファエラー |
CVE-2009-2719 | 2012-12-20 19:10 | 2009-08-10 | Show | GitHub Exploit DB Packet Storm |
| 232527 | 6.8 | 警告 | サン・マイクロシステムズ | - | Sun Java SE の AWT 実装におけるユーザに信頼されないアプレットと保護されない通信をさせる脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2009-2718 | 2012-12-20 19:10 | 2009-08-10 | Show | GitHub Exploit DB Packet Storm |
| 232528 | 6.8 | 警告 | サン・マイクロシステムズ | - | Windows 上で稼動している Sun Java SE の AWT 実装におけるユーザに信頼されないアプレットと保護されない通信をさせる脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2009-2717 | 2012-12-20 19:10 | 2009-08-10 | Show | GitHub Exploit DB Packet Storm |
| 232529 | 7.5 | 危険 | サン・マイクロシステムズ | - | Sun Java SE のプラグイン機能における "古い zip および証明書処理" の脆弱性を悪用される脆弱性 |
CWE-noinfo
情報不足 |
CVE-2009-2716 | 2012-12-20 19:10 | 2009-08-10 | Show | GitHub Exploit DB Packet Storm |
| 232530 | 4.9 | 警告 | サン・マイクロシステムズ | - | Sun VirtualBox におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2009-2715 | 2012-12-20 19:10 | 2009-08-7 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 30, 2026, 4:22 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 199081 | 5.5 |
MEDIUM
Local |
amd |
epyc_7763_firmware epyc_7713p_firmware epyc_7713_firmware epyc_7663_firmware epyc_7643_firmware epyc_75f3_firmware epyc_7543p_firmware epyc_7543_firmware epyc_7513_firmware
Failure to flush the Translation Lookaside Buffer (TLB) of the I/O memory management unit (IOMMU) may lead an IO device to write to memory it should not be able to access, resulting in a potential lo…
|
NVD-CWE-noinfo
|
CVE-2021-26348
|
2024-11-21 14:56 |
2022-05-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 199082 | 4.7 |
MEDIUM
Local |
amd |
epyc_7763_firmware epyc_7713p_firmware epyc_7713_firmware epyc_7663_firmware epyc_7643_firmware epyc_75f3_firmware epyc_7543p_firmware epyc_7543_firmware epyc_7513_firmware
Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an integer overflow in the L2 directory table in SPI flash resulting in a potential…
|
CWE-1284
|
Improper Validation of Specified Quantity in Input
CVE-2021-26347
|
2024-11-21 14:56 |
2022-05-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 199083 | 3.3 |
LOW
Local |
amd |
epyc_7763_firmware epyc_7713p_firmware epyc_7713_firmware epyc_7663_firmware epyc_7643_firmware epyc_75f3_firmware epyc_7543p_firmware epyc_7543_firmware epyc_7513_firmware
In SEV guest VMs, the CPU may fail to flush the Translation Lookaside Buffer (TLB) following a particular sequence of operations that includes creation of a new virtual machine control block (VMCB). …
|
NVD-CWE-noinfo
|
CVE-2021-26342
|
2024-11-21 14:56 |
2022-05-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 199084 | 5.5 |
MEDIUM
Local |
amd |
epyc_7763_firmware epyc_7713p_firmware epyc_7713_firmware epyc_7663_firmware epyc_7643_firmware epyc_75f3_firmware epyc_7543p_firmware epyc_7543_firmware epyc_7513_firmware
A bug in AMD CPU’s core logic may allow for an attacker, using specific code from an unprivileged VM, to trigger a CPU core hang resulting in a potential denial of service. AMD believes the specific …
|
NVD-CWE-noinfo
|
CVE-2021-26339
|
2024-11-21 14:56 |
2022-05-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 199085 | 7.1 |
HIGH
Local |
amd |
epyc_7002_firmware epyc_7001_firmware epyc_7232p_firmware epyc_7252_firmware epyc_7262_firmware epyc_7272_firmware epyc_7282_firmware epyc_7302_firmware epyc_7302p_firmware
Insufficient validation of elliptic curve points in SEV-legacy firmware may compromise SEV-legacy guest migration potentially resulting in loss of guest's integrity or confidentiality.
|
NVD-CWE-noinfo
|
CVE-2021-26408
|
2024-11-21 14:56 |
2022-05-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 199086 | 6.2 |
MEDIUM
Local |
amd |
ryzen_5_2600_firmware ryzen_5_2600x_firmware ryzen_5_2700x_firmware ryzen_5_2700_firmware ryzen_5_3600_firmware ryzen_5_3600x_firmware ryzen_7_3700x_firmware ryzen_7_3800x_firmwa… |
A malicious or compromised UApp or ABL may coerce the bootloader into corrupting arbitrary memory potentially leading to loss of integrity of data. |
NVD-CWE-noinfo
|
CVE-2021-26390 | 2024-11-21 14:56 | 2022-05-11 | Show | GitHub Exploit DB Packet Storm |
| 199087 | 7.1 |
HIGH
Local |
amd |
epyc_7763_firmware epyc_7713p_firmware epyc_7713_firmware epyc_7663_firmware epyc_7643_firmware epyc_75f3_firmware epyc_7543p_firmware epyc_7543_firmware epyc_7513_firmware
Improper validation of destination address in SVC_LOAD_FW_IMAGE_BY_INSTANCE and SVC_LOAD_BINARY_BY_ATTRIB in a malicious UApp or ABL may allow an attacker to overwrite arbitrary bootloader memory wit…
|
CWE-20
|
Improper Input Validation
CVE-2021-26370
|
2024-11-21 14:56 |
2022-05-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 199088 | 7.8 |
HIGH
Local |
amd |
epyc_7763_firmware epyc_7713p_firmware epyc_7713_firmware epyc_7663_firmware epyc_7643_firmware epyc_75f3_firmware epyc_7543p_firmware epyc_7543_firmware epyc_7513_firmware
Failure to validate inputs in SMM may allow an attacker to create a mishandled error leaving the DRTM UApp in a partially initialized state potentially resulting in loss of memory integrity.
|
CWE-665
|
Improper Initialization
CVE-2021-26353
|
2024-11-21 14:56 |
2022-05-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 199089 | 5.5 |
MEDIUM
Local |
amd |
ryzen_5_2600_firmware ryzen_5_2600x_firmware ryzen_5_2700x_firmware ryzen_5_2700_firmware ryzen_5_3600_firmware ryzen_5_3600x_firmware ryzen_7_3700x_firmware ryzen_7_3800x_firmwa… |
Insufficient bound checks in System Management Unit (SMU) PCIe Hot Plug table may result in access/updates from/to invalid address space that could result in denial of service. |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2021-26352 | 2024-11-21 14:56 | 2022-05-11 | Show | GitHub Exploit DB Packet Storm |
| 199090 | 7.1 |
HIGH
Local |
amd |
epyc_7763_firmware epyc_7713p_firmware epyc_7713_firmware epyc_7663_firmware epyc_7643_firmware epyc_75f3_firmware epyc_7543p_firmware epyc_7543_firmware epyc_7513_firmware
Failure to verify SEV-ES TMR is not in MMIO space, SEV-ES FW could result in a potential loss of integrity or availability.
|
NVD-CWE-noinfo
|
CVE-2021-26332
|
2024-11-21 14:56 |
2022-05-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|