Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 25, 2026, 12:01 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 248981 | 6.9 | 警告 | blender | - | Blender における詳細不明な脆弱性 |
CWE-59
リンク解釈の問題 |
CVE-2008-1103 | 2012-06-26 15:55 | 2008-04-28 | Show | GitHub Exploit DB Packet Storm |
| 248982 | 6.8 | 警告 | blender | - | Blender の imb_loadhdr 関数におけるスタックベースのバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2008-1102 | 2012-06-26 15:55 | 2008-04-22 | Show | GitHub Exploit DB Packet Storm |
| 248983 | 7.5 | 危険 | beehive software | - | Beehive Software SendFile.NET の outboxWriteUnsent 関数における権限を取得される脆弱性 |
CWE-DesignError
|
CVE-2008-1079 | 2012-06-26 15:55 | 2008-03-4 | Show | GitHub Exploit DB Packet Storm |
| 248984 | 7.2 | 危険 | Gentoo Linux rPath, Inc |
- | am-utils および net-fs パッケージの expn における任意のファイルを上書きされる脆弱性 |
CWE-59
リンク解釈の問題 |
CVE-2008-1078 | 2012-06-26 15:55 | 2008-02-28 | Show | GitHub Exploit DB Packet Storm |
| 248985 | 6.8 | 警告 | group e | - | GROUP-E の lib/head_auth.php における PHP リモートファイルインクルージョンの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2008-1074 | 2012-06-26 15:55 | 2008-02-28 | Show | GitHub Exploit DB Packet Storm |
| 248986 | 4.3 | 警告 | Alkacon Software | - | Alkacon OpenCMS の file tree navigation 関数におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2008-1045 | 2012-06-26 15:55 | 2008-02-27 | Show | GitHub Exploit DB Packet Storm |
| 248987 | 6.8 | 警告 | DrBenHur | - | DBHcms の mod/mod.extmanager.php における PHP リモートファイルインクルージョンの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2008-1038 | 2012-06-26 15:55 | 2008-02-27 | Show | GitHub Exploit DB Packet Storm |
| 248988 | 4.3 | 警告 | アップル | - | Apple AirPort Extreme Base Station Firmware におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2008-1012 | 2012-06-26 15:55 | 2008-03-19 | Show | GitHub Exploit DB Packet Storm |
| 248989 | 5 | 警告 | ヒューレット・パッカード double-take software |
- | HP StorageWorks Storage Mirroring などの製品名で提供されている Double-Take におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-399
リソース管理の問題 |
CVE-2008-0979 | 2012-06-26 15:55 | 2008-02-25 | Show | GitHub Exploit DB Packet Storm |
| 248990 | 5 | 警告 | double-take software | - | HP StorageWorks Storage Mirroring などの製品名で提供されている Double-Take におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-200
情報漏えい |
CVE-2008-0978 | 2012-06-26 15:55 | 2008-02-25 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 25, 2026, 4:04 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 196181 | 7.8 |
HIGH
Local |
beego | beego | An issue was discovered in file profile.go in function MemProf in beego through 2.0.2, allows attackers to launch symlink attacks locally. |
CWE-59
Link Following |
CVE-2021-27116 | 2024-11-21 14:57 | 2022-04-6 | Show | GitHub Exploit DB Packet Storm |
| 196182 | 5.5 |
MEDIUM
Local |
kaspersky |
total_security small_office_security security_cloud endpoint_security anti-virus internet_security |
A denial-of-service issue existed in one of modules that was incorporated in Kaspersky Anti-Virus products for home and Kaspersky Endpoint Security. A local user could cause Windows crash by running … |
NVD-CWE-noinfo
|
CVE-2021-27223 | 2024-11-21 14:57 | 2022-04-2 | Show | GitHub Exploit DB Packet Storm |
| 196183 | 6.8 |
MEDIUM
Physics |
ge | ur_bootloader_binary | GE UR bootloader binary Version 7.00, 7.01 and 7.02 included unused hardcoded credentials. Additionally, a user with physical access to the UR IED can interrupt the boot sequence by rebooting the UR. |
CWE-798
Use of Hard-coded Credentials |
CVE-2021-27430 | 2024-11-21 14:57 | 2022-03-24 | Show | GitHub Exploit DB Packet Storm |
| 196184 | 9.8 |
CRITICAL
Network |
ge |
multilin_b30_firmware multilin_b90_firmware multilin_c60_firmware multilin_c70_firmware multilin_c95_firmware multilin_d30_firmware multilin_d60_firmware multilin_f35_firmware
GE UR IED firmware versions prior to version 8.1x supports upgrading firmware using UR Setup configuration tool – Enervista UR Setup. This UR Setup tool validates the authenticity and integrity of fi…
|
CWE-434
|
Unrestricted Upload of File with Dangerous Type
CVE-2021-27428
|
2024-11-21 14:57 |
2022-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 196185 | 9.8 |
CRITICAL
Network |
ge |
multilin_b30_firmware multilin_b90_firmware multilin_c60_firmware multilin_c70_firmware multilin_c95_firmware multilin_d30_firmware multilin_d60_firmware multilin_f35_firmware
GE UR IED firmware versions prior to version 8.1x with “Basic” security variant does not allow the disabling of the “Factory Mode,” which is used for servicing the IED by a “Factory” user.
|
NVD-CWE-Other
|
CVE-2021-27426
|
2024-11-21 14:57 |
2022-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 196186 | 5.3 |
MEDIUM
Network |
ge |
multilin_b30_firmware multilin_b90_firmware multilin_c60_firmware multilin_c70_firmware multilin_c95_firmware multilin_d30_firmware multilin_d60_firmware multilin_f35_firmware
GE UR firmware versions prior to version 8.1x shares MODBUS memory map as part of the communications guide. GE was made aware a “Last-key pressed” MODBUS register can be used to gain unauthorized inf…
|
CWE-668
|
Exposure of Resource to Wrong Sphere
CVE-2021-27424
|
2024-11-21 14:57 |
2022-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 196187 | 7.5 |
HIGH
Network |
ge |
multilin_b30_firmware multilin_b90_firmware multilin_c60_firmware multilin_c70_firmware multilin_c95_firmware multilin_d30_firmware multilin_d60_firmware multilin_f35_firmware
GE UR firmware versions prior to version 8.1x web server interface is supported on UR over HTTP protocol. It allows sensitive information exposure without authentication.
|
CWE-319
|
Cleartext Transmission of Sensitive Information
CVE-2021-27422
|
2024-11-21 14:57 |
2022-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 196188 | 5.3 |
MEDIUM
Network |
ge |
multilin_b30_firmware multilin_b90_firmware multilin_c60_firmware multilin_c70_firmware multilin_c95_firmware multilin_d30_firmware multilin_d60_firmware multilin_f35_firmware
GE UR firmware versions prior to version 8.1x web server task does not properly handle receipt of unsupported HTTP verbs, resulting in the web server becoming temporarily unresponsive after receiving…
|
CWE-20
|
Improper Input Validation
CVE-2021-27420
|
2024-11-21 14:57 |
2022-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 196189 | 6.1 |
MEDIUM
Network |
ge |
multilin_b30_firmware multilin_b90_firmware multilin_c60_firmware multilin_c70_firmware multilin_c95_firmware multilin_d30_firmware multilin_d60_firmware multilin_f35_firmware
GE UR firmware versions prior to version 8.1x supports web interface with read-only access. The device fails to properly validate user input, making it possible to perform cross-site scripting attack…
|
CWE-79
|
Cross-site Scripting
CVE-2021-27418
|
2024-11-21 14:57 |
2022-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 196190 | 5.4 |
MEDIUM
Network |
hitachienergy | ellipse_enterprise_asset_management | An attacker could exploit this vulnerability in Hitachi ABB Power Grids Ellipse Enterprise Asset Management (EAM) versions prior to and including 9.0.25 by tricking a user to click on a link containi… |
CWE-79
Cross-site Scripting |
CVE-2021-27416 | 2024-11-21 14:57 | 2022-03-12 | Show | GitHub Exploit DB Packet Storm |