Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 31, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 257331 | 6.8 | 警告 | GNU Project XEmacs サイバートラスト株式会社 |
- | Emacs および XEmacs における .flc ファイルの処理に関する任意のコードを実行される脆弱性 |
CWE-DesignError
|
CVE-2008-2142 | 2010-02-2 11:43 | 2008-05-12 | Show | GitHub Exploit DB Packet Storm |
| 257332 | 3.5 | 注意 | Drupal サイバートラスト株式会社 |
- | Drupal の Menu モジュールにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2009-4370 | 2010-02-2 11:43 | 2009-12-16 | Show | GitHub Exploit DB Packet Storm |
| 257333 | 3.5 | 注意 | Drupal サイバートラスト株式会社 |
- | Drupal の Contact モジュールにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2009-4369 | 2010-02-2 11:42 | 2009-12-16 | Show | GitHub Exploit DB Packet Storm |
| 257334 | 7.5 | 危険 | 日立 | - | Cosminexus、Processing Kit for XML および Hitachi Developer's Kit for Java におけるバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
- | 2010-02-2 11:42 | 2009-12-22 | Show | GitHub Exploit DB Packet Storm |
| 257335 | 4.3 | 警告 | VMware | - | 複数の VMware 製品におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2009-3731 | 2010-02-1 11:52 | 2009-12-15 | Show | GitHub Exploit DB Packet Storm |
| 257336 | 10 | 危険 | サイバートラスト株式会社 Linux |
- | Linux kernel および gxsnmp パッケージの asn1 の実装における任意のコードを実行される脆弱性 |
CWE-119
バッファエラー |
CVE-2008-1673 | 2010-02-1 11:51 | 2008-06-10 | Show | GitHub Exploit DB Packet Storm |
| 257337 | 10 | 危険 | ヒューレット・パッカード | - | 複数の Symantec 製品の VRTSweb における任意のコードを実行される脆弱性 |
CWE-287
不適切な認証 |
CVE-2009-3027 | 2010-02-1 11:51 | 2009-12-8 | Show | GitHub Exploit DB Packet Storm |
| 257338 | 9.3 | 危険 | KDE project Glyph & Cog, LLC GNOME Project サイバートラスト株式会社 レッドハット |
- | Xpdf、gpdf および kpdf の FoFiType1::parse 関数における任意のコードを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2009-4035 | 2010-01-29 09:54 | 2009-12-16 | Show | GitHub Exploit DB Packet Storm |
| 257339 | 7.8 | 危険 | Mozilla Foundation | - | Mozilla Firefox/SeaMonkey の GeckoActiveXObject 関数における重要な情報を取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2009-3987 | 2010-01-29 09:54 | 2009-12-15 | Show | GitHub Exploit DB Packet Storm |
| 257340 | 7.6 | 危険 | サイバートラスト株式会社 Mozilla Foundation レッドハット |
- | Mozilla Firefox/SeaMonkey における任意の JavaScript を実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2009-3986 | 2010-01-29 09:54 | 2009-12-15 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 31, 2026, 4:16 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 214811 | 7.8 |
HIGH
Local |
amd |
radeon_software radeon_pro_software |
AMD Radeon Software may be vulnerable to DLL Hijacking through path variable. An unprivileged user may be able to drop its malicious DLL file in any location which is in path environment variable. |
CWE-427
Uncontrolled Search Path Element |
CVE-2020-12891 | 2024-11-21 14:00 | 2022-02-5 | Show | GitHub Exploit DB Packet Storm |
| 214812 | 7.5 |
HIGH
Network |
amd |
ryzen_pro_5650g_firmware ryzen_pro_5650ge_firmware ryzen_pro_5750g_firmware ryzen_pro_5750ge_firmware ryzen_pro_5350g_firmware ryzen_pro_5350ge_firmware ryzen_pro_4750g_firmware … |
When combined with specific software sequences, AMD CPUs may transiently execute non-canonical loads and store using only the lower 48 address bits potentially resulting in data leakage. |
CWE-74
Injection |
CVE-2020-12965 | 2024-11-21 14:00 | 2022-02-5 | Show | GitHub Exploit DB Packet Storm |
| 214813 | 6.7 |
MEDIUM
Local |
amd | amd_generic_encapsulated_software_architecture | Improper handling of pointers in the System Management Mode (SMM) handling code may allow for a privileged attacker with physical or administrative access to potentially manipulate the AMD Generic En… |
NVD-CWE-noinfo
|
CVE-2020-12890 | 2024-11-21 14:00 | 2021-12-11 | Show | GitHub Exploit DB Packet Storm |
| 214814 | 7.8 |
HIGH
Local |
amd |
epyc_7003_firmware epyc_7002_firmware epyc_72f3_firmware epyc_7313_firmware epyc_7313p_firmware epyc_7343_firmware epyc_73f3_firmware epyc_7413_firmware epyc_7443_firmware … |
A potential vulnerability exists in AMD Platform Security Processor (PSP) that may allow an attacker to zero any privileged register on the System Management Network which may lead to bypassing SPI R… |
NVD-CWE-noinfo
|
CVE-2020-12961 | 2024-11-21 14:00 | 2021-11-17 | Show | GitHub Exploit DB Packet Storm |
| 214815 | 5.5 |
MEDIUM
Local |
amd |
epyc_7003_firmware epyc_7002_firmware epyc_7001_firmware epyc_72f3_firmware epyc_7313_firmware epyc_7313p_firmware epyc_7343_firmware epyc_73f3_firmware epyc_7413_firmware … |
A side effect of an integrated chipset option may be able to be used by an attacker to bypass SPI ROM protections, allowing unauthorized SPI ROM modification. |
NVD-CWE-Other
|
CVE-2020-12954 | 2024-11-21 14:00 | 2021-11-17 | Show | GitHub Exploit DB Packet Storm |
| 214816 | 7.0 |
HIGH
Local |
amd |
epyc_7003_firmware epyc_7002_firmware epyc_7001_firmware epyc_72f3_firmware epyc_7313_firmware epyc_7313p_firmware epyc_7343_firmware epyc_73f3_firmware epyc_7413_firmware … |
Race condition in ASP firmware could allow less privileged x86 code to perform ASP SMM (System Management Mode) operations. |
CWE-362
Race Condition |
CVE-2020-12951 | 2024-11-21 14:00 | 2021-11-17 | Show | GitHub Exploit DB Packet Storm |
| 214817 | 7.1 |
HIGH
Local |
amd |
epyc_7f72_firmware epyc_7f52_firmware epyc_7f32_firmware epyc_7h12_firmware epyc_7742_firmware epyc_7702_firmware epyc_7702p_firmware epyc_7662_firmware epyc_7642_firmware … |
Insufficient input validation in ASP firmware for discrete TPM commands could allow a potential loss of integrity and denial of service. |
CWE-20
Improper Input Validation |
CVE-2020-12946 | 2024-11-21 14:00 | 2021-11-17 | Show | GitHub Exploit DB Packet Storm |
| 214818 | 7.8 |
HIGH
Local |
amd |
epyc_7601_firmware epyc_7551p_firmware epyc_7551_firmware epyc_7501_firmware epyc_7451_firmware epyc_7401_firmware epyc_7371_firmware epyc_7351p_firmware epyc_7351_firmware
Insufficient validation of BIOS image length by ASP Firmware could lead to arbitrary code execution.
|
CWE-20
|
Improper Input Validation
CVE-2020-12944
|
2024-11-21 14:00 |
2021-11-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 214819 | 7.8 |
HIGH
Local |
amd | radeon_software | Escape call interface in the AMD Graphics Driver for Windows may cause privilege escalation. |
NVD-CWE-noinfo
|
CVE-2020-12962 | 2024-11-21 14:00 | 2021-11-16 | Show | GitHub Exploit DB Packet Storm |
| 214820 | 5.5 |
MEDIUM
Local |
amd | radeon_software | AMD Graphics Driver for Windows 10, amdfender.sys may improperly handle input validation on InputBuffer which may result in a denial of service (DoS). |
CWE-20
Improper Input Validation |
CVE-2020-12960 | 2024-11-21 14:00 | 2021-11-16 | Show | GitHub Exploit DB Packet Storm |