Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 17, 2026, 2:01 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 258171 | 9.3 | 危険 | マイクロソフト | - | Microsoft Word および Microsoft Office における任意のコードを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2010-3215 | 2010-10-26 15:34 | 2010-10-12 | Show | GitHub Exploit DB Packet Storm |
| 258172 | 9.3 | 危険 | マイクロソフト | - | Microsoft Word および Microsoft Office における任意のコードを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2010-2750 | 2010-10-26 15:33 | 2010-10-12 | Show | GitHub Exploit DB Packet Storm |
| 258173 | 9.3 | 危険 | マイクロソフト | - | Microsoft Word および Microsoft Office における任意のコードを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2010-2748 | 2010-10-26 15:33 | 2010-10-12 | Show | GitHub Exploit DB Packet Storm |
| 258174 | 9.3 | 危険 | マイクロソフト | - | Microsoft Word および Microsoft Office における任意のコードを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2010-2747 | 2010-10-26 15:32 | 2010-10-12 | Show | GitHub Exploit DB Packet Storm |
| 258175 | 7.2 | 危険 | マイクロソフト | - | 複数の Microsoft 製品の OpenType Font フォーマットドライバにおける権限を取得される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2010-2741 | 2010-10-26 15:31 | 2010-10-12 | Show | GitHub Exploit DB Packet Storm |
| 258176 | 7.2 | 危険 | マイクロソフト | - | 複数の Microsoft 製品の OpenType Font フォーマットドライバにおける権限を取得される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2010-2740 | 2010-10-26 15:29 | 2010-10-12 | Show | GitHub Exploit DB Packet Storm |
| 258177 | 7.2 | 危険 | マイクロソフト | - | 複数の Microsoft 製品のカーネルモードドライバにおける権限昇格の脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2010-2744 | 2010-10-26 15:28 | 2010-10-12 | Show | GitHub Exploit DB Packet Storm |
| 258178 | 4.9 | 警告 | マイクロソフト | - | 複数の Microsoft 製品のカーネルモードドライバにおける権限昇格の脆弱性 |
CWE-399
リソース管理の問題 |
CVE-2010-2549 | 2010-10-26 15:28 | 2010-10-12 | Show | GitHub Exploit DB Packet Storm |
| 258179 | 6.5 | 警告 | IBM | - | Linux 上で稼働する IBM DB2 におけるバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2010-0462 | 2010-10-26 15:24 | 2010-01-28 | Show | GitHub Exploit DB Packet Storm |
| 258180 | 9.3 | 危険 | マイクロソフト | - | 64-bit プラットフォーム上で稼働している Microsoft .NET Framework の JIT コンパイラにおける任意のコードを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2010-3228 | 2010-10-25 16:37 | 2010-10-12 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 17, 2026, 4:19 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 196181 | 7.8 |
HIGH
Local |
beego | beego | An issue was discovered in file profile.go in function MemProf in beego through 2.0.2, allows attackers to launch symlink attacks locally. |
CWE-59
Link Following |
CVE-2021-27116 | 2024-11-21 14:57 | 2022-04-6 | Show | GitHub Exploit DB Packet Storm |
| 196182 | 5.5 |
MEDIUM
Local |
kaspersky |
total_security small_office_security security_cloud endpoint_security anti-virus internet_security |
A denial-of-service issue existed in one of modules that was incorporated in Kaspersky Anti-Virus products for home and Kaspersky Endpoint Security. A local user could cause Windows crash by running … |
NVD-CWE-noinfo
|
CVE-2021-27223 | 2024-11-21 14:57 | 2022-04-2 | Show | GitHub Exploit DB Packet Storm |
| 196183 | 6.8 |
MEDIUM
Physics |
ge | ur_bootloader_binary | GE UR bootloader binary Version 7.00, 7.01 and 7.02 included unused hardcoded credentials. Additionally, a user with physical access to the UR IED can interrupt the boot sequence by rebooting the UR. |
CWE-798
Use of Hard-coded Credentials |
CVE-2021-27430 | 2024-11-21 14:57 | 2022-03-24 | Show | GitHub Exploit DB Packet Storm |
| 196184 | 9.8 |
CRITICAL
Network |
ge |
multilin_b30_firmware multilin_b90_firmware multilin_c60_firmware multilin_c70_firmware multilin_c95_firmware multilin_d30_firmware multilin_d60_firmware multilin_f35_firmware
GE UR IED firmware versions prior to version 8.1x supports upgrading firmware using UR Setup configuration tool – Enervista UR Setup. This UR Setup tool validates the authenticity and integrity of fi…
|
CWE-434
|
Unrestricted Upload of File with Dangerous Type
CVE-2021-27428
|
2024-11-21 14:57 |
2022-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 196185 | 9.8 |
CRITICAL
Network |
ge |
multilin_b30_firmware multilin_b90_firmware multilin_c60_firmware multilin_c70_firmware multilin_c95_firmware multilin_d30_firmware multilin_d60_firmware multilin_f35_firmware
GE UR IED firmware versions prior to version 8.1x with “Basic” security variant does not allow the disabling of the “Factory Mode,” which is used for servicing the IED by a “Factory” user.
|
NVD-CWE-Other
|
CVE-2021-27426
|
2024-11-21 14:57 |
2022-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 196186 | 5.3 |
MEDIUM
Network |
ge |
multilin_b30_firmware multilin_b90_firmware multilin_c60_firmware multilin_c70_firmware multilin_c95_firmware multilin_d30_firmware multilin_d60_firmware multilin_f35_firmware
GE UR firmware versions prior to version 8.1x shares MODBUS memory map as part of the communications guide. GE was made aware a “Last-key pressed” MODBUS register can be used to gain unauthorized inf…
|
CWE-668
|
Exposure of Resource to Wrong Sphere
CVE-2021-27424
|
2024-11-21 14:57 |
2022-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 196187 | 7.5 |
HIGH
Network |
ge |
multilin_b30_firmware multilin_b90_firmware multilin_c60_firmware multilin_c70_firmware multilin_c95_firmware multilin_d30_firmware multilin_d60_firmware multilin_f35_firmware
GE UR firmware versions prior to version 8.1x web server interface is supported on UR over HTTP protocol. It allows sensitive information exposure without authentication.
|
CWE-319
|
Cleartext Transmission of Sensitive Information
CVE-2021-27422
|
2024-11-21 14:57 |
2022-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 196188 | 5.3 |
MEDIUM
Network |
ge |
multilin_b30_firmware multilin_b90_firmware multilin_c60_firmware multilin_c70_firmware multilin_c95_firmware multilin_d30_firmware multilin_d60_firmware multilin_f35_firmware
GE UR firmware versions prior to version 8.1x web server task does not properly handle receipt of unsupported HTTP verbs, resulting in the web server becoming temporarily unresponsive after receiving…
|
CWE-20
|
Improper Input Validation
CVE-2021-27420
|
2024-11-21 14:57 |
2022-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 196189 | 6.1 |
MEDIUM
Network |
ge |
multilin_b30_firmware multilin_b90_firmware multilin_c60_firmware multilin_c70_firmware multilin_c95_firmware multilin_d30_firmware multilin_d60_firmware multilin_f35_firmware
GE UR firmware versions prior to version 8.1x supports web interface with read-only access. The device fails to properly validate user input, making it possible to perform cross-site scripting attack…
|
CWE-79
|
Cross-site Scripting
CVE-2021-27418
|
2024-11-21 14:57 |
2022-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 196190 | 5.4 |
MEDIUM
Network |
hitachienergy | ellipse_enterprise_asset_management | An attacker could exploit this vulnerability in Hitachi ABB Power Grids Ellipse Enterprise Asset Management (EAM) versions prior to and including 9.0.25 by tricking a user to click on a link containi… |
CWE-79
Cross-site Scripting |
CVE-2021-27416 | 2024-11-21 14:57 | 2022-03-12 | Show | GitHub Exploit DB Packet Storm |