|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
Update Date":June 17, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 258181 | 9.3 | 危険 | アップル アドビシステムズ ターボリナックス レッドハット |
- | Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性 |
CWE-119
バッファエラー |
CVE-2010-2182 | 2010-11-30 14:00 | 2010-06-10 | Show | GitHub Exploit DB Packet Storm |
| 258182 | 9.3 | 危険 | アップル アドビシステムズ ターボリナックス レッドハット |
- | Adobe Flash Player および Adobe AIR における整数オーバーフローの脆弱性 |
CWE-189
数値処理の問題 |
CVE-2010-2181 | 2010-11-30 13:58 | 2010-06-10 | Show | GitHub Exploit DB Packet Storm |
| 258183 | 9.3 | 危険 | アップル アドビシステムズ ターボリナックス レッドハット |
- | Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性 |
CWE-119
バッファエラー |
CVE-2010-2180 | 2010-11-30 13:57 | 2010-06-10 | Show | GitHub Exploit DB Packet Storm |
| 258184 | 4.3 | 警告 | アップル アドビシステムズ ターボリナックス レッドハット |
- | Adobe Flash Player および Adobe AIR におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング(XSS) |
CVE-2010-2179 | 2010-11-30 13:54 | 2010-06-10 | Show | GitHub Exploit DB Packet Storm |
| 258185 | 9.3 | 危険 | アップル アドビシステムズ ターボリナックス レッドハット |
- | Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性 |
CWE-119
バッファエラー |
CVE-2010-2178 | 2010-11-30 13:53 | 2010-06-10 | Show | GitHub Exploit DB Packet Storm |
| 258186 | 9.3 | 危険 | アップル アドビシステムズ ターボリナックス レッドハット |
- | Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性 |
CWE-119
バッファエラー |
CVE-2010-2177 | 2010-11-30 13:52 | 2010-06-10 | Show | GitHub Exploit DB Packet Storm |
| 258187 | 9.3 | 危険 | アップル アドビシステムズ ターボリナックス レッドハット |
- | Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性 |
CWE-119
バッファエラー |
CVE-2010-2176 | 2010-11-30 13:49 | 2010-06-10 | Show | GitHub Exploit DB Packet Storm |
| 258188 | 9.3 | 危険 | アップル アドビシステムズ ターボリナックス レッドハット |
- | Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性 |
CWE-119
バッファエラー |
CVE-2010-2175 | 2010-11-30 13:47 | 2010-06-10 | Show | GitHub Exploit DB Packet Storm |
| 258189 | 7.8 | 危険 | アップル | - | Apple Mac OS X の Networking におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2010-1843 | 2010-11-29 15:53 | 2010-11-16 | Show | GitHub Exploit DB Packet Storm |
| 258190 | 9.3 | 危険 | アップル | - | Apple Mac OS X の AppKit におけるバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2010-1842 | 2010-11-29 15:47 | 2010-11-15 | Show | GitHub Exploit DB Packet Storm |
Update Date:June 17, 2026, 4:19 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 196181 | 7.8 |
HIGH
Local |
beego | beego | An issue was discovered in file profile.go in function MemProf in beego through 2.0.2, allows attackers to launch symlink attacks locally. |
CWE-59
Link Following |
CVE-2021-27116 | 2024-11-21 14:57 | 2022-04-6 | Show | GitHub Exploit DB Packet Storm |
| 196182 | 5.5 |
MEDIUM
Local |
kaspersky |
total_security small_office_security security_cloud endpoint_security anti-virus internet_security |
A denial-of-service issue existed in one of modules that was incorporated in Kaspersky Anti-Virus products for home and Kaspersky Endpoint Security. A local user could cause Windows crash by running … |
NVD-CWE-noinfo
|
CVE-2021-27223 | 2024-11-21 14:57 | 2022-04-2 | Show | GitHub Exploit DB Packet Storm |
| 196183 | 6.8 |
MEDIUM
Physics |
ge | ur_bootloader_binary | GE UR bootloader binary Version 7.00, 7.01 and 7.02 included unused hardcoded credentials. Additionally, a user with physical access to the UR IED can interrupt the boot sequence by rebooting the UR. |
CWE-798
Use of Hard-coded Credentials |
CVE-2021-27430 | 2024-11-21 14:57 | 2022-03-24 | Show | GitHub Exploit DB Packet Storm |
| 196184 | 9.8 |
CRITICAL
Network |
ge |
multilin_b30_firmware multilin_b90_firmware multilin_c60_firmware multilin_c70_firmware multilin_c95_firmware multilin_d30_firmware multilin_d60_firmware multilin_f35_firmware | GE UR IED firmware versions prior to version 8.1x supports upgrading firmware using UR Setup configuration tool – Enervista UR Setup. This UR Setup tool validates the authenticity and integrity of fi… |
CWE-434
Unrestricted Upload of File with Dangerous Type |
CVE-2021-27428 | 2024-11-21 14:57 | 2022-03-24 | Show | GitHub Exploit DB Packet Storm |
| 196185 | 9.8 |
CRITICAL
Network |
ge |
multilin_b30_firmware multilin_b90_firmware multilin_c60_firmware multilin_c70_firmware multilin_c95_firmware multilin_d30_firmware multilin_d60_firmware multilin_f35_firmware | GE UR IED firmware versions prior to version 8.1x with “Basic” security variant does not allow the disabling of the “Factory Mode,” which is used for servicing the IED by a “Factory” user. |
NVD-CWE-Other
|
CVE-2021-27426 | 2024-11-21 14:57 | 2022-03-24 | Show | GitHub Exploit DB Packet Storm |
| 196186 | 5.3 |
MEDIUM
Network |
ge |
multilin_b30_firmware multilin_b90_firmware multilin_c60_firmware multilin_c70_firmware multilin_c95_firmware multilin_d30_firmware multilin_d60_firmware multilin_f35_firmware | GE UR firmware versions prior to version 8.1x shares MODBUS memory map as part of the communications guide. GE was made aware a “Last-key pressed” MODBUS register can be used to gain unauthorized inf… |
CWE-668
Exposure of Resource to Wrong Sphere |
CVE-2021-27424 | 2024-11-21 14:57 | 2022-03-24 | Show | GitHub Exploit DB Packet Storm |
| 196187 | 7.5 |
HIGH
Network |
ge |
multilin_b30_firmware multilin_b90_firmware multilin_c60_firmware multilin_c70_firmware multilin_c95_firmware multilin_d30_firmware multilin_d60_firmware multilin_f35_firmware | GE UR firmware versions prior to version 8.1x web server interface is supported on UR over HTTP protocol. It allows sensitive information exposure without authentication. |
CWE-319
Cleartext Transmission of Sensitive Information |
CVE-2021-27422 | 2024-11-21 14:57 | 2022-03-24 | Show | GitHub Exploit DB Packet Storm |
| 196188 | 5.3 |
MEDIUM
Network |
ge |
multilin_b30_firmware multilin_b90_firmware multilin_c60_firmware multilin_c70_firmware multilin_c95_firmware multilin_d30_firmware multilin_d60_firmware multilin_f35_firmware | GE UR firmware versions prior to version 8.1x web server task does not properly handle receipt of unsupported HTTP verbs, resulting in the web server becoming temporarily unresponsive after receiving… |
CWE-20
Improper Input Validation |
CVE-2021-27420 | 2024-11-21 14:57 | 2022-03-24 | Show | GitHub Exploit DB Packet Storm |
| 196189 | 6.1 |
MEDIUM
Network |
ge |
multilin_b30_firmware multilin_b90_firmware multilin_c60_firmware multilin_c70_firmware multilin_c95_firmware multilin_d30_firmware multilin_d60_firmware multilin_f35_firmware | GE UR firmware versions prior to version 8.1x supports web interface with read-only access. The device fails to properly validate user input, making it possible to perform cross-site scripting attack… |
CWE-79
Cross-site Scripting |
CVE-2021-27418 | 2024-11-21 14:57 | 2022-03-24 | Show | GitHub Exploit DB Packet Storm |
| 196190 | 5.4 |
MEDIUM
Network |
hitachienergy | ellipse_enterprise_asset_management | An attacker could exploit this vulnerability in Hitachi ABB Power Grids Ellipse Enterprise Asset Management (EAM) versions prior to and including 9.0.25 by tricking a user to click on a link containi… |
CWE-79
Cross-site Scripting |
CVE-2021-27416 | 2024-11-21 14:57 | 2022-03-12 | Show | GitHub Exploit DB Packet Storm |