Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 22, 2026, 4 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 259671 | 6.9 | 警告 | レッドハット | - | RHEL の Linux kernel 用の特定のレッドハットパッチにおける権限昇格の脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2010-0729 | 2010-05-25 16:05 | 2010-03-16 | Show | GitHub Exploit DB Packet Storm |
| 259672 | 4 | 警告 | IBM | - | IBM DB2 の REPEAT 関数におけるバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2010-1560 | 2010-05-24 18:34 | 2010-04-27 | Show | GitHub Exploit DB Packet Storm |
| 259673 | 4 | 警告 | サン・マイクロシステムズ | - | Sun Solaris における lx ブランドゾーンに関するサービス運用妨害 (DoS) の脆弱性 |
CWE-noinfo
情報不足 |
CVE-2009-4774 | 2010-05-24 18:33 | 2009-09-9 | Show | GitHub Exploit DB Packet Storm |
| 259674 | 6.9 | 警告 | サイバートラスト株式会社 Todd C. Miller ターボリナックス レッドハット |
- | sudo における権限昇格の脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2010-0426 | 2010-05-21 18:23 | 2010-02-24 | Show | GitHub Exploit DB Packet Storm |
| 259675 | 7.1 | 危険 | サイバートラスト株式会社 Linux レッドハット |
- | Linux kernel の ext4_fill_flex_info 関数におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-189
数値処理の問題 |
CVE-2009-4307 | 2010-05-21 18:22 | 2009-12-13 | Show | GitHub Exploit DB Packet Storm |
| 259676 | 7.1 | 危険 | サイバートラスト株式会社 Linux レッドハット |
- | Linux kernel の mac80211 サブシステムにおけるサービス運用妨害 (DoS) の脆弱性 |
CWE-362
競合状態 |
CVE-2009-4027 | 2010-05-21 18:22 | 2009-12-2 | Show | GitHub Exploit DB Packet Storm |
| 259677 | 5 | 警告 | レッドハット | - | Linux SCSI target framework および iSCSI Enterprise Target におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-134
書式文字列の問題 |
CVE-2010-0743 | 2010-05-21 16:13 | 2010-04-8 | Show | GitHub Exploit DB Packet Storm |
| 259678 | 7.5 | 危険 | サイバートラスト株式会社 Wireshark レッドハット |
- | Wireshark の LWRES 解析部におけるバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2010-0304 | 2010-05-21 16:13 | 2010-01-27 | Show | GitHub Exploit DB Packet Storm |
| 259679 | 4.3 | 警告 | サイバートラスト株式会社 Wireshark レッドハット |
- | Wireshark の SMB および SMB2 解析部におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-noinfo
情報不足 |
CVE-2009-4377 | 2010-05-21 16:13 | 2009-12-17 | Show | GitHub Exploit DB Packet Storm |
| 259680 | 4.3 | 警告 | サイバートラスト株式会社 Wireshark レッドハット |
- | Wireshark の DCERPC/NT 解析部におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-noinfo
情報不足 |
CVE-2009-3550 | 2010-05-21 16:12 | 2009-10-26 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 22, 2026, 4 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 196181 | 7.8 |
HIGH
Local |
beego | beego | An issue was discovered in file profile.go in function MemProf in beego through 2.0.2, allows attackers to launch symlink attacks locally. |
CWE-59
Link Following |
CVE-2021-27116 | 2024-11-21 14:57 | 2022-04-6 | Show | GitHub Exploit DB Packet Storm |
| 196182 | 5.5 |
MEDIUM
Local |
kaspersky |
total_security small_office_security security_cloud endpoint_security anti-virus internet_security |
A denial-of-service issue existed in one of modules that was incorporated in Kaspersky Anti-Virus products for home and Kaspersky Endpoint Security. A local user could cause Windows crash by running … |
NVD-CWE-noinfo
|
CVE-2021-27223 | 2024-11-21 14:57 | 2022-04-2 | Show | GitHub Exploit DB Packet Storm |
| 196183 | 6.8 |
MEDIUM
Physics |
ge | ur_bootloader_binary | GE UR bootloader binary Version 7.00, 7.01 and 7.02 included unused hardcoded credentials. Additionally, a user with physical access to the UR IED can interrupt the boot sequence by rebooting the UR. |
CWE-798
Use of Hard-coded Credentials |
CVE-2021-27430 | 2024-11-21 14:57 | 2022-03-24 | Show | GitHub Exploit DB Packet Storm |
| 196184 | 9.8 |
CRITICAL
Network |
ge |
multilin_b30_firmware multilin_b90_firmware multilin_c60_firmware multilin_c70_firmware multilin_c95_firmware multilin_d30_firmware multilin_d60_firmware multilin_f35_firmware
GE UR IED firmware versions prior to version 8.1x supports upgrading firmware using UR Setup configuration tool – Enervista UR Setup. This UR Setup tool validates the authenticity and integrity of fi…
|
CWE-434
|
Unrestricted Upload of File with Dangerous Type
CVE-2021-27428
|
2024-11-21 14:57 |
2022-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 196185 | 9.8 |
CRITICAL
Network |
ge |
multilin_b30_firmware multilin_b90_firmware multilin_c60_firmware multilin_c70_firmware multilin_c95_firmware multilin_d30_firmware multilin_d60_firmware multilin_f35_firmware
GE UR IED firmware versions prior to version 8.1x with “Basic” security variant does not allow the disabling of the “Factory Mode,” which is used for servicing the IED by a “Factory” user.
|
NVD-CWE-Other
|
CVE-2021-27426
|
2024-11-21 14:57 |
2022-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 196186 | 5.3 |
MEDIUM
Network |
ge |
multilin_b30_firmware multilin_b90_firmware multilin_c60_firmware multilin_c70_firmware multilin_c95_firmware multilin_d30_firmware multilin_d60_firmware multilin_f35_firmware
GE UR firmware versions prior to version 8.1x shares MODBUS memory map as part of the communications guide. GE was made aware a “Last-key pressed” MODBUS register can be used to gain unauthorized inf…
|
CWE-668
|
Exposure of Resource to Wrong Sphere
CVE-2021-27424
|
2024-11-21 14:57 |
2022-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 196187 | 7.5 |
HIGH
Network |
ge |
multilin_b30_firmware multilin_b90_firmware multilin_c60_firmware multilin_c70_firmware multilin_c95_firmware multilin_d30_firmware multilin_d60_firmware multilin_f35_firmware
GE UR firmware versions prior to version 8.1x web server interface is supported on UR over HTTP protocol. It allows sensitive information exposure without authentication.
|
CWE-319
|
Cleartext Transmission of Sensitive Information
CVE-2021-27422
|
2024-11-21 14:57 |
2022-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 196188 | 5.3 |
MEDIUM
Network |
ge |
multilin_b30_firmware multilin_b90_firmware multilin_c60_firmware multilin_c70_firmware multilin_c95_firmware multilin_d30_firmware multilin_d60_firmware multilin_f35_firmware
GE UR firmware versions prior to version 8.1x web server task does not properly handle receipt of unsupported HTTP verbs, resulting in the web server becoming temporarily unresponsive after receiving…
|
CWE-20
|
Improper Input Validation
CVE-2021-27420
|
2024-11-21 14:57 |
2022-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 196189 | 6.1 |
MEDIUM
Network |
ge |
multilin_b30_firmware multilin_b90_firmware multilin_c60_firmware multilin_c70_firmware multilin_c95_firmware multilin_d30_firmware multilin_d60_firmware multilin_f35_firmware
GE UR firmware versions prior to version 8.1x supports web interface with read-only access. The device fails to properly validate user input, making it possible to perform cross-site scripting attack…
|
CWE-79
|
Cross-site Scripting
CVE-2021-27418
|
2024-11-21 14:57 |
2022-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 196190 | 5.4 |
MEDIUM
Network |
hitachienergy | ellipse_enterprise_asset_management | An attacker could exploit this vulnerability in Hitachi ABB Power Grids Ellipse Enterprise Asset Management (EAM) versions prior to and including 9.0.25 by tricking a user to click on a link containi… |
CWE-79
Cross-site Scripting |
CVE-2021-27416 | 2024-11-21 14:57 | 2022-03-12 | Show | GitHub Exploit DB Packet Storm |