Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":Feb. 9, 2026, 12:59 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 224411 | 6.5 | 警告 | rianxosencabos cms | - | Rianxosencabos CMS の Admin Control Panel におけるユーザの権限を変更される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2008-4245 | 2012-12-20 18:52 | 2008-09-25 | Show | GitHub Exploit DB Packet Storm |
| 224412 | 7.5 | 危険 | webcms | - | webCMS Portal Edition の index.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-4185 | 2012-12-20 18:52 | 2008-09-23 | Show | GitHub Exploit DB Packet Storm |
| 224413 | 4.3 | 警告 | webcms | - | webCMS Portal Edition の index.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2008-4184 | 2012-12-20 18:52 | 2008-09-23 | Show | GitHub Exploit DB Packet Storm |
| 224414 | 7.5 | 危険 | PreProject.com | - | Pre Real Estate Listings の search.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-4177 | 2012-12-20 18:52 | 2008-09-23 | Show | GitHub Exploit DB Packet Storm |
| 224415 | 7.5 | 危険 | proarcadescript | - | ProArcadeScript における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-4173 | 2012-12-20 18:52 | 2008-09-22 | Show | GitHub Exploit DB Packet Storm |
| 224416 | 7.5 | 危険 | rfaah | - | Cars & Vehicle の page.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-4172 | 2012-12-20 18:52 | 2008-09-22 | Show | GitHub Exploit DB Packet Storm |
| 224417 | 4.3 | 警告 | pro2col | - | Pro2col Stingray FTS の verify_login.jsp におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2008-4168 | 2012-12-20 18:52 | 2008-09-22 | Show | GitHub Exploit DB Packet Storm |
| 224418 | 7.5 | 危険 | zanfi solutions | - | Zanfi CMS lite および Jaw Portal の index.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-4159 | 2012-12-20 18:52 | 2008-09-22 | Show | GitHub Exploit DB Packet Storm |
| 224419 | 6.8 | 警告 | zanfi solutions | - | Zanfi CMS lite の index.php におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2008-4158 | 2012-12-20 18:52 | 2008-09-22 | Show | GitHub Exploit DB Packet Storm |
| 224420 | 7.5 | 危険 | Vastal I-Tech & Co. | - | Vastal I-Tech phpVID の groups.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-4157 | 2012-12-20 18:52 | 2008-09-22 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:April 21, 2026, 4:10 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1801 | 6.5 |
MEDIUM
Adjacent |
samsung arista siemens |
galaxy_i9305_firmware c-250_firmware c-260_firmware c-230_firmware c-235_firmware c-200_firmware c-120_firmware c-130_firmware c-100_firmware c-110_firmware o-105_firmwa… |
Se detectó un problema en los dispositivos Samsung Galaxy S3 i9305 versión 4.4.4. Las implementaciones WEP, WPA, WPA2 y WPA3 aceptan tramas A-MSDU de texto plano siempre que los primeros 8 bytes corr… |
CWE-20
Improper Input Validation |
CVE-2020-26144 | 2026-04-14 18:16 | 2021-05-12 | Show | GitHub Exploit DB Packet Storm |
| 1802 | 6.5 |
MEDIUM
Adjacent |
alfa arista siemens |
awus036h_firmware c-75_firmware o-90_firmware c-65_firmware w-68_firmware scalance_w700_ieee_802.11n_firmware |
An issue was discovered in the ALFA Windows 10 driver 1030.36.604 for AWUS036ACH. The WEP, WPA, WPA2, and WPA3 implementations accept fragmented plaintext frames in a protected Wi-Fi network. An adve… |
CWE-20
Improper Input Validation |
CVE-2020-26143 | 2026-04-14 18:16 | 2021-05-12 | Show | GitHub Exploit DB Packet Storm |
| 1803 | 6.5 |
MEDIUM
Adjacent |
alfa arista siemens |
awus036h_firmware c-75_firmware o-90_firmware c-65_firmware w-68_firmware scalance_w700_ieee_802.11n_firmware |
Se detectó un problema en el controlador ALFA Windows 10 versión 1030.36.604 para AWUS036ACH. Las implementaciones WEP, WPA, WPA2 y WPA3 aceptan tramas de texto plano fragmentados en una red Wi-Fi pr… |
CWE-20
Improper Input Validation |
CVE-2020-26143 | 2026-04-14 18:16 | 2021-05-12 | Show | GitHub Exploit DB Packet Storm |
| 1804 | 6.5 |
MEDIUM
Adjacent |
alfa cisco siemens |
awus036h_firmware meraki_gr10_firmware meraki_gr60_firmware meraki_mr20_firmware meraki_mr30h_firmware meraki_mr33_firmware meraki_mr36_firmware meraki_mr42_firmware meraki_mr… |
An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The Wi-Fi implementation does not verify the Message Integrity Check (authenticity) of fragmented TKIP frames. An adver… |
CWE-354
Improper Validation of Integrity Check Value |
CVE-2020-26141 | 2026-04-14 18:16 | 2021-05-12 | Show | GitHub Exploit DB Packet Storm |
| 1805 | 6.5 |
MEDIUM
Adjacent |
alfa cisco siemens |
awus036h_firmware meraki_gr10_firmware meraki_gr60_firmware meraki_mr20_firmware meraki_mr30h_firmware meraki_mr33_firmware meraki_mr36_firmware meraki_mr42_firmware meraki_mr… |
Se detectó un problema en el controlador ALFA de Windows 10 versión 6.1316.1209 para AWUS036H. La implementación de Wi-Fi no verifica la Comprobación de Integridad del Mensaje (autenticidad) de las t… |
CWE-354
Improper Validation of Integrity Check Value |
CVE-2020-26141 | 2026-04-14 18:16 | 2021-05-12 | Show | GitHub Exploit DB Packet Storm |
| 1806 | 6.5 |
MEDIUM
Adjacent |
alfa siemens arista cisco intel |
awus036h_firmware scalance_w1748-1_firmware scalance_w1750d_firmware scalance_w1788-1_firmware scalance_w1788-2_firmware scalance_w1788-2ia_firmware scalance_w721-1_firmware scal… |
An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext frames in a protected Wi-Fi network. An adversary can abu… |
CWE-327
Use of a Broken or Risky Cryptographic Algorithm |
CVE-2020-26140 | 2026-04-14 18:16 | 2021-05-12 | Show | GitHub Exploit DB Packet Storm |
| 1807 | 6.5 |
MEDIUM
Adjacent |
alfa siemens arista cisco intel |
awus036h_firmware scalance_w1748-1_firmware scalance_w1750d_firmware scalance_w1788-1_firmware scalance_w1788-2_firmware scalance_w1788-2ia_firmware scalance_w721-1_firmware scal… |
Se detectó un problema en el controlador ALFA de Windows 10 versión 6.1316.1209 para AWUS036H. Las implementaciones WEP, WPA, WPA2 y WPA3 aceptan tramas de texto plano en una red Wi-Fi protegida. Un … |
CWE-327
Use of a Broken or Risky Cryptographic Algorithm |
CVE-2020-26140 | 2026-04-14 18:16 | 2021-05-12 | Show | GitHub Exploit DB Packet Storm |
| 1808 | 5.3 |
MEDIUM
Adjacent |
netbsd debian arista cisco intel |
netbsd debian_linux c-100_firmware c-110_firmware c-120_firmware c-130_firmware c-200_firmware c-230_firmware c-235_firmware c-250_firmware c-260_firmware c-65_firmwa… |
An issue was discovered in the kernel in NetBSD 7.1. An Access Point (AP) forwards EAPOL frames to other clients even though the sender has not yet successfully authenticated to the AP. This might be… |
CWE-287
Improper Authentication |
CVE-2020-26139 | 2026-04-14 18:16 | 2021-05-12 | Show | GitHub Exploit DB Packet Storm |
| 1809 | 5.3 |
MEDIUM
Adjacent |
netbsd debian arista cisco intel |
netbsd debian_linux c-100_firmware c-110_firmware c-120_firmware c-130_firmware c-200_firmware c-230_firmware c-235_firmware c-250_firmware c-260_firmware c-65_firmwa… |
Se detectó un problema en el kernel en NetBSD versión 7.1. Un punto de acceso (AP) reenvía tramas EAPOL a otros clientes aunque el remitente aún no se haya autenticado con éxito en el AP. Esto podría… |
CWE-287
Improper Authentication |
CVE-2020-26139 | 2026-04-14 18:16 | 2021-05-12 | Show | GitHub Exploit DB Packet Storm |
| 1810 | 3.5 |
LOW
Adjacent |
ieee linux microsoft debian siemens arista cisco intel |
ieee_802.11 mac80211 windows_10 windows_7 windows_8.1 windows_rt_8.1 windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 debian_linux scal… |
The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that the A-MSDU flag in the plaintext QoS header field is authentica… |
CWE-327
Use of a Broken or Risky Cryptographic Algorithm |
CVE-2020-24588 | 2026-04-14 18:16 | 2021-05-12 | Show | GitHub Exploit DB Packet Storm |