Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 28, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227341	2.3	注意	BlackBerry	-	Research in Motion BlackBerry 7270 におけるフォーマットストリングの脆弱性	-	CVE-2007-3442	2012-12-20 18:19	2007-06-26	Show	GitHub Exploit DB Packet Storm

227342	6.4	警告	snom	-	Snom 320 SIP Phone における任意の電話番号へ発信される脆弱性	-	CVE-2007-3440	2012-12-20 18:19	2007-06-26	Show	GitHub Exploit DB Packet Storm

227343	5	警告	snom	-	Snom 320 SIP Phone における不在着信を読まれる脆弱性	-	CVE-2007-3439	2012-12-20 18:19	2007-06-26	Show	GitHub Exploit DB Packet Storm

227344	9.3	危険	rkd software	-	RKD Software の BarCodeAx.dll におけるスタックベースのバッファオーバーフローの脆弱性	-	CVE-2007-3435	2012-12-20 18:19	2007-06-26	Show	GitHub Exploit DB Packet Storm

227345	7.5	危険	PluXml	-	Pluxml の admin/images.php における任意のコードをアップロードおよび実行される脆弱性	-	CVE-2007-3432	2012-12-20 18:19	2007-06-26	Show	GitHub Exploit DB Packet Storm

227346	6.8	警告	valerio capello	-	Valerio Capello Dagger - The Cutting Edge r23jan2007 の cal.func.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-3431	2012-12-20 18:19	2007-06-26	Show	GitHub Exploit DB Packet Storm

227347	7.5	危険	Simple Invoices	-	Simple Invoices 2007 の index.php における SQL インジェクションの脆弱性	-	CVE-2007-3430	2012-12-20 18:19	2007-06-26	Show	GitHub Exploit DB Packet Storm

227348	7.5	危険	ZoneO-soft	-	phpTrafficA における脆弱性	-	CVE-2007-3428	2012-12-20 18:19	2007-06-26	Show	GitHub Exploit DB Packet Storm

227349	7.5	危険	ZoneO-soft	-	phpTrafficA の index.php における SQL インジェクションの脆弱性	-	CVE-2007-3427	2012-12-20 18:19	2007-06-26	Show	GitHub Exploit DB Packet Storm

227350	4.3	警告	ZoneO-soft	-	phpTrafficA の index.php におけるクロスサイトスクリプティングの脆弱性	-	CVE-2007-3426	2012-12-20 18:19	2007-06-26	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 29, 2026, 4:51 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
197991	9.1	CRITICAL Network	actix	actix-utils	An issue was discovered in the actix-utils crate before 2.0.0 for Rust. The Cell implementation allows obtaining more than one mutable reference to the same data.	CWE-416 Use After Free	CVE-2020-35898	2024-11-21 14:28	2020-12-31	Show	GitHub Exploit DB Packet Storm

197992	9.8	CRITICAL Network	hgiga	msr45_isherlock-user ssr45_isherlock-user	HGiga MailSherlock does not validate specific parameters properly. Attackers can use the vulnerability to launch Command inject attacks remotely and execute arbitrary commands of the system.	CWE-78 OS Command	CVE-2020-35851	2024-11-21 14:28	2020-12-31	Show	GitHub Exploit DB Packet Storm

197993	7.5	HIGH Network	mantisbt	mantisbt	An issue was discovered in MantisBT before 2.24.4. An incorrect access check in bug_revision_view_page.php allows an unprivileged attacker to view the Summary field of private issues, as well as bugn…	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2020-35849	2024-11-21 14:28	2020-12-31	Show	GitHub Exploit DB Packet Storm

197994	6.5	MEDIUM Network	cockpit-project	cockpit	An SSRF issue was discovered in cockpit-project.org Cockpit 234. NOTE: this is unrelated to the Agentejo Cockpit product. NOTE: the vendor states "I don't think [it] is a big real-life issue.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2020-35850	2024-11-21 14:28	2020-12-30	Show	GitHub Exploit DB Packet Storm

197995	9.8	CRITICAL Network	agentejo	cockpit	Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php newpassword function.	CWE-89 SQL Injection	CVE-2020-35848	2024-11-21 14:28	2020-12-30	Show	GitHub Exploit DB Packet Storm

197996	9.8	CRITICAL Network	agentejo	cockpit	Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php resetpassword function.	CWE-89 SQL Injection	CVE-2020-35847	2024-11-21 14:28	2020-12-30	Show	GitHub Exploit DB Packet Storm

197997	9.8	CRITICAL Network	agentejo	cockpit	Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php check function.	CWE-89 SQL Injection	CVE-2020-35846	2024-11-21 14:28	2020-12-30	Show	GitHub Exploit DB Packet Storm

197998	5.4	MEDIUM Network	netgear	d6200_firmware d7000_firmware jnr1010v2_firmware jr6150_firmware jwnr2010v5_firmware r6020_firmware r6050_firmware r6080_firmware r6120_firmware r6220_firmware r6260_fir…	Certain NETGEAR devices are affected by stored XSS. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JNR1010v2 before 1.1.0.62, JR6150 before 1.0.1.24, JWNR2010v5 before 1.1.0.62, R6020 be…	CWE-79 Cross-site Scripting	CVE-2020-35842	2024-11-21 14:28	2020-12-30	Show	GitHub Exploit DB Packet Storm

197999	7.6	HIGH Network	netgear	d6200_firmware d7000_firmware jnr1010v2_firmware jr6150_firmware jwnr2010v5_firmware r6020_firmware r6050_firmware r6080_firmware r6120_firmware r6220_firmware r6260_fir…	Certain NETGEAR devices are affected by stored XSS. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JNR1010v2 before 1.1.0.62, JR6150 before 1.0.1.24, JWNR2010v5 before 1.1.0.62, R6020 be…	CWE-79 Cross-site Scripting	CVE-2020-35841	2024-11-21 14:28	2020-12-30	Show	GitHub Exploit DB Packet Storm

198000	5.4	MEDIUM Network	netgear	d6200_firmware d7000_firmware jnr1010v2_firmware jr6150_firmware jwnr2010v5_firmware r6020_firmware r6050_firmware r6080_firmware r6120_firmware r6220_firmware r6260_fir…	Certain NETGEAR devices are affected by stored XSS. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JNR1010v2 before 1.1.0.62, JR6150 before 1.0.1.24, JWNR2010v5 before 1.1.0.62, R6020 be…	CWE-79 Cross-site Scripting	CVE-2020-35840	2024-11-21 14:28	2020-12-30	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed