Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228111 6.8 警告 xlightftpd - Xlight FTP Server における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4795 2012-12-20 19:28 2010-04-22 Show GitHub Exploit DB Packet Storm
228112 7.5 危険 ryan haudenschilt - Family Connections における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4791 2012-12-20 19:28 2010-04-22 Show GitHub Exploit DB Packet Storm
228113 5 警告 XOOPS - XOOPS の Profiles モジュールにおける管理者による承認を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-4851 2012-12-20 19:28 2009-11-11 Show GitHub Exploit DB Packet Storm
228114 7.5 危険 phplivesupport - PHP Live! における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4749 2012-12-20 19:28 2010-03-26 Show GitHub Exploit DB Packet Storm
228115 7.5 危険 Tecnick.com - AIOCP の public/code/cp_html2xhtmlbasic.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2009-4747 2012-12-20 19:28 2010-03-26 Show GitHub Exploit DB Packet Storm
228116 10 危険 Skype Technologies S.A. - Windows 上で稼動する Skype の Extras Manager における脆弱性 CWE-noinfo
情報不足 		CVE-2009-4741 2012-12-20 19:28 2010-03-26 Show GitHub Exploit DB Packet Storm
228117 7.5 危険 TYPO3 Association - TYPO3 用の Webesse E-Card エクステンションにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-4740 2012-12-20 19:28 2010-03-26 Show GitHub Exploit DB Packet Storm
228118 6.8 警告 skadate - SkaDate Dating の index.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2009-4739 2012-12-20 19:28 2010-03-26 Show GitHub Exploit DB Packet Storm
228119 4.3 警告 sensesites - CommonSense CMS の search.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4736 2012-12-20 19:28 2010-03-23 Show GitHub Exploit DB Packet Storm
228120 6.8 警告 supercrackmunkey - SimpleLoginSys の checkuser.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4733 2012-12-20 19:28 2010-03-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
216161 4.8 MEDIUM
Network 		netgear d7800_firmware
r7500_firmware
r7800_firmware
r8900_firmware
r9000_firmware
rax120_firmware
xr500_firmware
xr700_firmware
rbr20_firmware
rbs20_firmware
rbk20_firmware
… 		Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0… CWE-79
Cross-site Scripting 		CVE-2020-11775 2024-11-21 13:58 2020-04-15 Show GitHub Exploit DB Packet Storm
216162 8.8 HIGH
Network 		netgear d6220_firmware
d6400_firmware
d8500_firmware
r6220_firmware
r6250_firmware
r6260_firmware
r6400_firmware
r6700_firmware
r6800_firmware
r6900_firmware
r6900p_firmware
… 		Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D6220 before 1.0.0.52, D6400 before 1.0.0.86, D7000v2 before 1.0.0.53, D8500 before 1.0.3.44, R6220 be… CWE-77
Command Injection 		CVE-2020-11770 2024-11-21 13:58 2020-04-15 Show GitHub Exploit DB Packet Storm
216163 4.8 MEDIUM
Network 		netgear d7800_firmware
r7500_firmware
r7800_firmware
r8900_firmware
r9000_firmware
rax120_firmware
xr500_firmware
xr700_firmware
rbr20_firmware
rbs20_firmware
rbk20_firmware
… 		Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0… CWE-79
Cross-site Scripting 		CVE-2020-11769 2024-11-21 13:58 2020-04-15 Show GitHub Exploit DB Packet Storm
216164 4.8 MEDIUM
Network 		netgear d7800_firmware
r7500_firmware
r7800_firmware
r8900_firmware
r9000_firmware
rax120_firmware
xr500_firmware
xr700_firmware
rbr20_firmware
rbs20_firmware
rbk20_firmware
… 		Certain NETGEAR devices are affected by Stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0… CWE-79
Cross-site Scripting 		CVE-2020-11768 2024-11-21 13:58 2020-04-15 Show GitHub Exploit DB Packet Storm
216165 7.5 HIGH
Network 		varnish-cache
varnish-software
opensuse
debian 		varnish_cache
leap
backports_sle
debian_linux 		An issue was discovered in Varnish Cache before 6.0.6 LTS, 6.1.x and 6.2.x before 6.2.3, and 6.3.x before 6.3.2. It occurs when communication with a TLS termination proxy uses PROXY version 2. There … CWE-617
 Reachable Assertion 		CVE-2020-11653 2024-11-21 13:58 2020-04-9 Show GitHub Exploit DB Packet Storm
216166 7.5 HIGH
Network 		ixsystems freenas_firmware
truenas_firmware 		An issue was discovered in iXsystems FreeNAS (and TrueNAS) 11.2 before 11.2-u8 and 11.3 before 11.3-U1. It allows a denial of service. The login authentication component has no limits on the length o… CWE-307
mproper Restriction of Excessive Authentication Attempts 		CVE-2020-11650 2024-11-21 13:58 2020-04-9 Show GitHub Exploit DB Packet Storm
216167 3.1 LOW
Network 		istio
envoyproxy 		istio
envoy 		Istio through 1.5.1 and Envoy through 1.14.1 have a data-leak issue. If there is a TCP connection (negotiated with SNI over HTTPS) to *.example.com, a request for a domain concurrently configured exp… NVD-CWE-noinfo
CVE-2020-11767 2024-11-21 13:58 2020-04-15 Show GitHub Exploit DB Packet Storm
216168 5.5 MEDIUM
Local 		xen
fedoraproject 		xen
fedora 		An issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a denial of service because of a bad error path in GNTTABOP_map_grant. Grant table operations are expected to return 0 … CWE-755
 Improper Handling of Exceptional Conditions 		CVE-2020-11743 2024-11-21 13:58 2020-04-14 Show GitHub Exploit DB Packet Storm
216169 5.5 MEDIUM
Local 		xen
fedoraproject 		xen
fedora 		An issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a denial of service because of bad continuation handling in GNTTABOP_copy. Grant table operations are expected to retur… NVD-CWE-Other
CVE-2020-11742 2024-11-21 13:58 2020-04-14 Show GitHub Exploit DB Packet Storm
216170 8.8 HIGH
Local 		xen
fedoraproject
debian
opensuse 		xen
fedora
debian_linux
leap 		An issue was discovered in xenoprof in Xen through 4.13.x, allowing guest OS users (with active profiling) to obtain sensitive information about other guests, cause a denial of service, or possibly g… CWE-909
 Missing Initialization of Resource 		CVE-2020-11741 2024-11-21 13:58 2020-04-14 Show GitHub Exploit DB Packet Storm