Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 28, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
228551 7.5 危険 viksoe - viksoe GMail Drive シェルエクステンションにおける仮想ファイルシステムのアクションを実行される脆弱性 - CVE-2006-5902 2012-12-20 18:02 2006-11-15 Show GitHub Exploit DB Packet Storm
228552 6.8 警告 Zend Technologies Ltd. - Zend Framework Preview の incubator/tests/Zend/Http/_files/testRedirections.php サンプルコードにおけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5900 2012-12-20 18:02 2006-11-15 Show GitHub Exploit DB Packet Storm
228553 5 警告 php heaven - PhpMyChat の localization/languages.lib.php3 におけるディレクトリトラバーサルの脆弱性 - CVE-2006-5898 2012-12-20 18:02 2006-11-15 Show GitHub Exploit DB Packet Storm
228554 5 警告 php heaven - PhpMyChat Plus におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2006-5897 2012-12-20 18:02 2006-11-15 Show GitHub Exploit DB Packet Storm
228555 5 警告 remlab - REMLAB Web Mech Designer におけるスクリプトのフルパスを取得される脆弱性 - CVE-2006-5896 2012-12-20 18:02 2006-11-27 Show GitHub Exploit DB Packet Storm
228556 6.8 警告 rama cms - Rama CMS の lang.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-5894 2012-12-20 18:02 2006-11-14 Show GitHub Exploit DB Packet Storm
228557 7.5 危険 the net guys - The Net Guys ASPired2Poll の MoreInfo.asp における SQL インジェクションの脆弱性 - CVE-2006-5892 2012-12-20 18:02 2006-11-14 Show GitHub Exploit DB Packet Storm
228558 7.5 危険 superfreaker studios - Superfreaker Studios Ustore の detail.asp における SQL インジェクションの脆弱性 - CVE-2006-5891 2012-12-20 18:02 2006-11-14 Show GitHub Exploit DB Packet Storm
228559 7.5 危険 superfreaker studios - Superfreaker Studios Usupport の detail.asp における SQL インジェクションの脆弱性 - CVE-2006-5890 2012-12-20 18:02 2006-11-14 Show GitHub Exploit DB Packet Storm
228560 7.5 危険 superfreaker studios - Superfreaker Studios UPublisher の viewarticle.asp における SQL インジェクションの脆弱性 - CVE-2006-5888 2012-12-20 18:02 2006-11-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 28, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197891 8.0 HIGH
Adjacent
netgear d3600_firmware
d6000_firmware
d6200_firmware
d7000_firmware
ex6200_firmware
ex7000_firmware
ex8000_firmware
jr6150_firmware
pr2000_firmware
r6020_firmware
r6050_firmware…
Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, D6200 before 1.1.00.36, D7000 before 1.0.1.70, EX6200v2 … CWE-120
Classic Buffer Overflow
CVE-2020-35787 2024-11-21 14:28 2020-12-30 Show GitHub Exploit DB Packet Storm
197892 8.4 HIGH
Adjacent
netgear dgn2200v1_firmware NETGEAR DGN2200v1 devices before v1.0.0.58 are affected by command injection. CWE-77
Command Injection
CVE-2020-35777 2024-11-21 14:28 2020-12-30 Show GitHub Exploit DB Packet Storm
197893 9.8 CRITICAL
Network
netgear cbr40_firmware
d6220_firmware
d6400_firmware
d7000v2_firmware
d8500_firmware
dc112a_firmware
dgn2200v4_firmware
eax20_firmware
eax80_firmware
ex3700_firmware
ex3800_firm…
Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects CBR40 before 2.5.0.10, D6220 before 1.0.0.60, D6400 before 1.0.0.94, D7000v2 before 1.0.0.62, D8… CWE-120
Classic Buffer Overflow
CVE-2020-35796 2024-11-21 14:28 2020-12-30 Show GitHub Exploit DB Packet Storm
197894 9.8 CRITICAL
Network
netgear ac2100_firmware
ac2400_firmware
ac2600_firmware
cbk40_firmware
cbr40_firmware
d7800_firmware
eax20_firmware
eax80_firmware
ex7500_firmware
mk62_firmware
mr60_firmware
Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects AC2100 before 1.2.0.72, AC2400 before 1.2.0.72, AC2600 before 1.2.0.72, CBK40 before 2.5.0.10, C… CWE-120
Classic Buffer Overflow
CVE-2020-35795 2024-11-21 14:28 2020-12-30 Show GitHub Exploit DB Packet Storm
197895 5.4 MEDIUM
Network
twitter twitter-server server/handler/HistogramQueryHandler.scala in Twitter TwitterServer (aka twitter-server) before 20.12.0, in some configurations, allows XSS via the /histograms endpoint. CWE-79
Cross-site Scripting
CVE-2020-35774 2024-11-21 14:28 2020-12-30 Show GitHub Exploit DB Packet Storm
197896 8.8 HIGH
Network
freehtmldesigns site_offline The site-offline plugin before 1.4.4 for WordPress lacks certain wp_create_nonce and wp_verify_nonce calls, aka CSRF. CWE-352
 Origin Validation Error
CVE-2020-35773 2024-11-21 14:28 2020-12-30 Show GitHub Exploit DB Packet Storm
197897 9.8 CRITICAL
Network
webmin webmin miniserv.pl in Webmin 1.962 on Windows mishandles special characters in query arguments to the CGI program. NVD-CWE-noinfo
CVE-2020-35769 2024-11-21 14:28 2020-12-29 Show GitHub Exploit DB Packet Storm
197898 7.8 HIGH
Local
opendkim opendkim The test suite in libopendkim in OpenDKIM through 2.10.3 allows local users to gain privileges via a symlink attack against the /tmp/testkeys file (related to t-testdata.h, t-setup.c, and t-cleanup.c… CWE-59
Link Following
CVE-2020-35766 2024-11-21 14:28 2020-12-29 Show GitHub Exploit DB Packet Storm
197899 6.5 MEDIUM
Network
gnu
debian
gnu_scientific_library
debian_linux
A buffer overflow can occur when calculating the quantile value using the Statistics Library of GSL (GNU Scientific Library), versions 2.5 and 2.6. Processing a maliciously crafted input data for gsl… CWE-120
Classic Buffer Overflow
CVE-2020-35357 2024-11-21 14:27 2023-08-23 Show GitHub Exploit DB Packet Storm
197900 7.8 HIGH
Local
bmc patrol_agent BMC PATROL Agent through 20.08.00 allows local privilege escalation via vectors involving pconfig +RESTART -host. NVD-CWE-noinfo
CVE-2020-35593 2024-11-21 14:27 2023-09-6 Show GitHub Exploit DB Packet Storm