Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 7, 2026, 12:09 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229841	5	警告	swsoft	-	Swsoft Pleask Reload および Pleask の filemanager/filemanager.php におけるディレクトリトラバーサルの脆弱性	-	CVE-2006-5028	2012-12-20 18:02	2006-09-27	Show	GitHub Exploit DB Packet Storm

229842	7.5	危険	pnews systems	-	Joshua Wilson pNews System の includes/global.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-5022	2012-12-20 18:02	2006-09-27	Show	GitHub Exploit DB Packet Storm

229843	7.5	危険	redblog	-	redgun RedBLoG における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-5021	2012-12-20 18:02	2006-09-27	Show	GitHub Exploit DB Packet Storm

229844	7.5	危険	solidstate	-	SolidState における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-5020	2012-12-20 18:02	2006-09-27	Show	GitHub Exploit DB Packet Storm

229845	7.5	危険	voice of web	-	Voodoo chat における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-4993	2012-12-20 18:02	2006-09-25	Show	GitHub Exploit DB Packet Storm

229846	3.6	注意	RSAセキュリティ	-	RSA KeonCA Manager における悪意のある認証局動作を隠される脆弱性	-	CVE-2006-4991	2012-12-20 18:02	2006-09-25	Show	GitHub Exploit DB Packet Storm

229847	4.6	警告	シマンテック	-	Symantec Sygate NAC におけるコントロールメソッドを回避される脆弱性	-	CVE-2006-4981	2012-12-20 18:02	2006-09-25	Show	GitHub Exploit DB Packet Storm

229848	5	警告	walter beschmout	-	Walter Beschmout PhpQuiz の cfgphpquiz/install.php における config.inc.php の任意の PHP コードを挿入される脆弱性	-	CVE-2006-4979	2012-12-20 18:02	2006-09-24	Show	GitHub Exploit DB Packet Storm

229849	7.5	危険	walter beschmout	-	Walter Beschmout PhpQuiz における SQL インジェクションの脆弱性	-	CVE-2006-4978	2012-12-20 18:02	2006-09-24	Show	GitHub Exploit DB Packet Storm

229850	5	警告	walter beschmout	-	Walter Beschmout PhpQuiz の back/upload_img.php などにおける任意の PHP コードをアップロードされる脆弱性	-	CVE-2006-4977	2012-12-20 18:02	2006-09-24	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
199631	6.8	MEDIUM Physics	taidii	diibear	The Taidii Diibear Android application 2.4.0 and all its derivatives allow attackers to obtain user credentials from an Android backup because of insecure application configuration.	CWE-312 Cleartext Storage of Sensitive Information	CVE-2020-35454	2024-11-21 14:27	2021-03-18	Show	GitHub Exploit DB Packet Storm

199632	9.8	CRITICAL Network	domainmod	domainmod	DomainMOD domainmod-v4.15.0 is affected by an insufficient session expiration vulnerability. On changing a password, both sessions using the changed password and old sessions in any other browser or …	CWE-613 Insufficient Session Expiration	CVE-2020-35358	2024-11-21 14:27	2021-03-15	Show	GitHub Exploit DB Packet Storm

199633	8.8	HIGH Network	zohocorp	manageengine_servicedesk_plus	Zoho ManageEngine ServiceDesk Plus before 11134 allows an Authentication Bypass (only during SAML login).	CWE-863 Incorrect Authorization	CVE-2020-35682	2024-11-21 14:27	2021-03-14	Show	GitHub Exploit DB Packet Storm

199634	6.5	MEDIUM Adjacent	netgear	gs116e_firmware jgs516pe_firmware	The TFTP server fails to handle multiple connections on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices, and allows external attackers to force device reboots by sending concurrent connections, aka a den…	CWE-400 Uncontrolled Resource Consumption	CVE-2020-35233	2024-11-21 14:27	2021-03-11	Show	GitHub Exploit DB Packet Storm

199635	8.8	HIGH Adjacent	netgear	gs116e_firmware jgs516pe_firmware	The NSDP protocol implementation on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices was affected by an authentication issue that allows an attacker to bypass access controls and obtain full control of th…	CWE-287 Improper Authentication	CVE-2020-35231	2024-11-21 14:27	2021-03-11	Show	GitHub Exploit DB Packet Storm

199636	6.8	MEDIUM Adjacent	netgear	gs116e_firmware jgs516pe_firmware	Multiple integer overflow parameters were found in the web administration panel on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices. Most of the integer parameters sent through the web server can be abuse…	CWE-190 Integer Overflow or Wraparound	CVE-2020-35230	2024-11-21 14:27	2021-03-11	Show	GitHub Exploit DB Packet Storm

199637	8.8	HIGH Adjacent	netgear	gs116e_firmware jgs516pe_firmware	The authentication token required to execute NSDP write requests on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices is not properly invalidated and can be reused until a new token is generated, which all…	CWE-384 Session Fixation	CVE-2020-35229	2024-11-21 14:27	2021-03-11	Show	GitHub Exploit DB Packet Storm

199638	4.8	MEDIUM Network	netgear	gs116e_firmware jgs516pe_firmware	A cross-site scripting (XSS) vulnerability in the administration web panel on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices allows remote attackers to inject arbitrary web script or HTML via the langua…	CWE-79 Cross-site Scripting	CVE-2020-35228	2024-11-21 14:27	2021-03-11	Show	GitHub Exploit DB Packet Storm

199639	7.2	HIGH Network	netgear	gs116e_firmware jgs516pe_firmware	A buffer overflow vulnerability in the access control section on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices (in the administration web panel) allows an attacker to inject IP addresses into the white…	CWE-120 Classic Buffer Overflow	CVE-2020-35227	2024-11-21 14:27	2021-03-11	Show	GitHub Exploit DB Packet Storm

199640	7.1	HIGH Adjacent	netgear	gs116e_firmware jgs516pe_firmware	NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices allow unauthenticated users to modify the switch DHCP configuration by sending the corresponding write request command.	CWE-306 Missing Authentication for Critical Function	CVE-2020-35226	2024-11-21 14:27	2021-03-11	Show	GitHub Exploit DB Packet Storm