Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230031 7.5 危険 mybulletinboard - MyBB の Archive Model の inc/init.php における任意の変数を上書きされる脆弱性 - CVE-2006-3758 2012-12-20 18:02 2006-06-27 Show GitHub Exploit DB Packet Storm
230032 5 警告 Zen Cart - Zen Cart の index.php における重要な情報を取得される脆弱性 - CVE-2006-3757 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
230033 7.5 危険 flushcms - FlushCMS の Include/editor/class.rich.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-3755 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
230034 7.5 危険 flushcms - FlushCMS の Include/editor/rich_files/class.rich.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-3754 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
230035 6.4 警告 professional home page tools - Professional Home Page Tools Guestbook の管理ログインにおけるパスワードを推測する総当り攻撃を実行される脆弱性 - CVE-2006-3753 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
230036 7.5 危険 professional home page tools - Professional Home Page Tools Guestbook の class.php における SQL インジェクションの脆弱性 - CVE-2006-3752 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
230037 6.8 警告 htmlarea3 - ImageManager 用の HTMLArea3 Addon Component における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-3751 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
230038 6.8 警告 hashcash - Joomla! 用の com_hashcash の server.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-3750 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
230039 6.8 警告 Mambo Foundation - Mambo 用の Sitemap コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-3749 2012-12-20 18:02 2006-07-10 Show GitHub Exploit DB Packet Storm
230040 6.8 警告 mamboxchange - Mambo 用の LoudMouth コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-3748 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199131 7.5 HIGH
Network 		mantisbt mantisbt An issue was discovered in MantisBT before 2.24.4. An incorrect access check in bug_revision_view_page.php allows an unprivileged attacker to view the Summary field of private issues, as well as bugn… CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2020-35849 2024-11-21 14:28 2020-12-31 Show GitHub Exploit DB Packet Storm
199132 6.5 MEDIUM
Network 		cockpit-project cockpit An SSRF issue was discovered in cockpit-project.org Cockpit 234. NOTE: this is unrelated to the Agentejo Cockpit product. NOTE: the vendor states "I don't think [it] is a big real-life issue. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2020-35850 2024-11-21 14:28 2020-12-30 Show GitHub Exploit DB Packet Storm
199133 9.8 CRITICAL
Network 		agentejo cockpit Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php newpassword function. CWE-89
SQL Injection 		CVE-2020-35848 2024-11-21 14:28 2020-12-30 Show GitHub Exploit DB Packet Storm
199134 9.8 CRITICAL
Network 		agentejo cockpit Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php resetpassword function. CWE-89
SQL Injection 		CVE-2020-35847 2024-11-21 14:28 2020-12-30 Show GitHub Exploit DB Packet Storm
199135 9.8 CRITICAL
Network 		agentejo cockpit Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php check function. CWE-89
SQL Injection 		CVE-2020-35846 2024-11-21 14:28 2020-12-30 Show GitHub Exploit DB Packet Storm
199136 5.4 MEDIUM
Network 		netgear d6200_firmware
d7000_firmware
jnr1010v2_firmware
jr6150_firmware
jwnr2010v5_firmware
r6020_firmware
r6050_firmware
r6080_firmware
r6120_firmware
r6220_firmware
r6260_fir… 		Certain NETGEAR devices are affected by stored XSS. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JNR1010v2 before 1.1.0.62, JR6150 before 1.0.1.24, JWNR2010v5 before 1.1.0.62, R6020 be… CWE-79
Cross-site Scripting 		CVE-2020-35842 2024-11-21 14:28 2020-12-30 Show GitHub Exploit DB Packet Storm
199137 7.6 HIGH
Network 		netgear d6200_firmware
d7000_firmware
jnr1010v2_firmware
jr6150_firmware
jwnr2010v5_firmware
r6020_firmware
r6050_firmware
r6080_firmware
r6120_firmware
r6220_firmware
r6260_fir… 		Certain NETGEAR devices are affected by stored XSS. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JNR1010v2 before 1.1.0.62, JR6150 before 1.0.1.24, JWNR2010v5 before 1.1.0.62, R6020 be… CWE-79
Cross-site Scripting 		CVE-2020-35841 2024-11-21 14:28 2020-12-30 Show GitHub Exploit DB Packet Storm
199138 5.4 MEDIUM
Network 		netgear d6200_firmware
d7000_firmware
jnr1010v2_firmware
jr6150_firmware
jwnr2010v5_firmware
r6020_firmware
r6050_firmware
r6080_firmware
r6120_firmware
r6220_firmware
r6260_fir… 		Certain NETGEAR devices are affected by stored XSS. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JNR1010v2 before 1.1.0.62, JR6150 before 1.0.1.24, JWNR2010v5 before 1.1.0.62, R6020 be… CWE-79
Cross-site Scripting 		CVE-2020-35840 2024-11-21 14:28 2020-12-30 Show GitHub Exploit DB Packet Storm
199139 8.1 HIGH
Network 		netgear d7800_firmware
r7500v2_firmware
r7800_firmware
r8900_firmware
r9000_firmware
xr500_firmware
xr700_firmware
rax120_firmware 		Certain NETGEAR devices are affected by Stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before 1.0.4.28, R9000 before 1.0.4.28, XR500 before 2.3.… CWE-79
Cross-site Scripting 		CVE-2020-35839 2024-11-21 14:28 2020-12-30 Show GitHub Exploit DB Packet Storm
199140 4.8 MEDIUM
Network 		netgear d7800_firmware
r7500v2_firmware
r7800_firmware
r8900_firmware
r9000_firmware
rax120_firmware
xr500_firmware
xr700_firmware 		Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.74, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0… CWE-79
Cross-site Scripting 		CVE-2020-35838 2024-11-21 14:28 2020-12-30 Show GitHub Exploit DB Packet Storm