|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
Update Date":June 20, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 231391 | 7.5 | 危険 | wholehogsoftware | - | Whole Hog Ware Support における認証を回避される脆弱性 |
CWE-287
不適切な認証 |
CVE-2009-0460 | 2012-12-20 19:10 | 2009-02-10 | Show | GitHub Exploit DB Packet Storm |
| 231392 | 7.5 | 危険 | wholehogsoftware | - | Whole Hog Password Protect の admin/login_submit.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2009-0459 | 2012-12-20 19:10 | 2009-02-10 | Show | GitHub Exploit DB Packet Storm |
| 231393 | 7.5 | 危険 | wholehogsoftware | - | Whole Hog Ware Support の admin/login_submit.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2009-0458 | 2012-12-20 19:10 | 2009-02-10 | Show | GitHub Exploit DB Packet Storm |
| 231394 | 7.5 | 危険 | sourdough | - | Sourdough で使用されている patForms の examples/example_clientside_javascript.php における PHP リモートファイルインクルージョンの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2009-0456 | 2012-12-20 19:10 | 2009-02-10 | Show | GitHub Exploit DB Packet Storm |
| 231395 | 7.5 | 危険 | skalinks | - | Skalfa SkaLinks における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2009-0451 | 2012-12-20 19:10 | 2009-02-10 | Show | GitHub Exploit DB Packet Storm |
| 231396 | 7.5 | 危険 | syntax desktop | - | Syntax Desktop の admin/modules/aa/preview.php におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2009-0448 | 2012-12-20 19:10 | 2009-02-10 | Show | GitHub Exploit DB Packet Storm |
| 231397 | 7.5 | 危険 | web-album | - | WEBalbum の photo.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2009-0446 | 2012-12-20 19:10 | 2009-02-10 | Show | GitHub Exploit DB Packet Storm |
| 231398 | 7.5 | 危険 | SIRINI.NET | - | GRBoard における PHP リモートファイルインクルージョンの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2009-0444 | 2012-12-20 19:10 | 2009-02-10 | Show | GitHub Exploit DB Packet Storm |
| 231399 | 6.8 | 警告 | phpbbbook | - | PHPbbBook の bbcode.php におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2009-0442 | 2012-12-20 19:10 | 2009-02-10 | Show | GitHub Exploit DB Packet Storm |
| 231400 | 6.8 | 警告 | technote | - | Technote の skin_shop/standard/2_view_body/body_default.php における PHP リモートファイルインクルージョンの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2009-0441 | 2012-12-20 19:10 | 2009-02-10 | Show | GitHub Exploit DB Packet Storm |
Update Date:June 20, 2026, 4:01 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 209371 | 6.8 |
MEDIUM
Adjacent |
netgear |
r7500_firmware r8900_firmware r9000_firmware r7800_firmware |
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R7500v2 before 1.0.3.48, R8900 before 1.0.5.2, R9000 before 1.0.5.2, and R7800 before 1.0.2.68. |
CWE-77
Command Injection |
CVE-2020-35792 | 2024-11-21 14:28 | 2020-12-30 | Show | GitHub Exploit DB Packet Storm |
| 209372 | 6.7 |
MEDIUM
Local |
netgear |
r7800_firmware r8900_firmware r9000_firmware |
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R7800 before 1.0.2.68, R8900 before 1.0.5.2, and R9000 before 1.0.5.2. |
CWE-77
Command Injection |
CVE-2020-35791 | 2024-11-21 14:28 | 2020-12-30 | Show | GitHub Exploit DB Packet Storm |
| 209373 | 4.8 |
MEDIUM
Network |
netgear |
d7800_firmware r7800_firmware r8900_firmware r9000_firmware rax120_firmware rbk40_firmware rbr40_firmware rbs40_firmware rbk20_firmware rbr20_firmware rbs20_firmware … |
Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7800 before 1.0.2.74, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, RBK20 before 2.3.5… |
CWE-79
Cross-site Scripting |
CVE-2020-35814 | 2024-11-21 14:28 | 2020-12-30 | Show | GitHub Exploit DB Packet Storm |
| 209374 | 4.8 |
MEDIUM
Network |
netgear |
d7800_firmware r7500v2_firmware r7800_firmware r8900_firmware r9000_firmware rax120_firmware rbk40_firmware rbr40_firmware rbs40_firmware rbk20_firmware rbr20_firmware | Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, RBK50 before 2.3.5.30, RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, RBK40 before 2.3.5.30, RBR40 before 2.3.5.… |
CWE-79
Cross-site Scripting |
CVE-2020-35813 | 2024-11-21 14:28 | 2020-12-30 | Show | GitHub Exploit DB Packet Storm |
| 209375 | 4.8 |
MEDIUM
Network |
netgear |
d7800_firmware r7500v2_firmware r7800_firmware r8900_firmware r9000_firmware rax120_firmware rbk40_firmware rbr40_firmware rbs40_firmware rbk20_firmware rbr20_firmware | Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0… |
CWE-79
Cross-site Scripting |
CVE-2020-35812 | 2024-11-21 14:28 | 2020-12-30 | Show | GitHub Exploit DB Packet Storm |
| 209376 | 4.8 |
MEDIUM
Network |
netgear |
d7800_firmware r7500v2_firmware r7800_firmware r8900_firmware r9000_firmware rax120_firmware rbk20_firmware rbr20_firmware rbs20_firmware rbk40_firmware rbr40_firmware | Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0… |
CWE-79
Cross-site Scripting |
CVE-2020-35811 | 2024-11-21 14:28 | 2020-12-30 | Show | GitHub Exploit DB Packet Storm |
| 209377 | 4.8 |
MEDIUM
Network |
netgear |
d7800_firmware r7500v2_firmware r7800_firmware r8900_firmware r9000_firmware rax120_firmware rbk40_firmware rbr40_firmware rbs40_firmware rbk20_firmware rbr20_firmware | Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.74, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0… |
CWE-79
Cross-site Scripting |
CVE-2020-35810 | 2024-11-21 14:28 | 2020-12-30 | Show | GitHub Exploit DB Packet Storm |
| 209378 | 6.8 |
MEDIUM
Adjacent |
netgear |
d7800_firmware r7800_firmware r8900_firmware r9000_firmware |
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.56, R7800 before 1.0.2.68, R8900 before 1.0.4.26, and R9000 before 1.0.4.26. |
CWE-77
Command Injection |
CVE-2020-35790 | 2024-11-21 14:28 | 2020-12-30 | Show | GitHub Exploit DB Packet Storm |
| 209379 | 8.8 |
HIGH
Network |
netgear | nms300_firmware | NETGEAR NMS300 devices before 1.6.0.27 are affected by command injection by an authenticated user. |
CWE-20 CWE-78 Improper Input Validation OS Command |
CVE-2020-35789 | 2024-11-21 14:28 | 2020-12-30 | Show | GitHub Exploit DB Packet Storm |
| 209380 | 6.8 |
MEDIUM
Adjacent |
netgear | wac104_firmware | NETGEAR WAC104 devices before 1.0.4.13 are affected by a buffer overflow by an authenticated user. |
CWE-120
Classic Buffer Overflow |
CVE-2020-35788 | 2024-11-21 14:28 | 2020-12-30 | Show | GitHub Exploit DB Packet Storm |