Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 4:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
250871 7.8 危険 シスコシステムズ - Cisco Unified Communications Manager におけるサービス運用妨害 (プロセス障害) の脆弱性 CWE-noinfo
情報不足 		CVE-2011-1605 2011-12-1 10:36 2011-04-27 Show GitHub Exploit DB Packet Storm
250872 7.1 危険 シスコシステムズ - Cisco Unified Communications Manager におけるメモリリークの脆弱性 CWE-399
リソース管理の問題 		CVE-2011-1604 2011-12-1 10:35 2011-04-27 Show GitHub Exploit DB Packet Storm
250873 4.3 警告 John Godley - WordPress 用 Redirection プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4562 2011-11-30 16:50 2011-11-28 Show GitHub Exploit DB Packet Storm
250874 4.3 警告 codefuture - CF Image Hosting Script におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4572 2011-11-30 16:38 2011-11-29 Show GitHub Exploit DB Packet Storm
250875 7.5 危険 EA Improved - Estate Agent コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-4571 2011-11-30 16:37 2011-11-29 Show GitHub Exploit DB Packet Storm
250876 7.5 危険 Takeaweb - Time Returns コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-4570 2011-11-30 16:37 2011-11-29 Show GitHub Exploit DB Packet Storm
250877 7.5 危険 tommykent1210 - MyBB Forum 用 Userbar プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-4569 2011-11-30 16:36 2011-11-29 Show GitHub Exploit DB Packet Storm
250878 4.3 警告 WordPress.org - WordPress 用 Flowplayer プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4568 2011-11-30 16:35 2011-11-29 Show GitHub Exploit DB Packet Storm
250879 4.3 警告 Zen Cart - Zen Cart におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4567 2011-11-30 16:34 2011-11-29 Show GitHub Exploit DB Packet Storm
250880 4.3 警告 Zen Cart - Zen Cart におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4547 2011-11-30 16:34 2011-11-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
200721 9.8 CRITICAL
Network 		netgear d3600_firmware
d6000_firmware
d6200_firmware
d7000_firmware
d7800_firmware
dm200_firmware
ex2700_firmware
ex6100v2_firmware
ex6150v2_firmware
ex6200v2_firmware
ex6400_fi… 		Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.78, D6200 before 1.1.00.32, D7000 before 1… CWE-787
 Out-of-bounds Write 		CVE-2020-35799 2024-11-21 14:28 2020-12-30 Show GitHub Exploit DB Packet Storm
200722 7.8 HIGH
Local 		netgear r6400v2_firmware
r6700v3_firmware
r6900p_firmware
r7000_firmware
r7000p_firmware
r7800_firmware
r7850_firmware
r7900_firmware
r7960p_firmware
r8000_firmware
r7900p_firmw… 		Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects R6400v2 before 1.0.4.84, R6700v3 before 1.0.4.84, R6900P before 1.3.2.124, R7000 before 1.0.11.1… CWE-77
Command Injection 		CVE-2020-35798 2024-11-21 14:28 2020-12-30 Show GitHub Exploit DB Packet Storm
200723 8.0 HIGH
Adjacent 		netgear d3600_firmware
d6000_firmware
d6200_firmware
d7000_firmware
ex6200_firmware
ex7000_firmware
ex8000_firmware
jr6150_firmware
pr2000_firmware
r6020_firmware
r6050_firmware… 		Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, D6200 before 1.1.00.36, D7000 before 1.0.1.70, EX6200v2 … CWE-120
Classic Buffer Overflow 		CVE-2020-35787 2024-11-21 14:28 2020-12-30 Show GitHub Exploit DB Packet Storm
200724 8.4 HIGH
Adjacent 		netgear dgn2200v1_firmware NETGEAR DGN2200v1 devices before v1.0.0.58 are affected by command injection. CWE-77
Command Injection 		CVE-2020-35777 2024-11-21 14:28 2020-12-30 Show GitHub Exploit DB Packet Storm
200725 9.8 CRITICAL
Network 		netgear cbr40_firmware
d6220_firmware
d6400_firmware
d7000v2_firmware
d8500_firmware
dc112a_firmware
dgn2200v4_firmware
eax20_firmware
eax80_firmware
ex3700_firmware
ex3800_firm… 		Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects CBR40 before 2.5.0.10, D6220 before 1.0.0.60, D6400 before 1.0.0.94, D7000v2 before 1.0.0.62, D8… CWE-120
Classic Buffer Overflow 		CVE-2020-35796 2024-11-21 14:28 2020-12-30 Show GitHub Exploit DB Packet Storm
200726 9.8 CRITICAL
Network 		netgear ac2100_firmware
ac2400_firmware
ac2600_firmware
cbk40_firmware
cbr40_firmware
d7800_firmware
eax20_firmware
eax80_firmware
ex7500_firmware
mk62_firmware
mr60_firmware 		Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects AC2100 before 1.2.0.72, AC2400 before 1.2.0.72, AC2600 before 1.2.0.72, CBK40 before 2.5.0.10, C… CWE-120
Classic Buffer Overflow 		CVE-2020-35795 2024-11-21 14:28 2020-12-30 Show GitHub Exploit DB Packet Storm
200727 5.4 MEDIUM
Network 		twitter twitter-server server/handler/HistogramQueryHandler.scala in Twitter TwitterServer (aka twitter-server) before 20.12.0, in some configurations, allows XSS via the /histograms endpoint. CWE-79
Cross-site Scripting 		CVE-2020-35774 2024-11-21 14:28 2020-12-30 Show GitHub Exploit DB Packet Storm
200728 8.8 HIGH
Network 		freehtmldesigns site_offline The site-offline plugin before 1.4.4 for WordPress lacks certain wp_create_nonce and wp_verify_nonce calls, aka CSRF. CWE-352
 Origin Validation Error 		CVE-2020-35773 2024-11-21 14:28 2020-12-30 Show GitHub Exploit DB Packet Storm
200729 9.8 CRITICAL
Network 		webmin webmin miniserv.pl in Webmin 1.962 on Windows mishandles special characters in query arguments to the CGI program. NVD-CWE-noinfo
CVE-2020-35769 2024-11-21 14:28 2020-12-29 Show GitHub Exploit DB Packet Storm
200730 7.8 HIGH
Local 		opendkim opendkim The test suite in libopendkim in OpenDKIM through 2.10.3 allows local users to gain privileges via a symlink attack against the /tmp/testkeys file (related to t-testdata.h, t-setup.c, and t-cleanup.c… CWE-59
Link Following 		CVE-2020-35766 2024-11-21 14:28 2020-12-29 Show GitHub Exploit DB Packet Storm