Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 18, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 251761 | 5 | 警告 | osCSS | - | osCSS の catalog/content.php におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2011-4713 | 2011-12-13 15:01 | 2011-11-8 | Show | GitHub Exploit DB Packet Storm |
| 251762 | 5 | 警告 | monoxide0184 | - | Oxide WebServer におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2011-4712 | 2011-12-13 14:59 | 2011-12-8 | Show | GitHub Exploit DB Packet Storm |
| 251763 | 5 | 警告 | Namazu Project | - | Namazu の namazu.cgi におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2011-4711 | 2011-12-13 14:57 | 2011-12-8 | Show | GitHub Exploit DB Packet Storm |
| 251764 | 7.5 | 危険 | Lucid Crew | - | Pixie CMS における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2011-4710 | 2011-12-13 14:53 | 2011-12-8 | Show | GitHub Exploit DB Packet Storm |
| 251765 | 4.3 | 警告 | Hotaru CMS | - | Hotaru CMS の Search プラグイン内にある Hotaru.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2011-4709 | 2011-12-13 14:52 | 2011-12-8 | Show | GitHub Exploit DB Packet Storm |
| 251766 | 4.3 | 警告 | IBM | - | IBM Rational Asset Manager におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2011-4708 | 2011-12-13 14:51 | 2011-05-5 | Show | GitHub Exploit DB Packet Storm |
| 251767 | 4.3 | 警告 | SAP | - | SAP Netweaver の Virus Scan Interface におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2011-4707 | 2011-12-13 14:50 | 2011-12-8 | Show | GitHub Exploit DB Packet Storm |
| 251768 | 5 | 警告 | Igor Sysoev | - | nginx におけるヒープベースのバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2011-4315 | 2011-12-13 14:49 | 2011-11-15 | Show | GitHub Exploit DB Packet Storm |
| 251769 | 7.5 | 危険 | Mambo Foundation | - | Mambo CMS の administrator/index2.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2011-2917 | 2011-12-13 14:41 | 2011-12-8 | Show | GitHub Exploit DB Packet Storm |
| 251770 | 6.8 | 警告 | MIT Kerberos | - | MIT Kerberos の process_tgs_req 関数におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-399
リソース管理の問題 |
CVE-2011-1530 | 2011-12-13 14:40 | 2011-12-6 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 19, 2026, 4:16 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 253161 | 6.5 |
MEDIUM
Adjacent |
netgear |
dst6501_firmware wnr2000_firmware |
Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects DST6501 before 1.1.0.6 and WNR2000v2 before 1.2.0.8. |
CWE-200
Information Exposure |
CVE-2017-18766 | 2024-11-21 12:20 | 2020-04-23 | Show | GitHub Exploit DB Packet Storm |
| 253162 | 6.5 |
MEDIUM
Adjacent |
netgear |
r6300_firmware r6400_firmware r6700_firmware r6900_firmware wnr3500l_firmware wnr2000_firmware |
Certain NETGEAR devices are affected by denial of service. This affects R6300v2 before 1.0.4.8, R6400 before 1.0.1.22, R6400v2 before 1.0.2.32, R6700 before 1.0.1.20, R6900 before 1.0.1.20, WNR3500Lv… |
NVD-CWE-noinfo
|
CVE-2017-18765 | 2024-11-21 12:20 | 2020-04-23 | Show | GitHub Exploit DB Packet Storm |
| 253163 | 6.8 |
MEDIUM
Adjacent |
netgear | r8000_firmware | NETGEAR R8000 devices before 1.0.4.2 are affected by a stack-based buffer overflow by an authenticated user. |
CWE-787
Out-of-bounds Write |
CVE-2017-18761 | 2024-11-21 12:20 | 2020-04-23 | Show | GitHub Exploit DB Packet Storm |
| 253164 | 6.8 |
MEDIUM
Adjacent |
netgear |
r8300_firmware r8500_firmware |
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R8300 before 1.0.2.104 and R8500 before 1.0.2.104. |
CWE-787
Out-of-bounds Write |
CVE-2017-18759 | 2024-11-21 12:20 | 2020-04-23 | Show | GitHub Exploit DB Packet Storm |
| 253165 | 8.8 |
HIGH
Adjacent |
netgear |
d6100_firmware d7000_firmware d7800_firmware jnr1010_firmware jr6150_firmware jwnr2010_firmware pr2000_firmware r6050_firmware r6100_firmware r6120_firmware r6220_firmwa… |
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D6100 before 1.0.0.55, D7000 before 1.0.1.50, D7800 before 1.0.1.28, JNR1010v2 before 1.1.0.44, … |
CWE-74
Injection |
CVE-2017-18764 | 2024-11-21 12:20 | 2020-04-23 | Show | GitHub Exploit DB Packet Storm |
| 253166 | 6.5 |
MEDIUM
Adjacent |
netgear |
jnr1010_firmware jr6150_firmware jwnr2010_firmware pr2000_firmware r6050_firmware r6120_firmware r6220_firmware r6700_firmware r6800_firmware r6900_firmware wndr3700_fir… |
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects JNR1010v2 before 1.1.0.42, JR6150 before 1.0.1.10, JWNR2010v5 before 1.1.0.42, PR2000 before 1.0.0.1… |
CWE-20
Improper Input Validation |
CVE-2017-18763 | 2024-11-21 12:20 | 2020-04-23 | Show | GitHub Exploit DB Packet Storm |
| 253167 | 8.8 |
HIGH
Adjacent |
netgear |
d3600_firmware d6000_firmware d6100_firmware r6100_firmware r6900p_firmware r7000_firmware r7000p_firmware r7100lg_firmware wndr3700_firmware wndr4300_firmware wndr4500_… |
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D3600 before 1.0.0.68, D6000 before 1.0.0.68, D6100 before 1.0.0.57, R6100 before 1.0.1.16, R690… |
CWE-74
Injection |
CVE-2017-18762 | 2024-11-21 12:20 | 2020-04-23 | Show | GitHub Exploit DB Packet Storm |
| 253168 | 7.8 |
HIGH
Local |
netgear |
d6200_firmware jnr1010_firmware jr6150_firmware jwnr2010_firmware pr2000_firmware r6050_firmware wnr1000_firmware wnr2020_firmware wnr2050_firmware |
Certain NETGEAR devices are affected by command injection. This affects D6200 before 1.1.00.24, JNR1010v2 before 1.1.0.44, JR6150 before 1.0.1.12, JWNR2010v5 before 1.1.0.44, PR2000 before 1.0.0.20, … |
CWE-74
Injection |
CVE-2017-18787 | 2024-11-21 12:20 | 2020-04-23 | Show | GitHub Exploit DB Packet Storm |
| 253169 | 7.8 |
HIGH
Local |
netgear |
d6200_firmware jnr1010_firmware jr6150_firmware jwnr2010_firmware pr2000_firmware r6050_firmware wnr1000_firmware wnr2020_firmware wnr2050_firmware |
Certain NETGEAR devices are affected by command injection. This affects D6200 before 1.1.00.24, JNR1010v2 before 1.1.0.44, JR6150 before 1.0.1.12, JWNR2010v5 before 1.1.0.44, PR2000 before 1.0.0.20, … |
CWE-74
Injection |
CVE-2017-18786 | 2024-11-21 12:20 | 2020-04-23 | Show | GitHub Exploit DB Packet Storm |
| 253170 | 8.8 |
HIGH
Network |
netgear |
r6100_firmware r7500_firmware wndr3700_firmware wndr4300_firmware wndr4500_firmware wnr2000_firmware |
Certain NETGEAR devices are affected by CSRF. This affects R6100 before 1.0.1.12, R7500 before 1.0.0.108, WNDR3700v4 before 1.0.2.86, WNDR4300v1 before 1.0.2.88, WNDR4300v2 before 1.0.0.48, WNDR4500v… |
CWE-352
Origin Validation Error |
CVE-2017-18775 | 2024-11-21 12:20 | 2020-04-23 | Show | GitHub Exploit DB Packet Storm |