Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 25, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252441 7.5 危険 Parallels - Parallels Plesk Panel の Server Administration Panel における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-4725 2011-12-19 16:28 2011-12-16 Show GitHub Exploit DB Packet Storm
252442 9.3 危険 Nullsoft - Winamp の in_avi.dll プラグインにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2011-3834 2011-12-19 16:18 2011-12-9 Show GitHub Exploit DB Packet Storm
252443 10 危険 SmarterTools Inc. - SmarterTools SmarterStats における詳細不明な脆弱性 CWE-DesignError
CVE-2011-4752 2011-12-19 16:18 2011-12-16 Show GitHub Exploit DB Packet Storm
252444 5 警告 SmarterTools Inc. - SmarterTools SmarterStats における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-4751 2011-12-19 16:17 2011-12-16 Show GitHub Exploit DB Packet Storm
252445 4.3 警告 SmarterTools Inc. - SmarterTools SmarterStats におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4750 2011-12-19 16:16 2011-12-16 Show GitHub Exploit DB Packet Storm
252446 4.6 警告 ヒューレット・パッカード
IBM
オラクル		 - HP ALM 内の getInstalledPackages 関数における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-4834 2011-12-19 15:08 2011-12-15 Show GitHub Exploit DB Packet Storm
252447 7.5 危険 SugarCRM - SugarCRM の Leads モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-4833 2011-12-19 15:08 2011-12-15 Show GitHub Exploit DB Packet Storm
252448 7.5 危険 Moxiecode Systems AB
phpMyFAQ
PHPletter		 - 複数の製品で使用される inc/function.base.php における PHP コードを挿入される脆弱性 CWE-94
コード・インジェクション 		CVE-2011-4825 2011-12-19 15:07 2011-10-25 Show GitHub Exploit DB Packet Storm
252449 7.5 危険 The Cacti Group - Cacti の auth_login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-4824 2011-12-19 15:06 2011-09-26 Show GitHub Exploit DB Packet Storm
252450 4.3 警告 Atlassian - Atlassian FishEye のユーザプロファイル機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4822 2011-12-19 15:05 2011-10-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
253851 8.4 HIGH
Local 		netgear d6100_firmware
d7000_firmware
d7800_firmware
jnr1010_firmware
jwnr2010_firmware
r6100_firmware
r6220_firmware
r7500_firmware
wndr4300_firmware
wndr4500_firmware
wnr1000_… 		Certain NETGEAR devices are affected by authentication bypass. This affects D6100 before V1.0.0.55, D7000 before V1.0.1.50, D7800 before V1.0.1.24, JNR1010v2 before 1.1.0.40, JWNR2010v5 before 1.1.0.… CWE-287
Improper Authentication 		CVE-2017-18776 2024-11-21 12:20 2020-04-23 Show GitHub Exploit DB Packet Storm
253852 6.7 MEDIUM
Local 		netgear d6100_firmware
d7800_firmware
ex6150_firmware
r6100_firmware
r7500_firmware
r7800_firmware
wndr4300_firmware
wndr4500_firmware
wnr2000_firmware 		Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D6100 before V1.0.0.55, D7800 before V1.0.1.24, EX6150v2 before 1.0.0.48, R6100 before 1.0.1.14, R7500… CWE-74
Injection 		CVE-2017-18773 2024-11-21 12:20 2020-04-23 Show GitHub Exploit DB Packet Storm
253853 8.8 HIGH
Adjacent 		netgear ex3700_firmware
ex3800_firmware
ex6120_firmware
ex6130_firmware
r6300_firmware
r6700_firmware
r6900_firmware
r7000_firmware
r7300dst_firmware
r7900_firmware
r8000_firmwa… 		Certain NETGEAR devices are affected by authentication bypass. This affects EX3700 before 1.0.0.64, EX3800 before 1.0.0.64, EX6120 before 1.0.0.32, EX6130 before 1.0.0.16, R6300v2 before 1.0.4.12, R6… CWE-287
Improper Authentication 		CVE-2017-18772 2024-11-21 12:20 2020-04-23 Show GitHub Exploit DB Packet Storm
253854 4.6 MEDIUM
Physics 		netgear d6220_firmware
d6400_firmware
d7000_firmware
d7800_firmware
d8500_firmware
dgn2200_firmware
dgn2200b_firmware
ex6200_firmware
ex7000_firmware
jr6150_firmware
r6050_firmw… 		Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects D6220 before 1.0.0.40, D6400 before 1.0.0.74, D7000 before 1.0.1.60, D7800 before 1.0.1.34, D8500 b… CWE-200
Information Exposure 		CVE-2017-18769 2024-11-21 12:20 2020-04-23 Show GitHub Exploit DB Packet Storm
253855 5.5 MEDIUM
Local 		netgear r6250_firmware
r6400_firmware
r7100lg_firmware
r7300_firmware
r8300_firmware
r8500_firmware
d6220_firmware
d6400_firmware
d8500_firmware 		Certain NETGEAR devices are affected by disclosure of sensitive information. This affects R6250 before V1.0.4.8, R6400 before V1.0.1.22, R6400v2 before V1.0.2.32, R7100LG before V1.0.0.32, R7300 befo… CWE-200
Information Exposure 		CVE-2017-18789 2024-11-21 12:20 2020-04-22 Show GitHub Exploit DB Packet Storm
253856 6.7 MEDIUM
Local 		netgear d3600_firmware
d6000_firmware
d6100_firmware
d6200_firmware
d6220_firmware
d6400_firmware
d7000_firmware
d7800_firmware
d8500_firmware
dgn2200_firmware
dgn2200b_firmware… 		Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.67, D6000 before 1.0.0.67, D6100 before 1.0.0.56, D6200 before 1.1.00.24, D6220 bef… CWE-74
Injection 		CVE-2017-18788 2024-11-21 12:20 2020-04-22 Show GitHub Exploit DB Packet Storm
253857 6.7 MEDIUM
Local 		netgear r6220_firmware
r6700_firmware
r6800_firmware
wndr3700_firmware
d7000_firmware 		Certain NETGEAR devices are affected by command injection. This affects R6220 before 1.1.0.50, R6700v2 before 1.1.0.38, R6800 before 1.1.0.38, WNDR3700v5 before 1.1.0.48, and D7000 before 1.0.1.50. CWE-74
Injection 		CVE-2017-18801 2024-11-21 12:20 2020-04-22 Show GitHub Exploit DB Packet Storm
253858 6.1 MEDIUM
Local 		netgear r6700_firmware
r6800_firmware 		Certain NETGEAR devices are affected by reflected XSS. This affects R6700v2 before 1.1.0.42 and R6800 before 1.1.0.42. CWE-79
Cross-site Scripting 		CVE-2017-18800 2024-11-21 12:20 2020-04-22 Show GitHub Exploit DB Packet Storm
253859 6.2 MEDIUM
Local 		netgear r6700_firmware
r6800_firmware
d7000_firmware
d500_firmware
d1500_firmware 		Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects R6700v2 before 1.1.0.38, R6800 before 1.1.0.38, D7000 before 1.0.1.50, and D1500 before 1.0.0.25. CWE-20
 Improper Input Validation  		CVE-2017-18798 2024-11-21 12:20 2020-04-22 Show GitHub Exploit DB Packet Storm
253860 6.2 MEDIUM
Local 		netgear r6400_firmware
r7900_firmware
r8000_firmware
r8500_firmware 		Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects R6400 before 1.0.1.24, R7900 before 1.0.1.18, R8000 before 1.0.3.54, and R8500 before 1.0.2.100. CWE-200
Information Exposure 		CVE-2017-18797 2024-11-21 12:20 2020-04-22 Show GitHub Exploit DB Packet Storm