Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":July 1, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 253241 | 3.5 | 注意 | Geoff Davies | - | Drupal 用 Contact Forms モジュールにおけるモジュールの設定を変更される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2012-2340 | 2012-05-23 19:12 | 2012-05-21 | Show | GitHub Exploit DB Packet Storm |
| 253242 | 4.3 | 警告 | Nancy Wichmann | - | Drupal 用 Glossary モジュールにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2012-2339 | 2012-05-23 19:00 | 2012-05-21 | Show | GitHub Exploit DB Packet Storm |
| 253243 | 2.6 | 注意 | Ishmael Sanchez | - | Drupal 用 Aberdeen テーマの aberdeen_breadcrumb 関数におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2012-2907 | 2012-05-23 18:57 | 2012-05-21 | Show | GitHub Exploit DB Packet Storm |
| 253244 | 5 | 警告 | mark pilgrim | - | Universal Feed Parser におけるサービス運用妨害 (メモリ消費) の脆弱性 |
CWE-399
リソース管理の問題 |
CVE-2012-2921 | 2012-05-23 18:50 | 2012-05-2 | Show | GitHub Exploit DB Packet Storm |
| 253245 | 4.3 | 警告 | Weston Ruter | - | WordPress 用 User Photo プラグインにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2012-2920 | 2012-05-23 18:48 | 2012-05-21 | Show | GitHub Exploit DB Packet Storm |
| 253246 | 4.3 | 警告 | Andrew Killen | - | WordPress 用 Share and Follow プラグインにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2012-2917 | 2012-05-23 18:47 | 2012-05-21 | Show | GitHub Exploit DB Packet Storm |
| 253247 | 4.3 | 警告 | dlo | - | WordPress 用 Sabre プラグインにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2012-2916 | 2012-05-23 18:46 | 2012-05-21 | Show | GitHub Exploit DB Packet Storm |
| 253248 | 4.3 | 警告 | Hind | - | WordPress 用 Leaflet プラグインにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2012-2913 | 2012-05-23 18:41 | 2012-05-21 | Show | GitHub Exploit DB Packet Storm |
| 253249 | 4.3 | 警告 | Kolja Schleich | - | WordPress 用 LeagueManager プラグインにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2012-2912 | 2012-05-23 18:25 | 2012-05-21 | Show | GitHub Exploit DB Packet Storm |
| 253250 | 5 | 警告 | Chevereto Software | - | Chevereto の Upload/engine.php におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2012-2919 | 2012-05-23 18:19 | 2012-05-21 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:July 1, 2026, 4:27 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 245691 | 9.8 |
CRITICAL
Network |
netgear |
wac505_firmware wac510_firmware |
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects WAC505 before 5.0.0.17 and WAC510 before 5.0.0.17. |
CWE-787
Out-of-bounds Write |
CVE-2018-21133 | 2024-11-21 13:02 | 2020-04-24 | Show | GitHub Exploit DB Packet Storm |
| 245692 | 7.5 |
HIGH
Network |
netgear |
d1500_firmware d500_firmware d6100_firmware d6200_firmware d6220_firmware d6400_firmware d7000_firmware d7800_firmware d8500_firmware dc112a_firmware dgn2200b_firmware
Certain NETGEAR devices are affected by disclosure of sensitive information. This affects D1500 before 1.0.0.27, D500 before 1.0.0.27, D6100 before 1.0.0.58, D6200 before 1.1.00.30, D6220 before 1.0.…
|
CWE-200
|
Information Exposure
CVE-2018-21139
|
2024-11-21 13:02 |
2020-04-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 245693 | 7.2 |
HIGH
Network |
netgear |
r6700_firmware r7500_firmware r7800_firmware r8900_firmware r9000_firmware wndr3700_firmware wndr4300_firmware wndr4500_firmware wnr2000_firmware |
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R6700 before 1.0.1.48, R7500 before 1.0.0.124, R7800 before 1.0.2.58, R8900 before 1.0.4.2… |
CWE-787
Out-of-bounds Write |
CVE-2018-21135 | 2024-11-21 13:02 | 2020-04-24 | Show | GitHub Exploit DB Packet Storm |
| 245694 | 9.8 |
CRITICAL
Network |
netgear |
r6700_firmware r7900_firmware r6900_firmware r7000p_firmware r6900p_firmware r6250_firmware r6300_firmware r6400_firmware r7000_firmware r7100lg_firmware r7300_firmware<… |
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects R6700 before 1.0.1.48, R7900 before 1.0.2.16, R6900 before 1.0.1.48, R7000P before 1… |
CWE-787
Out-of-bounds Write |
CVE-2018-21134 | 2024-11-21 13:02 | 2020-04-24 | Show | GitHub Exploit DB Packet Storm |
| 245695 | 9.8 |
CRITICAL
Network |
netgear |
wac505_firmware wac510_firmware |
Certain NETGEAR devices are affected by authentication bypass. This affects WAC505 before 5.0.0.17 and WAC510 before 5.0.0.17. |
CWE-306
Missing Authentication for Critical Function |
CVE-2018-21132 | 2024-11-21 13:02 | 2020-04-24 | Show | GitHub Exploit DB Packet Storm |
| 245696 | 9.1 |
CRITICAL
Network |
netgear |
wac505_firmware wac510_firmware |
Certain NETGEAR devices are affected by unauthenticated firmware downgrade. This affects WAC505 before 5.0.0.17 and WAC510 before 5.0.0.17. |
NVD-CWE-noinfo
|
CVE-2018-21131 | 2024-11-21 13:02 | 2020-04-24 | Show | GitHub Exploit DB Packet Storm |
| 245697 | 6.8 |
MEDIUM
Adjacent |
netgear | r7800_firmware | NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user. |
CWE-78
OS Command |
CVE-2018-21110 | 2024-11-21 13:02 | 2020-04-24 | Show | GitHub Exploit DB Packet Storm |
| 245698 | 6.8 |
MEDIUM
Adjacent |
netgear | r7800_firmware | NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user. |
CWE-78
OS Command |
CVE-2018-21109 | 2024-11-21 13:02 | 2020-04-24 | Show | GitHub Exploit DB Packet Storm |
| 245699 | 6.8 |
MEDIUM
Adjacent |
netgear | r7800_firmware | NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user. |
CWE-78
OS Command |
CVE-2018-21108 | 2024-11-21 13:02 | 2020-04-24 | Show | GitHub Exploit DB Packet Storm |
| 245700 | 6.8 |
MEDIUM
Adjacent |
netgear | r7800_firmware | NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user. |
CWE-78
OS Command |
CVE-2018-21107 | 2024-11-21 13:02 | 2020-04-24 | Show | GitHub Exploit DB Packet Storm |