Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
230801 5 警告 webSPELL - WebSPELL の picture.php における任意のファイルを読まれる脆弱性 - CVE-2007-2368 2012-12-20 18:19 2007-04-30 Show GitHub Exploit DB Packet Storm
230802 10 危険 wserve http server - whttp の wserve_console.exe におけるバッファオーバーフローの脆弱性 - CVE-2007-2367 2012-12-20 18:19 2007-04-30 Show GitHub Exploit DB Packet Storm
230803 4.9 警告 シマンテック - Symantec Norton Ghost などの製品における資格情報を取得される脆弱性 - CVE-2007-2361 2012-12-20 18:19 2007-04-26 Show GitHub Exploit DB Packet Storm
230804 6.8 警告 シマンテック - Symantec Norton Ghost などの製品における資格情報を取得される脆弱性 - CVE-2007-2360 2012-12-20 18:19 2007-04-26 Show GitHub Exploit DB Packet Storm
230805 7.2 危険 シマンテック - Symantec Norton Ghost などの製品で使用される Ghost Service Manager におけるバッファオーバーフローの脆弱性 - CVE-2007-2359 2012-12-20 18:19 2007-04-26 Show GitHub Exploit DB Packet Storm
230806 6.8 警告 sinecms - SineCms の mods/Core/result.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2357 2012-12-20 18:19 2007-04-30 Show GitHub Exploit DB Packet Storm
230807 7.8 危険 Progress Software Corporation - Progress Webspeed Messenger における重要な情報を取得される脆弱性 - CVE-2007-2354 2012-12-20 18:19 2007-04-30 Show GitHub Exploit DB Packet Storm
230808 7.5 危険 php-generics - PHP-Generics における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2346 2012-12-20 18:19 2007-04-27 Show GitHub Exploit DB Packet Storm
230809 7.5 危険 phpbandmanager - phpBandManager の suite/index.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2341 2012-12-20 18:19 2007-04-27 Show GitHub Exploit DB Packet Storm
230810 6.8 警告 phporacleview - phporacleview の inc/include_all.inc.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2007-2340 2012-12-20 18:19 2007-04-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197831 7.5 HIGH
Network
abb control_builder_safe
800xa_system
compact_hmi
For the Central Licensing Server component used in ABB products ABB Ability™ System 800xA and related system extensions versions 5.1, 6.0 and 6.1, Compact HMI versions 5.1 and 6.0, Control Builder Sa… CWE-20
 Improper Input Validation 
CVE-2020-8475 2024-11-21 14:38 2020-04-29 Show GitHub Exploit DB Packet Storm
197832 7.8 HIGH
Local
abb control_builder_safe
800xa_system
compact_hmi
For the Central Licensing Server component used in ABB products ABB Ability™ System 800xA and related system extensions versions 5.1, 6.0 and 6.1, Compact HMI versions 5.1 and 6.0, Control Builder Sa… CWE-276
Incorrect Default Permissions 
CVE-2020-8471 2024-11-21 14:38 2020-04-29 Show GitHub Exploit DB Packet Storm
197833 7.8 HIGH
Local
abb control_builder_m
mms_server
opc_server
base_software
Insufficient folder permissions used by system functions in ABB System 800xA products OPCServer for AC800M (versions 6.0 and earlier) and Control Builder M Professional, MMSServer for AC800M, Base So… CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2020-8472 2024-11-21 14:38 2020-04-29 Show GitHub Exploit DB Packet Storm
197834 8.8 HIGH
Network
abb 800xa_information_manager The installations for ABB System 800xA Information Manager versions 5.1, 6.0 to 6.0.3.2 and 6.1 wrongly contain an auxiliary component. An attacker is able to use this for an XSS-like attack to an au… CWE-79
Cross-site Scripting
CVE-2020-8477 2024-11-21 14:38 2020-04-23 Show GitHub Exploit DB Packet Storm
197835 7.8 HIGH
Local
abb 800xa_base_system Weak Registry permissions in ABB System 800xA Base allow low privileged users to read and modify registry settings related to control system functionality, allowing an authenticated attacker to cause… CWE-269
 Improper Privilege Management
CVE-2020-8474 2024-11-21 14:38 2020-04-23 Show GitHub Exploit DB Packet Storm
197836 6.2 MEDIUM
Physics
bitdefender antivirus_2020 A vulnerability in the improper handling of junctions in Bitdefender Antivirus Free can allow an unprivileged user to substitute a quarantined file, and restore it to a privileged location. This issu… CWE-59
Link Following
CVE-2020-8099 2024-11-21 14:38 2020-04-21 Show GitHub Exploit DB Packet Storm
197837 7.8 HIGH
Local
lenovo vantage A privilege escalation vulnerability was reported in LenovoBatteryGaugePackage for Lenovo System Interface Foundation bundled in Lenovo Vantage prior to version 10.2003.10.0 that could allow an authe… CWE-269
 Improper Privilege Management
CVE-2020-8327 2024-11-21 14:38 2020-04-15 Show GitHub Exploit DB Packet Storm
197838 5.5 MEDIUM
Local
lenovo system_interface_foundation A vulnerability was reported in LenovoAppScenarioPluginSystem for Lenovo System Interface Foundation prior to version 1.2.184.31 that could allow unsigned DLL files to be executed. CWE-20
 Improper Input Validation 
CVE-2020-8324 2024-11-21 14:38 2020-04-15 Show GitHub Exploit DB Packet Storm
197839 7.8 HIGH
Local
lenovo system_interface_foundation A privilege escalation vulnerability was reported in Lenovo System Interface Foundation prior to version 1.1.19.3 that could allow an authenticated user to execute code with elevated privileges. NVD-CWE-noinfo
CVE-2020-8319 2024-11-21 14:38 2020-04-15 Show GitHub Exploit DB Packet Storm
197840 7.8 HIGH
Local
lenovo system_interface_foundation A privilege escalation vulnerability was reported in the LenovoSystemUpdatePlugin for Lenovo System Interface Foundation prior to version that could allow an authenticated user to execute code with e… NVD-CWE-noinfo
CVE-2020-8318 2024-11-21 14:38 2020-04-15 Show GitHub Exploit DB Packet Storm