Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
230801 7.5 危険 webSPELL - webSPELL の gallery.php における SQL インジェクションの脆弱性 - CVE-2007-0502 2012-12-20 18:19 2007-01-25 Show GitHub Exploit DB Packet Storm
230802 6.8 警告 sangwan kim - Sangwan Kim phpIndexPage の config.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2007-0499 2012-12-20 18:19 2007-01-25 Show GitHub Exploit DB Packet Storm
230803 7.5 危険 sky gunning - MySpeach の up.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0498 2012-12-20 18:19 2007-01-25 Show GitHub Exploit DB Packet Storm
230804 6.8 警告 upload-service - Upload-Service の upload/top.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0497 2012-12-20 18:19 2007-01-25 Show GitHub Exploit DB Packet Storm
230805 10 危険 phpsherpa - PhpSherpa の include/config.inc.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0495 2012-12-20 18:19 2007-01-25 Show GitHub Exploit DB Packet Storm
230806 7.5 危険 webSPELL - webSPELL の gallery.php における SQL インジェクションの脆弱性 - CVE-2007-0492 2012-12-20 18:19 2007-01-24 Show GitHub Exploit DB Packet Storm
230807 6.8 警告 sky gunning - Sky GUNNING MySpeach の up.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0491 2012-12-20 18:19 2007-01-24 Show GitHub Exploit DB Packet Storm
230808 6.8 警告 visohotlink - VisoHotlink の includes/functions.visohotlink.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0489 2012-12-20 18:19 2007-01-24 Show GitHub Exploit DB Packet Storm
230809 7.5 危険 webchat.org - WebChat の defines.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0485 2012-12-20 18:19 2007-01-24 Show GitHub Exploit DB Packet Storm
230810 4.6 警告 サン・マイクロシステムズ - Sun Ray Server Software の cgi-bin/main における utadmin パスワードを取得される脆弱性 - CVE-2007-0482 2012-12-20 18:19 2007-01-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
198651 7.8 HIGH
Local
mcafee endpoint_detection_and_response Privilege Escalation vulnerability in McAfee Exploit Detection and Response (EDR) for Linux prior to 3.1.0 Hotfix 1 allows a malicious script or program to perform functions that the local executing … CWE-269
 Improper Privilege Management
CVE-2020-7287 2024-11-21 14:36 2020-05-8 Show GitHub Exploit DB Packet Storm
198652 7.8 HIGH
Local
mcafee endpoint_detection_and_response Privilege Escalation vulnerability in McAfee Exploit Detection and Response (EDR) for Windows prior to 3.1.0 Hotfix 1 allows a malicious script or program to perform functions that the local executin… CWE-269
 Improper Privilege Management
CVE-2020-7286 2024-11-21 14:36 2020-05-8 Show GitHub Exploit DB Packet Storm
198653 7.8 HIGH
Local
mcafee mvision_endpoint Privilege Escalation vulnerability in McAfee MVISION Endpoint prior to 20.5.0.94 allows a malicious script or program to perform functions that the local executing user has not been granted access to. CWE-269
 Improper Privilege Management
CVE-2020-7285 2024-11-21 14:36 2020-05-8 Show GitHub Exploit DB Packet Storm
198654 8.4 HIGH
Local
mcafee virusscan_enterprise Privilege Escalation vulnerability in McAfee VirusScan Enterprise (VSE) for Linux prior to 2.0.3 Hotfix 2635000 allows local users to delete files the user would otherwise not have access to via mani… CWE-269
 Improper Privilege Management
CVE-2020-7267 2024-11-21 14:36 2020-05-8 Show GitHub Exploit DB Packet Storm
198655 8.4 HIGH
Local
mcafee virusscan_enterprise Privilege Escalation vulnerability in McAfee VirusScan Enterprise (VSE) for Windows prior to 8.8 Patch 14 Hotfix 116778 allows local users to delete files the user would otherwise not have access to … CWE-269
 Improper Privilege Management
CVE-2020-7266 2024-11-21 14:36 2020-05-8 Show GitHub Exploit DB Packet Storm
198656 8.4 HIGH
Local
mcafee endpoint_security Privilege Escalation vulnerability in McAfee Endpoint Security (ENS) for Mac prior to 10.6.9 allows local users to delete files the user would otherwise not have access to via manipulating symbolic l… CWE-269
 Improper Privilege Management
CVE-2020-7265 2024-11-21 14:36 2020-05-8 Show GitHub Exploit DB Packet Storm
198657 8.4 HIGH
Local
mcafee endpoint_security Privilege Escalation vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 Hotfix 199847 allows local users to delete files the user would otherwise not have access to via manip… CWE-269
 Improper Privilege Management
CVE-2020-7264 2024-11-21 14:36 2020-05-8 Show GitHub Exploit DB Packet Storm
198658 7.8 HIGH
Local
eaton intelligent_power_manager Incorrect Privilege Assignment vulnerability in Eaton's Intelligent Power Manager (IPM) v1.67 & prior allow non-admin users to upload the system configuration files by sending specially crafted reque… CWE-269
 Improper Privilege Management
CVE-2020-6652 2024-11-21 14:36 2020-05-8 Show GitHub Exploit DB Packet Storm
198659 7.3 HIGH
Local
eaton intelligent_power_manager Improper Input Validation in Eaton's Intelligent Power Manager (IPM) v 1.67 & prior on file name during configuration file import functionality allows attackers to perform command injection or code e… CWE-20
CWE-78
 Improper Input Validation 
OS Command 
CVE-2020-6651 2024-11-21 14:36 2020-05-8 Show GitHub Exploit DB Packet Storm
198660 5.5 MEDIUM
Local
ledger monero A flawed protocol design in the Ledger Monero app before 1.5.1 for Ledger Nano and Ledger S devices allows a local attacker to extract the master spending key by sending crafted messages to this app … CWE-327
 Use of a Broken or Risky Cryptographic Algorithm
CVE-2020-6861 2024-11-21 14:36 2020-05-6 Show GitHub Exploit DB Packet Storm