Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
249791	7.5	危険	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess の GbScriptAddUp.asp における任意のコードを実行される脆弱性	CWE-287 不適切な認証	CVE-2012-0240	2012-02-23 11:33	2012-02-21	Show	GitHub Exploit DB Packet Storm

249792	5	警告	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess の uaddUpAdmin.asp における管理者パスワードを変更される脆弱性	CWE-287 不適切な認証	CVE-2012-0239	2012-02-23 11:32	2012-02-21	Show	GitHub Exploit DB Packet Storm

249793	7.5	危険	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess の opcImg.asp におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-0238	2012-02-23 11:29	2012-02-21	Show	GitHub Exploit DB Packet Storm

249794	6.4	警告	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess における日付と時刻の同期設定を変更される脆弱性	CWE-119 バッファエラー	CVE-2012-0237	2012-02-23 11:27	2012-02-21	Show	GitHub Exploit DB Packet Storm

249795	5	警告	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2012-0236	2012-02-23 11:23	2012-02-21	Show	GitHub Exploit DB Packet Storm

249796	6	警告	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-0235	2012-02-23 11:22	2012-02-21	Show	GitHub Exploit DB Packet Storm

249797	7.5	危険	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-0234	2012-02-23 11:21	2012-02-21	Show	GitHub Exploit DB Packet Storm

249798	4.3	警告	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-0233	2012-02-23 11:20	2012-02-21	Show	GitHub Exploit DB Packet Storm

249799	10	危険	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess の ActiveX コントロールにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-4526	2012-02-23 11:19	2012-02-21	Show	GitHub Exploit DB Packet Storm

249800	7.5	危険	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess における任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-4525	2012-02-23 11:18	2012-02-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
197631	8.8	HIGH Network	accusoft	imagegear	An exploitable out-of-bounds write vulnerability exists in the store_data_buffer function of the igcore19d.dll library of Accusoft ImageGear 19.5.0. A specially crafted PNG file can cause an out-of-b…	CWE-787 Out-of-bounds Write	CVE-2020-6075	2024-11-21 14:35	2020-05-6	Show	GitHub Exploit DB Packet Storm

197632	6.1	MEDIUM Network	sap	netweaver_as_abap_business_server_pages	SAP NetWeaver AS ABAP Business Server Pages Test Application SBSPEXT_PHTMLB, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, is vulnerable to reflected Cross-Site Scripting (XSS) via …	CWE-79 Cross-site Scripting	CVE-2020-6213	2024-11-21 14:35	2020-04-25	Show	GitHub Exploit DB Packet Storm

197633	5.4	MEDIUM Network	sap	erp s\/4hana	Egypt localized withholding tax reports Clearing of Liabilities and Remittance Statement and Summary in SAP ERP (versions 618, 730, EAPPLGLO 607) and S/4 HANA (versions 100, 101, 102, 103, 104) do no…	CWE-862 Missing Authorization	CVE-2020-6212	2024-11-21 14:35	2020-04-25	Show	GitHub Exploit DB Packet Storm

197634	6.1	MEDIUM Network	sap	netweaver_as_abap_business_server_pages	SAP NetWeaver AS ABAP Business Server Pages Test Application IT00, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, does not sufficiently encode user-controlled inputs, resulting in re…	CWE-79 Cross-site Scripting	CVE-2020-6217	2024-11-21 14:35	2020-04-15	Show	GitHub Exploit DB Packet Storm

197635	6.1	MEDIUM Network	sap	netweaver_as_abap_business_server_pages	SAP NetWeaver AS ABAP Business Server Pages Test Application IT00, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, allows an attacker to redirect users to a malicious site due to insu…	CWE-601 Open Redirect	CVE-2020-6215	2024-11-21 14:35	2020-04-15	Show	GitHub Exploit DB Packet Storm

197636	6.1	MEDIUM Network	sap	businessobjects_business_intelligence_platform	SAP Business Objects Business Intelligence Platform (AdminTools), versions 4.1, 4.2, allows an attacker to redirect users to a malicious site due to insufficient URL validation and steal credentials …	CWE-601 Open Redirect	CVE-2020-6211	2024-11-21 14:35	2020-04-15	Show	GitHub Exploit DB Packet Storm

197637	9.8	CRITICAL Network	sap	businessobjects_business_intelligence_platform	SAP Business Objects Business Intelligence Platform (CMC), version 4.1, 4.2, shows cleartext password in the response, leading to Information Disclosure. It involves social engineering in order to ga…	CWE-319 CWE-522 Cleartext Transmission of Sensitive Information Insufficiently Protected Credentials	CVE-2020-6195	2024-11-21 14:35	2020-04-15	Show	GitHub Exploit DB Packet Storm

197638	9.3	CRITICAL Network	sap	commerce_cloud	SAP Commerce, versions - 6.6, 6.7, 1808, 1811, 1905, does not process XML input securely in the Rest API from Servlet xyformsweb, leading to Missing XML Validation. This affects confidentiality and a…	CWE-611 XXE	CVE-2020-6238	2024-11-21 14:35	2020-04-15	Show	GitHub Exploit DB Packet Storm

197639	7.5	HIGH Network	sap	businessobjects_business_intelligence_platform	Under certain conditions, SAP Business Objects Business Intelligence Platform, version 4.1, 4.2, dswsbobje web application allows an attacker to access information which would otherwise be restricted…	NVD-CWE-noinfo	CVE-2020-6237	2024-11-21 14:35	2020-04-15	Show	GitHub Exploit DB Packet Storm

197640	7.2	HIGH Network	sap	landscape_management adaptive_extensions	SAP Landscape Management, version 3.0, and SAP Adaptive Extensions, version 1.0, allows an attacker with admin_group privileges to change ownership and permissions (including S-user ID bit s-bit) of …	CWE-269 Improper Privilege Management	CVE-2020-6236	2024-11-21 14:35	2020-04-15	Show	GitHub Exploit DB Packet Storm