Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251981 6 警告 Broadwin
アドバンテック株式会社
- Advantech/BroadWin WebAccess におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2012-1235 2012-02-23 11:47 2012-02-21 Show GitHub Exploit DB Packet Storm
251982 6.5 警告 Broadwin
アドバンテック株式会社
- Advantech/BroadWin WebAccess における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-1234 2012-02-23 11:46 2012-02-21 Show GitHub Exploit DB Packet Storm
251983 7.5 危険 Broadwin
アドバンテック株式会社
- Advantech/BroadWin WebAccess における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-0244 2012-02-23 11:41 2012-02-21 Show GitHub Exploit DB Packet Storm
251984 7.5 危険 Broadwin
アドバンテック株式会社
- Advantech/BroadWin WebAccess の ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-0243 2012-02-23 11:40 2012-02-21 Show GitHub Exploit DB Packet Storm
251985 7.5 危険 Broadwin
アドバンテック株式会社
- Advantech/BroadWin WebAccess におけるフォーマットストリングの脆弱性 CWE-134
書式文字列の問題
CVE-2012-0242 2012-02-23 11:37 2012-02-21 Show GitHub Exploit DB Packet Storm
251986 5 警告 Broadwin
アドバンテック株式会社
- Advantech/BroadWin WebAccess におけるサービス運用妨害 (メモリ破損) の脆弱性 CWE-20
不適切な入力確認
CVE-2012-0241 2012-02-23 11:36 2012-02-21 Show GitHub Exploit DB Packet Storm
251987 7.5 危険 Broadwin
アドバンテック株式会社
- Advantech/BroadWin WebAccess の GbScriptAddUp.asp における任意のコードを実行される脆弱性 CWE-287
不適切な認証
CVE-2012-0240 2012-02-23 11:33 2012-02-21 Show GitHub Exploit DB Packet Storm
251988 5 警告 Broadwin
アドバンテック株式会社
- Advantech/BroadWin WebAccess の uaddUpAdmin.asp における管理者パスワードを変更される脆弱性 CWE-287
不適切な認証
CVE-2012-0239 2012-02-23 11:32 2012-02-21 Show GitHub Exploit DB Packet Storm
251989 7.5 危険 Broadwin
アドバンテック株式会社
- Advantech/BroadWin WebAccess の opcImg.asp におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-0238 2012-02-23 11:29 2012-02-21 Show GitHub Exploit DB Packet Storm
251990 6.4 警告 Broadwin
アドバンテック株式会社
- Advantech/BroadWin WebAccess における日付と時刻の同期設定を変更される脆弱性 CWE-119
バッファエラー
CVE-2012-0237 2012-02-23 11:27 2012-02-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
221611 9.1 CRITICAL
Network
wago pfc200_firmware An exploitable remote code execution vulnerability exists in the Cloud Connectivity functionality of WAGO PFC200 versions 03.02.02(14), 03.01.07(13), and 03.00.39(12). A specially crafted XML file wi… CWE-345
 Insufficient Verification of Data Authenticity
CVE-2019-5161 2024-11-21 13:44 2020-03-12 Show GitHub Exploit DB Packet Storm
221612 7.8 HIGH
Local
wago e\!cockpit An exploitable firmware downgrade vulnerability exists in the firmware update package functionality of the WAGO e!COCKPIT automation software v1.6.1.5. A specially crafted firmware update file can al… CWE-798
 Use of Hard-coded Credentials
CVE-2019-5158 2024-11-21 13:44 2020-03-12 Show GitHub Exploit DB Packet Storm
221613 7.2 HIGH
Network
wago pfc200_firmware An exploitable command injection vulnerability exists in the Cloud Connectivity functionality of WAGO PFC200 Firmware versions 03.02.02(14), 03.01.07(13), and 03.00.39(12). An attacker can inject OS … CWE-78
OS Command 
CVE-2019-5157 2024-11-21 13:44 2020-03-12 Show GitHub Exploit DB Packet Storm
221614 7.8 HIGH
Local
wago pfc200_firmware An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.02.02(14). A specially crafted XML cache file written to a s… CWE-78
OS Command 
CVE-2019-5173 2024-11-21 13:44 2020-03-12 Show GitHub Exploit DB Packet Storm
221615 7.8 HIGH
Local
wago pfc200_firmware An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.02.02(14). An attacker can send a specially crafted packet t… CWE-78
OS Command 
CVE-2019-5172 2024-11-21 13:44 2020-03-12 Show GitHub Exploit DB Packet Storm
221616 7.8 HIGH
Local
wago pfc200_firmware An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 version 03.02.02(14). At 0x1e3f0 the extracted dns value from the xml file is us… CWE-78
OS Command 
CVE-2019-5167 2024-11-21 13:44 2020-03-12 Show GitHub Exploit DB Packet Storm
221617 9.1 CRITICAL
Network
wago pfc200_firmware An exploitable improper host validation vulnerability exists in the Cloud Connectivity functionality of WAGO PFC200 Firmware versions 03.02.02(14), 03.01.07(13), and 03.00.39(12). A specially crafted… NVD-CWE-noinfo
CVE-2019-5160 2024-11-21 13:44 2020-03-12 Show GitHub Exploit DB Packet Storm
221618 7.8 HIGH
Local
wago e\!cockpit An exploitable improper input validation vulnerability exists in the firmware update functionality of WAGO e!COCKPIT automation software v1.6.0.7. A specially crafted firmware update file can allow a… CWE-668
 Exposure of Resource to Wrong Sphere
CVE-2019-5159 2024-11-21 13:44 2020-03-12 Show GitHub Exploit DB Packet Storm
221619 7.2 HIGH
Network
wago pfc200_firmware An exploitable command injection vulnerability exists in the cloud connectivity functionality of WAGO PFC200 versions 03.02.02(14), 03.01.07(13), and 03.00.39(12). An attacker can inject operating sy… CWE-78
OS Command 
CVE-2019-5156 2024-11-21 13:44 2020-03-12 Show GitHub Exploit DB Packet Storm
221620 7.2 HIGH
Network
wago pfc200_firmware An exploitable command injection vulnerability exists in the cloud connectivity feature of WAGO PFC200. An attacker can inject operating system commands into any of the parameter values contained in … CWE-78
OS Command 
CVE-2019-5155 2024-11-21 13:44 2020-03-12 Show GitHub Exploit DB Packet Storm