Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
224271 7.4 危険 レッドハット - Red Hat Enterprise Virtualization Hypervisor などの製品で使用される libspice における任意の QEMU メモリを読まれるまたは書き込まれる脆弱性 CWE-119
バッファエラー
CVE-2010-0430 2014-01-6 15:23 2010-03-30 Show GitHub Exploit DB Packet Storm
224272 4.3 警告 マイクロソフト - Windows XP 上で稼働する Microsoft Windows Movie Maker におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2013-4858 2014-01-6 15:03 2013-07-18 Show GitHub Exploit DB Packet Storm
224273 9.3 危険 マイクロソフト - Microsoft Internet Explorer 9 および 10 における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2013-3846 2014-01-6 15:01 2013-07-9 Show GitHub Exploit DB Packet Storm
224274 10 危険 Zimbra - Zimbra Collaboration Server におけるクリティカルな影響を受ける脆弱性 CWE-noinfo
情報不足
CVE-2013-7217 2013-12-27 11:55 2013-12-12 Show GitHub Exploit DB Packet Storm
224275 5.2 警告 Xen プロジェクト - Xen の XEN_DOMCTL_getmemlist hypercall におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2013-4553 2013-12-27 11:31 2013-11-26 Show GitHub Exploit DB Packet Storm
224276 5 警告 FFmpeg - FFmpeg の libavcodec/h264.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2013-4358 2013-12-27 11:26 2013-09-16 Show GitHub Exploit DB Packet Storm
224277 2.6 注意 FFmpeg - FFmpeg の libavformat/utils.c の av_probe_input_buffer 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2012-6618 2013-12-27 11:25 2012-12-5 Show GitHub Exploit DB Packet Storm
224278 4.3 警告 FFmpeg - FFmpeg の ffserver.c の prepare_sdp_description 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2012-6617 2013-12-27 11:24 2012-12-10 Show GitHub Exploit DB Packet Storm
224279 5 警告 FFmpeg - FFmpeg の libavcodec/movtextdec.c の mov_text_decode_frame 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2012-6616 2013-12-27 11:24 2012-12-31 Show GitHub Exploit DB Packet Storm
224280 4.3 警告 FFmpeg - FFmpeg の libavcodec/ass_split.c の ff_ass_split_override_codes 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2012-6615 2013-12-27 11:23 2012-12-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
200041 6.1 MEDIUM
Network
jenkins tics Jenkins TICS Plugin 2020.3.0.6 and earlier does not escape TICS service responses, resulting in a cross-site scripting (XSS) vulnerability exploitable by attackers able to control TICS service respon… CWE-79
Cross-site Scripting
CVE-2021-21613 2024-11-21 14:48 2021-01-14 Show GitHub Exploit DB Packet Storm
200042 5.5 MEDIUM
Local
jenkins tracetronic_ecu-test Jenkins TraceTronic ECU-TEST Plugin 2.23.1 and earlier stores credentials unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the J… CWE-522
 Insufficiently Protected Credentials
CVE-2021-21612 2024-11-21 14:48 2021-01-14 Show GitHub Exploit DB Packet Storm
200043 5.4 MEDIUM
Network
jenkins jenkins Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not escape display names and IDs of item types shown on the New Item page, resulting in a stored cross-site scripting (XSS) vulnerability explo… CWE-79
Cross-site Scripting
CVE-2021-21611 2024-11-21 14:48 2021-01-14 Show GitHub Exploit DB Packet Storm
200044 6.1 MEDIUM
Network
jenkins jenkins Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not implement any restrictions for the URL rendering a formatted preview of markup passed as a query parameter, resulting in a reflected cross-… CWE-79
Cross-site Scripting
CVE-2021-21610 2024-11-21 14:48 2021-01-14 Show GitHub Exploit DB Packet Storm
200045 5.3 MEDIUM
Network
jenkins jenkins Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not correctly match requested URLs to the list of always accessible paths, allowing attackers without Overall/Read permission to access some UR… CWE-863
 Incorrect Authorization
CVE-2021-21609 2024-11-21 14:48 2021-01-14 Show GitHub Exploit DB Packet Storm
200046 5.4 MEDIUM
Network
jenkins jenkins Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not escape button labels in the Jenkins UI, resulting in a cross-site scripting (XSS) vulnerability exploitable by attackers with the ability t… CWE-79
Cross-site Scripting
CVE-2021-21608 2024-11-21 14:48 2021-01-14 Show GitHub Exploit DB Packet Storm
200047 6.5 MEDIUM
Network
jenkins jenkins Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not limit sizes provided as query parameters to graph-rendering URLs, allowing attackers to request crafted URLs that use all available memory … CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2021-21607 2024-11-21 14:48 2021-01-14 Show GitHub Exploit DB Packet Storm
200048 4.3 MEDIUM
Network
jenkins jenkins Jenkins 2.274 and earlier, LTS 2.263.1 and earlier improperly validates the format of a provided fingerprint ID when checking for its existence allowing an attacker to check for the existence of XML … CWE-20
 Improper Input Validation 
CVE-2021-21606 2024-11-21 14:48 2021-01-14 Show GitHub Exploit DB Packet Storm
200049 8.0 HIGH
Network
jenkins jenkins Jenkins 2.274 and earlier, LTS 2.263.1 and earlier allows users with Agent/Configure permission to choose agent names that cause Jenkins to override the global `config.xml` file. CWE-22
Path Traversal
CVE-2021-21605 2024-11-21 14:48 2021-01-14 Show GitHub Exploit DB Packet Storm
200050 8.0 HIGH
Network
jenkins jenkins Jenkins 2.274 and earlier, LTS 2.263.1 and earlier allows attackers with permission to create or configure various objects to inject crafted content into Old Data Monitor that results in the instanti… CWE-502
 Deserialization of Untrusted Data
CVE-2021-21604 2024-11-21 14:48 2021-01-14 Show GitHub Exploit DB Packet Storm