Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
224451 5 警告 Puppet
Canonical
オラクル		 - Puppet における SSLv2 ダウングレード攻撃を実行される脆弱性 CWE-noinfo
情報不足 		CVE-2013-1654 2014-01-22 14:17 2013-03-12 Show GitHub Exploit DB Packet Storm
224452 5 警告 ウェブセンス
オラクル		 - Websense Email Security の SMTP コンポーネントにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2012-4605 2014-01-22 14:08 2012-08-23 Show GitHub Exploit DB Packet Storm
224453 7.8 危険 サイバートラスト株式会社
Apache Software Foundation
オラクル		 - Apache Tomcat のデフォルト設定における SSL 通信により安全でない暗号スイートが適用される問題 CWE-DesignError
CVE-2007-1858 2014-01-22 13:56 2007-05-9 Show GitHub Exploit DB Packet Storm
224454 6.8 警告 サイバートラスト株式会社
Mozilla Foundation
サン・マイクロシステムズ
ターボリナックス
ヒューレット・パッカード
オラクル
レッドハット		 - Mozilla Network Security Services (NSS) における SSLv2 サーバでのスタックオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-0009 2014-01-22 13:50 2007-02-26 Show GitHub Exploit DB Packet Storm
224455 6.8 警告 VMware - VMware vCloud Director におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2014-1211 2014-01-22 11:29 2014-01-16 Show GitHub Exploit DB Packet Storm
224456 3.3 注意 VMware - 複数の VMware 製品におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2014-1208 2014-01-22 11:29 2014-01-16 Show GitHub Exploit DB Packet Storm
224457 4.3 警告 VMware - VMware ESXi および ESX におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2014-1207 2014-01-22 11:29 2014-01-16 Show GitHub Exploit DB Packet Storm
224458 7.5 危険 Sonatype Inc. - Sonatype Nexus における任意のオブジェクトを作成される脆弱性 CWE-94
コード・インジェクション 		CVE-2014-0792 2014-01-22 11:04 2014-01-7 Show GitHub Exploit DB Packet Storm
224459 4.3 警告 The GetSimple Team - GetSimple CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-7243 2014-01-21 17:06 2013-12-31 Show GitHub Exploit DB Packet Storm
224460 6.8 警告 Conceptronic - Conceptronic CIPCAMPTIWL Camera のファームウェアにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2013-7204 2014-01-21 17:06 2013-12-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 19, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
200211 9.1 CRITICAL
Network 		jenkins jenkins Jenkins 2.318 and earlier, LTS 2.303.2 and earlier allows any agent to read and write the contents of any build directory stored in Jenkins with very few restrictions. NVD-CWE-Other
CVE-2021-21697 2024-11-21 14:48 2021-11-5 Show GitHub Exploit DB Packet Storm
200212 9.8 CRITICAL
Network 		jenkins jenkins Jenkins 2.318 and earlier, LTS 2.303.2 and earlier does not limit agent read/write access to the libs/ directory inside build directories when using the FilePath APIs, allowing attackers in control o… NVD-CWE-Other
CVE-2021-21696 2024-11-21 14:48 2021-11-5 Show GitHub Exploit DB Packet Storm
200213 8.8 HIGH
Network 		jenkins jenkins FilePath#listFiles lists files outside directories that agents are allowed to access when following symbolic links in Jenkins 2.318 and earlier, LTS 2.303.2 and earlier. CWE-59
Link Following 		CVE-2021-21695 2024-11-21 14:48 2021-11-5 Show GitHub Exploit DB Packet Storm
200214 9.8 CRITICAL
Network 		jenkins jenkins FilePath#toURI, FilePath#hasSymlink, FilePath#absolutize, FilePath#isDescendant, and FilePath#get*DiskSpace do not check any permissions in Jenkins 2.318 and earlier, LTS 2.303.2 and earlier. CWE-862
 Missing Authorization 		CVE-2021-21694 2024-11-21 14:48 2021-11-5 Show GitHub Exploit DB Packet Storm
200215 9.8 CRITICAL
Network 		jenkins jenkins When creating temporary files, agent-to-controller access to create those files is only checked after they've been created in Jenkins 2.318 and earlier, LTS 2.303.2 and earlier. CWE-863
 Incorrect Authorization 		CVE-2021-21693 2024-11-21 14:48 2021-11-5 Show GitHub Exploit DB Packet Storm
200216 9.8 CRITICAL
Network 		jenkins jenkins FilePath#renameTo and FilePath#moveAllChildrenTo in Jenkins 2.318 and earlier, LTS 2.303.2 and earlier only check 'read' agent-to-controller access permission on the source path, instead of 'delete'. CWE-22
Path Traversal 		CVE-2021-21692 2024-11-21 14:48 2021-11-5 Show GitHub Exploit DB Packet Storm
200217 9.8 CRITICAL
Network 		jenkins jenkins Creating symbolic links is possible without the 'symlink' agent-to-controller access control permission in Jenkins 2.318 and earlier, LTS 2.303.2 and earlier. CWE-59
Link Following 		CVE-2021-21691 2024-11-21 14:48 2021-11-5 Show GitHub Exploit DB Packet Storm
200218 9.8 CRITICAL
Network 		jenkins jenkins Agent processes are able to completely bypass file path filtering by wrapping the file operation in an agent file path in Jenkins 2.318 and earlier, LTS 2.303.2 and earlier. CWE-22
Path Traversal 		CVE-2021-21690 2024-11-21 14:48 2021-11-5 Show GitHub Exploit DB Packet Storm
200219 9.1 CRITICAL
Network 		jenkins jenkins FilePath#unzip and FilePath#untar were not subject to any agent-to-controller access control in Jenkins 2.318 and earlier, LTS 2.303.2 and earlier. NVD-CWE-Other
CVE-2021-21689 2024-11-21 14:48 2021-11-5 Show GitHub Exploit DB Packet Storm
200220 7.5 HIGH
Network 		jenkins jenkins The agent-to-controller security check FilePath#reading(FileVisitor) in Jenkins 2.318 and earlier, LTS 2.303.2 and earlier does not reject any operations, allowing users to have unrestricted read acc… CWE-862
 Missing Authorization 		CVE-2021-21688 2024-11-21 14:48 2021-11-5 Show GitHub Exploit DB Packet Storm