Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 7, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
224491	7.2	危険	Ruckus Wireless, Inc.	-	無線 LAN アクセスポイント ZoneFlex 2942 に認証回避の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-5030	2013-10-18 19:59	2013-10-10	Show	GitHub Exploit DB Packet Storm

224492	4.3	警告	オラクル	-	Oracle iLearning における Learner Administration に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-5845	2013-10-18 18:57	2013-10-15	Show	GitHub Exploit DB Packet Storm

224493	6.8	警告	オラクル	-	Oracle iLearning における Learner Administration に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-5822	2013-10-18 18:56	2013-10-15	Show	GitHub Exploit DB Packet Storm

224494	4	警告	オラクル	-	Oracle PeopleSoft Products の PeopleSoft Enterprise HRMS eCompensation における eCompensation に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-5847	2013-10-18 18:52	2013-10-15	Show	GitHub Exploit DB Packet Storm

224495	5	警告	オラクル	-	Oracle PeopleSoft Products の PeopleSoft Enterprise PeopleTools における Portal に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-5841	2013-10-18 18:52	2013-10-15	Show	GitHub Exploit DB Packet Storm

224496	5	警告	オラクル	-	Oracle PeopleSoft Products の PeopleSoft Enterprise PeopleTools における Business Interlink に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-5836	2013-10-18 18:51	2013-10-15	Show	GitHub Exploit DB Packet Storm

224497	5	警告	オラクル	-	Oracle Fusion Middleware の Oracle GlassFish Server における Metro に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-5816	2013-10-18 17:57	2013-10-14	Show	GitHub Exploit DB Packet Storm

224498	7.5	危険	オラクル	-	Oracle Fusion Middleware の Oracle Identity Analytics および Sun Role Manager における Security に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-5815	2013-10-18 17:57	2013-10-14	Show	GitHub Exploit DB Packet Storm

224499	5	警告	オラクル	-	Oracle Primavera Products Suite の Instantis EnterpriseTrack における脆弱性	CWE-noinfo 情報不足	CVE-2013-5859	2013-10-18 16:58	2013-10-15	Show	GitHub Exploit DB Packet Storm

224500	5.2	警告	オラクル	-	Oracle Sun Solaris における Kernel に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-5866	2013-10-18 16:52	2013-10-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
197881	9.8	CRITICAL Network	jenkins	jenkins	FilePath#renameTo and FilePath#moveAllChildrenTo in Jenkins 2.318 and earlier, LTS 2.303.2 and earlier only check 'read' agent-to-controller access permission on the source path, instead of 'delete'.	CWE-22 Path Traversal	CVE-2021-21692	2024-11-21 14:48	2021-11-5	Show	GitHub Exploit DB Packet Storm

197882	9.8	CRITICAL Network	jenkins	jenkins	Creating symbolic links is possible without the 'symlink' agent-to-controller access control permission in Jenkins 2.318 and earlier, LTS 2.303.2 and earlier.	CWE-59 Link Following	CVE-2021-21691	2024-11-21 14:48	2021-11-5	Show	GitHub Exploit DB Packet Storm

197883	9.8	CRITICAL Network	jenkins	jenkins	Agent processes are able to completely bypass file path filtering by wrapping the file operation in an agent file path in Jenkins 2.318 and earlier, LTS 2.303.2 and earlier.	CWE-22 Path Traversal	CVE-2021-21690	2024-11-21 14:48	2021-11-5	Show	GitHub Exploit DB Packet Storm

197884	9.1	CRITICAL Network	jenkins	jenkins	FilePath#unzip and FilePath#untar were not subject to any agent-to-controller access control in Jenkins 2.318 and earlier, LTS 2.303.2 and earlier.	NVD-CWE-Other	CVE-2021-21689	2024-11-21 14:48	2021-11-5	Show	GitHub Exploit DB Packet Storm

197885	7.5	HIGH Network	jenkins	jenkins	The agent-to-controller security check FilePath#reading(FileVisitor) in Jenkins 2.318 and earlier, LTS 2.303.2 and earlier does not reject any operations, allowing users to have unrestricted read acc…	CWE-862 Missing Authorization	CVE-2021-21688	2024-11-21 14:48	2021-11-5	Show	GitHub Exploit DB Packet Storm

197886	9.1	CRITICAL Network	jenkins	jenkins	Jenkins 2.318 and earlier, LTS 2.303.2 and earlier does not check agent-to-controller access to create symbolic links when unarchiving a symbolic link in FilePath#untar.	CWE-862 Missing Authorization	CVE-2021-21687	2024-11-21 14:48	2021-11-5	Show	GitHub Exploit DB Packet Storm

197887	8.1	HIGH Network	jenkins	jenkins	File path filters in the agent-to-controller security subsystem of Jenkins 2.318 and earlier, LTS 2.303.2 and earlier do not canonicalize paths, allowing operations to follow symbolic links to outsid…	CWE-59 Link Following	CVE-2021-21686	2024-11-21 14:48	2021-11-5	Show	GitHub Exploit DB Packet Storm

197888	9.1	CRITICAL Network	jenkins	jenkins	Jenkins 2.318 and earlier, LTS 2.303.2 and earlier does not check agent-to-controller access to create parent directories in FilePath#mkdirs.	CWE-862 Missing Authorization	CVE-2021-21685	2024-11-21 14:48	2021-11-5	Show	GitHub Exploit DB Packet Storm

197889	5.4	MEDIUM Network	galette	galette	Galette is a membership management web application geared towards non profit organizations. In versions prior to 0.9.5, malicious javascript code can be stored to be displayed later on self subscript…	CWE-79 Cross-site Scripting	CVE-2021-21319	2024-11-21 14:48	2021-10-26	Show	GitHub Exploit DB Packet Storm

197890	7.0	HIGH Local	php debian fedoraproject netapp oracle	php debian_linux fedora clustered_data_ontap communications_diameter_signaling_router	In PHP versions 7.3.x up to and including 7.3.31, 7.4.x below 7.4.25 and 8.0.x below 8.0.12, when running PHP FPM SAPI with main FPM daemon process running as root and child worker processes running …	CWE-787 Out-of-bounds Write	CVE-2021-21703	2024-11-21 14:48	2021-10-25	Show	GitHub Exploit DB Packet Storm