Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 8, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
227171 4.3 警告 fedorahosted.org - cronie におけるファイル記述子が漏えいする脆弱性 CWE-200
情報漏えい
CVE-2012-6097 2013-04-11 17:35 2013-01-9 Show GitHub Exploit DB Packet Storm
227172 2.1 注意 Gluster, Inc.
レッドハット
- Red Hat Storage の GlusterFS 機能における任意のファイルを上書きされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-5635 2013-04-11 17:35 2013-03-28 Show GitHub Exploit DB Packet Storm
227173 4 警告 OpenStack
Canonical
- 複数の OpenStack 製品におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2013-1838 2013-04-11 14:57 2013-03-15 Show GitHub Exploit DB Packet Storm
227174 4.3 警告 フェンリル株式会社 - Sleipnir for Windows におけるアドレスバー偽装の脆弱性 CWE-noinfo
情報不足
CVE-2013-2303 2013-04-11 12:01 2013-04-11 Show GitHub Exploit DB Packet Storm
227175 7.5 危険 アドビシステムズ - Adobe ColdFusion におけるユーザになりすまされる脆弱性 CWE-noinfo
情報不足
CVE-2013-1387 2013-04-11 11:57 2013-04-9 Show GitHub Exploit DB Packet Storm
227176 7.5 危険 アドビシステムズ - Adobe ColdFusion における ColdFusion Administrator コンソールへアクセスされる脆弱性 CWE-noinfo
情報不足
CVE-2013-1388 2013-04-11 11:53 2013-04-9 Show GitHub Exploit DB Packet Storm
227177 10 危険 アドビシステムズ - Adobe Shockwave Player における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2013-1386 2013-04-11 11:21 2013-04-9 Show GitHub Exploit DB Packet Storm
227178 10 危険 アドビシステムズ - Adobe Shockwave Player における ASLR 保護メカニズムを回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-1385 2013-04-11 11:20 2013-04-9 Show GitHub Exploit DB Packet Storm
227179 10 危険 アドビシステムズ - Adobe Shockwave Player における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2013-1384 2013-04-11 11:20 2013-04-9 Show GitHub Exploit DB Packet Storm
227180 10 危険 アドビシステムズ - Adobe Shockwave Player におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2013-1383 2013-04-11 11:19 2013-04-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
208351 4.3 MEDIUM
Network
jenkins fortify Jenkins Fortify Plugin 19.1.29 and earlier stores proxy server passwords unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or … CWE-522
 Insufficiently Protected Credentials
CVE-2020-2107 2024-11-21 14:24 2020-01-30 Show GitHub Exploit DB Packet Storm
208352 5.4 MEDIUM
Network
jenkins code_coverage_api Jenkins Code Coverage API Plugin 1.1.2 and earlier does not escape the filename of the coverage report used in its view, resulting in a stored XSS vulnerability exploitable by users able to change jo… CWE-79
Cross-site Scripting
CVE-2020-2106 2024-11-21 14:24 2020-01-30 Show GitHub Exploit DB Packet Storm
208353 5.4 MEDIUM
Network
jenkins jenkins REST API endpoints in Jenkins 2.218 and earlier, LTS 2.204.1 and earlier were vulnerable to clickjacking attacks. CWE-1021
 Improper Restriction of Rendered UI Layers or Frames
CVE-2020-2105 2024-11-21 14:24 2020-01-30 Show GitHub Exploit DB Packet Storm
208354 4.3 MEDIUM
Network
jenkins jenkins Jenkins 2.218 and earlier, LTS 2.204.1 and earlier allowed users with Overall/Read access to view a JVM memory usage chart. CWE-863
 Incorrect Authorization
CVE-2020-2104 2024-11-21 14:24 2020-01-30 Show GitHub Exploit DB Packet Storm
208355 5.4 MEDIUM
Network
jenkins jenkins Jenkins 2.218 and earlier, LTS 2.204.1 and earlier exposed session identifiers on a user's detail object in the whoAmI diagnostic page. CWE-200
Information Exposure
CVE-2020-2103 2024-11-21 14:24 2020-01-30 Show GitHub Exploit DB Packet Storm
208356 5.3 MEDIUM
Network
jenkins jenkins Jenkins 2.218 and earlier, LTS 2.204.1 and earlier used a non-constant time comparison function when validating an HMAC. CWE-203
 Information Exposure Through Discrepancy
CVE-2020-2102 2024-11-21 14:24 2020-01-30 Show GitHub Exploit DB Packet Storm
208357 5.3 MEDIUM
Network
jenkins jenkins Jenkins 2.218 and earlier, LTS 2.204.1 and earlier did not use a constant-time comparison function for validating connection secrets, which could potentially allow an attacker to use a timing attack … CWE-203
 Information Exposure Through Discrepancy
CVE-2020-2101 2024-11-21 14:24 2020-01-30 Show GitHub Exploit DB Packet Storm
208358 5.8 MEDIUM
Network
jenkins jenkins Jenkins 2.218 and earlier, LTS 2.204.1 and earlier was vulnerable to a UDP amplification reflection denial of service attack on port 33848. NVD-CWE-Other
CVE-2020-2100 2024-11-21 14:24 2020-01-30 Show GitHub Exploit DB Packet Storm
208359 8.6 HIGH
Network
jenkins jenkins Jenkins 2.213 and earlier, LTS 2.204.1 and earlier improperly reuses encryption key parameters in the Inbound TCP Agent Protocol/3, allowing unauthorized attackers with knowledge of agent names to ob… CWE-330
 Use of Insufficiently Random Values
CVE-2020-2099 2024-11-21 14:24 2020-01-30 Show GitHub Exploit DB Packet Storm
208360 8.8 HIGH
Network
jenkins sounds A cross-site request forgery vulnerability in Jenkins Sounds Plugin 0.5 and earlier allows attacker to execute arbitrary OS commands as the OS user account running Jenkins. CWE-352
 Origin Validation Error
CVE-2020-2098 2024-11-21 14:24 2020-01-16 Show GitHub Exploit DB Packet Storm