Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227241 6.4 警告 xzeroscripts - XZero Community Classifieds の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-6567 2012-12-20 18:34 2007-12-28 Show GitHub Exploit DB Packet Storm
227242 7.5 危険 xzeroscripts - XZero Community Classifieds の post.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6566 2012-12-20 18:34 2007-12-28 Show GitHub Exploit DB Packet Storm
227243 5 警告 tcpreen - TCPreen の FD_SET の使用におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-6562 2012-12-20 18:34 2007-12-27 Show GitHub Exploit DB Packet Storm
227244 4.3 警告 totalplayer - TotalPlayer におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2007-6558 2012-12-20 18:34 2007-12-27 Show GitHub Exploit DB Packet Storm
227245 7.5 危険 websihirbazi - websihirbazi における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6556 2012-12-20 18:34 2007-12-27 Show GitHub Exploit DB Packet Storm
227246 7.5 危険 pmos helpdesk - PMOS Help Desk の form.php における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2007-6550 2012-12-20 18:34 2007-12-27 Show GitHub Exploit DB Packet Storm
227247 7.5 危険 runcms - RunCMS における脆弱性 CWE-DesignError
CVE-2007-6549 2012-12-20 18:34 2007-12-27 Show GitHub Exploit DB Packet Storm
227248 7.5 危険 runcms - RunCMS における任意の PHP コード挿入される脆弱性 CWE-94
コード・インジェクション 		CVE-2007-6548 2012-12-20 18:34 2007-12-27 Show GitHub Exploit DB Packet Storm
227249 6.8 警告 runcms - RunCMS におけるパスワードを変更される脆弱性 CWE-DesignError
CVE-2007-6547 2012-12-20 18:34 2007-12-27 Show GitHub Exploit DB Packet Storm
227250 6.4 警告 runcms - RunCMS におけるセッションをハイジャックされる脆弱性 CWE-DesignError
CVE-2007-6546 2012-12-20 18:34 2007-12-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199491 7.1 HIGH
Network 		jenkins rundeck Jenkins Rundeck Plugin 3.6.6 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. CWE-611
XXE 		CVE-2020-2144 2024-11-21 14:24 2020-03-10 Show GitHub Exploit DB Packet Storm
199492 5.3 MEDIUM
Network 		jenkins logstash Jenkins Logstash Plugin 2.3.1 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure. CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2020-2143 2024-11-21 14:24 2020-03-10 Show GitHub Exploit DB Packet Storm
199493 4.3 MEDIUM
Network 		jenkins p4 A missing permission check in Jenkins P4 Plugin 1.10.10 and earlier allows attackers with Overall/Read permission to trigger builds. CWE-862
 Missing Authorization 		CVE-2020-2142 2024-11-21 14:24 2020-03-10 Show GitHub Exploit DB Packet Storm
199494 4.3 MEDIUM
Network 		jenkins p4 A cross-site request forgery vulnerability in Jenkins P4 Plugin 1.10.10 and earlier allows attackers to trigger builds or add a labels in Perforce. CWE-352
 Origin Validation Error 		CVE-2020-2141 2024-11-21 14:24 2020-03-10 Show GitHub Exploit DB Packet Storm
199495 6.1 MEDIUM
Network 		jenkins audit_trail Jenkins Audit Trail Plugin 3.2 and earlier does not escape the error message for the URL Patterns field form validation, resulting in a reflected cross-site scripting vulnerability. CWE-79
Cross-site Scripting 		CVE-2020-2140 2024-11-21 14:24 2020-03-10 Show GitHub Exploit DB Packet Storm
199496 6.5 MEDIUM
Network 		jenkins cobertura An arbitrary file write vulnerability in Jenkins Cobertura Plugin 1.15 and earlier allows attackers able to control the coverage report file contents to overwrite any file on the Jenkins master file … CWE-22
Path Traversal 		CVE-2020-2139 2024-11-21 14:24 2020-03-10 Show GitHub Exploit DB Packet Storm
199497 7.1 HIGH
Network 		jenkins cobertura Jenkins Cobertura Plugin 1.15 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. CWE-611
XXE 		CVE-2020-2138 2024-11-21 14:24 2020-03-10 Show GitHub Exploit DB Packet Storm
199498 4.8 MEDIUM
Network 		jenkins timestamper Jenkins Timestamper Plugin 1.11.1 and earlier does not sanitize HTML formatting of its output, resulting in a stored XSS vulnerability exploitable by attackers with Overall/Administer permission. CWE-79
Cross-site Scripting 		CVE-2020-2137 2024-11-21 14:24 2020-03-10 Show GitHub Exploit DB Packet Storm
199499 5.4 MEDIUM
Network 		jenkins git Jenkins Git Plugin 4.2.0 and earlier does not escape the error message for the repository URL for Microsoft TFS field form validation, resulting in a stored cross-site scripting vulnerability. CWE-79
Cross-site Scripting 		CVE-2020-2136 2024-11-21 14:24 2020-03-10 Show GitHub Exploit DB Packet Storm
199500 8.8 HIGH
Network 		jenkins script_security Sandbox protection in Jenkins Script Security Plugin 1.70 and earlier could be circumvented through crafted method calls on objects that implement GroovyInterceptable. CWE-863
 Incorrect Authorization 		CVE-2020-2135 2024-11-21 14:24 2020-03-10 Show GitHub Exploit DB Packet Storm