Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227491 7.5 危険 PreProject.com - Pre Classified Listings ASP の signup.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1369 2012-12-20 19:29 2010-04-13 Show GitHub Exploit DB Packet Storm
227492 4.3 警告 Uiga - Uiga Fan Club の admin/admin_login.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1367 2012-12-20 19:29 2010-04-13 Show GitHub Exploit DB Packet Storm
227493 7.5 危険 Uiga - Uiga Fan Club の admin/admin_login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1366 2012-12-20 19:29 2010-04-13 Show GitHub Exploit DB Packet Storm
227494 7.5 危険 Uiga - Uiga Fan Club の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1365 2012-12-20 19:29 2010-04-13 Show GitHub Exploit DB Packet Storm
227495 7.5 危険 Uiga - Uiga Personal Portal の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1364 2012-12-20 19:29 2010-04-13 Show GitHub Exploit DB Packet Storm
227496 2.1 注意 ron jerome - Drupal 用の Bibliography モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1358 2012-12-20 19:29 2010-01-13 Show GitHub Exploit DB Packet Storm
227497 4.3 警告 sbddirectorysoftware - SBD Directory Software の editors/logindialogue.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1357 2012-12-20 19:29 2010-04-13 Show GitHub Exploit DB Packet Storm
227498 10 危険 vsecurity - TANDBERG VCS における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2010-1356 2012-12-20 19:29 2010-04-13 Show GitHub Exploit DB Packet Storm
227499 4.3 警告 vsecurity - TANDBERG VCS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1355 2012-12-20 19:29 2010-04-13 Show GitHub Exploit DB Packet Storm
227500 5 警告 ternaria - Joomla! 用の vjdeo コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-1354 2012-12-20 19:29 2010-04-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
195551 8.8 HIGH
Network 		jenkins team_foundation_server A cross-site request forgery (CSRF) vulnerability in Jenkins Team Foundation Server Plugin 5.157.1 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified creden… CWE-352
 Origin Validation Error 		CVE-2021-21638 2024-11-21 14:48 2021-03-30 Show GitHub Exploit DB Packet Storm
195552 6.5 MEDIUM
Network 		jenkins team_foundation_server A missing permission check in Jenkins Team Foundation Server Plugin 5.157.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified … CWE-862
 Missing Authorization 		CVE-2021-21637 2024-11-21 14:48 2021-03-30 Show GitHub Exploit DB Packet Storm
195553 4.3 MEDIUM
Network 		jenkins team_foundation_server A missing permission check in Jenkins Team Foundation Server Plugin 5.157.1 and earlier allows attackers with Overall/Read permission to enumerate credentials ID of credentials stored in Jenkins. CWE-862
 Missing Authorization 		CVE-2021-21636 2024-11-21 14:48 2021-03-30 Show GitHub Exploit DB Packet Storm
195554 5.9 MEDIUM
Network 		netty
debian
netapp
oracle
quarkus 		netty
debian_linux
oncommand_workflow_automation
oncommand_api_services
coherence
banking_trade_finance_process_management
banking_credit_facilities_process_management
banking_co… 		Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In Netty (io.netty:netty-codec-http… - CVE-2021-21409 2024-11-21 14:48 2021-03-31 Show GitHub Exploit DB Packet Storm
195555 5.4 MEDIUM
Network 		jenkins rest_list_parameter Jenkins REST List Parameter Plugin 1.3.0 and earlier does not escape a parameter name reference in embedded JavaScript, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by a… CWE-79
Cross-site Scripting 		CVE-2021-21635 2024-11-21 14:48 2021-03-30 Show GitHub Exploit DB Packet Storm
195556 6.5 MEDIUM
Network 		jenkins jabber_\(xmpp\)_notifier_and_control Jenkins Jabber (XMPP) notifier and control Plugin 1.41 and earlier stores passwords unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with acces… CWE-522
 Insufficiently Protected Credentials 		CVE-2021-21634 2024-11-21 14:48 2021-03-30 Show GitHub Exploit DB Packet Storm
195557 8.8 HIGH
Network 		jenkins owasp_dependency-track A cross-site request forgery (CSRF) vulnerability in Jenkins OWASP Dependency-Track Plugin 3.1.0 and earlier allows attackers to connect to an attacker-specified URL, capturing credentials stored in … CWE-352
 Origin Validation Error 		CVE-2021-21633 2024-11-21 14:48 2021-03-30 Show GitHub Exploit DB Packet Storm
195558 6.5 MEDIUM
Network 		jenkins owasp_dependency-track A missing permission check in Jenkins OWASP Dependency-Track Plugin 3.1.0 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL, capturing credentials stor… CWE-862
 Missing Authorization 		CVE-2021-21632 2024-11-21 14:48 2021-03-30 Show GitHub Exploit DB Packet Storm
195559 4.3 MEDIUM
Network 		jenkins cloud_statistics Jenkins Cloud Statistics Plugin 0.26 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission and knowledge of random activity IDs to view … CWE-862
 Missing Authorization 		CVE-2021-21631 2024-11-21 14:48 2021-03-30 Show GitHub Exploit DB Packet Storm
195560 5.4 MEDIUM
Network 		jenkins extra_columns Jenkins Extra Columns Plugin 1.22 and earlier does not escape parameter values in the build parameters column, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers … CWE-79
Cross-site Scripting 		CVE-2021-21630 2024-11-21 14:48 2021-03-30 Show GitHub Exploit DB Packet Storm