Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228161	2.6	注意	アップルサン・マイクロシステムズヒューレット・パッカード VMware 日立レッドハット	-	複数の Oracle 製品の Java Runtime Environment における脆弱性	CWE-noinfo 情報不足	CVE-2010-4448	2012-12-18 16:36	2011-02-15	Show	GitHub Exploit DB Packet Storm

228162	4.3	警告	アップル VMware サン・マイクロシステムズヒューレット・パッカードレッドハット	-	複数の Oracle 製品の Java Runtime Environment における脆弱性	CWE-noinfo 情報不足	CVE-2010-4447	2012-12-18 16:34	2011-02-15	Show	GitHub Exploit DB Packet Storm

228163	10	危険	アップルサン・マイクロシステムズヒューレット・パッカード VMware 日立レッドハット	-	複数の Oracle 製品の Java Runtime Environment における脆弱性	CWE-noinfo 情報不足	CVE-2010-4469	2012-12-18 16:32	2011-02-15	Show	GitHub Exploit DB Packet Storm

228164	4	警告	アップルサン・マイクロシステムズヒューレット・パッカード VMware 日立レッドハット	-	複数の Oracle 製品の Java Runtime Environment における脆弱性	CWE-noinfo 情報不足	CVE-2010-4468	2012-12-18 16:30	2011-02-15	Show	GitHub Exploit DB Packet Storm

228165	5	警告	サン・マイクロシステムズ VMware ヒューレット・パッカードレッドハット	-	複数の Oracle 製品の Java Runtime Environment における脆弱性	CWE-noinfo 情報不足	CVE-2010-4466	2012-12-18 16:24	2011-02-15	Show	GitHub Exploit DB Packet Storm

228166	2.1	注意	サン・マイクロシステムズ VMware	-	複数の Oracle 製品の Java DB コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-4474	2012-12-18 12:31	2011-02-15	Show	GitHub Exploit DB Packet Storm

228167	5	警告	アップルサン・マイクロシステムズヒューレット・パッカード VMware 日立レッドハット	-	複数の Oracle 製品の Java Runtime Environment における脆弱性	CWE-noinfo 情報不足	CVE-2010-4471	2012-12-18 12:29	2011-02-15	Show	GitHub Exploit DB Packet Storm

228168	7.6	危険	アップル VMware サン・マイクロシステムズヒューレット・パッカードレッドハット	-	複数の Oracle 製品の Java Runtime Environment における脆弱性	CWE-noinfo 情報不足	CVE-2010-4467	2012-12-18 12:25	2011-02-15	Show	GitHub Exploit DB Packet Storm

228169	10	危険	アップル VMware サン・マイクロシステムズヒューレット・パッカードレッドハット	-	複数の Oracle 製品の Java Runtime Environment における脆弱性	CWE-noinfo 情報不足	CVE-2010-4463	2012-12-18 12:23	2011-02-15	Show	GitHub Exploit DB Packet Storm

228170	10	危険	サン・マイクロシステムズ VMware ヒューレット・パッカードレッドハット	-	複数の Oracle 製品の Deployment コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-4452	2012-12-18 12:18	2011-02-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 23, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
199381	8.8	HIGH Network	jenkins	speaks\!	Jenkins Speaks! Plugin, all current versions, allows users with Job/Configure permission to run arbitrary Groovy code inside the Jenkins JVM, effectively elevating privileges to Overall/Run Scripts.	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2017-1000403	2024-11-21 12:04	2018-01-26	Show	GitHub Exploit DB Packet Storm

199382	5.9	MEDIUM Network	jenkins	swarm	Jenkins Swarm Plugin Client 3.4 and earlier bundled a version of the commons-httpclient library with the vulnerability CVE-2012-6153 that incorrectly verified SSL certificates, making it susceptible …	CWE-20 Improper Input Validation	CVE-2017-1000402	2024-11-21 12:04	2018-01-26	Show	GitHub Exploit DB Packet Storm

199383	2.2	LOW Local	jenkins	jenkins	The Jenkins 2.73.1 and earlier, 2.83 and earlier default form control for passwords and other secrets, <f:password/>, supports form validation (e.g. for API keys). The form validation AJAX requests w…	CWE-20 Improper Input Validation	CVE-2017-1000401	2024-11-21 12:04	2018-01-26	Show	GitHub Exploit DB Packet Storm

199384	4.3	MEDIUM Network	jenkins	jenkins	The Jenkins 2.73.1 and earlier, 2.83 and earlier remote API at /job/(job-name)/api contained information about upstream and downstream projects. This included information about tasks that the current…	CWE-862 Missing Authorization	CVE-2017-1000400	2024-11-21 12:04	2018-01-26	Show	GitHub Exploit DB Packet Storm

199385	4.3	MEDIUM Network	jenkins	jenkins	The Jenkins 2.73.1 and earlier, 2.83 and earlier remote API at /queue/item/(ID)/api showed information about tasks in the queue (typically builds waiting to start). This included information about ta…	CWE-200 Information Exposure	CVE-2017-1000399	2024-11-21 12:04	2018-01-26	Show	GitHub Exploit DB Packet Storm

199386	4.3	MEDIUM Network	jenkins	jenkins	The remote API in Jenkins 2.73.1 and earlier, 2.83 and earlier at /computer/(agent-name)/api showed information about tasks (typically builds) currently running on that agent. This included informati…	CWE-200 Information Exposure	CVE-2017-1000398	2024-11-21 12:04	2018-01-26	Show	GitHub Exploit DB Packet Storm

199387	5.9	MEDIUM Network	jenkins	maven	Jenkins Maven Plugin 2.17 and earlier bundled a version of the commons-httpclient library with the vulnerability CVE-2012-6153 that incorrectly verified SSL certificates, making it susceptible to man…	CWE-20 Improper Input Validation	CVE-2017-1000397	2024-11-21 12:04	2018-01-26	Show	GitHub Exploit DB Packet Storm

199388	5.9	MEDIUM Network	jenkins	jenkins	Jenkins 2.73.1 and earlier, 2.83 and earlier bundled a version of the commons-httpclient library with the vulnerability CVE-2012-6153 that incorrectly verified SSL certificates, making it susceptible…	CWE-295 Improper Certificate Validation	CVE-2017-1000396	2024-11-21 12:04	2018-01-26	Show	GitHub Exploit DB Packet Storm

199389	4.3	MEDIUM Network	jenkins	jenkins	Jenkins 2.73.1 and earlier, 2.83 and earlier provides information about Jenkins user accounts which is generally available to anyone with Overall/Read permissions via the /user/(username)/api remote …	CWE-200 Information Exposure	CVE-2017-1000395	2024-11-21 12:04	2018-01-26	Show	GitHub Exploit DB Packet Storm

199390	7.5	HIGH Network	jenkins	jenkins	Jenkins 2.73.1 and earlier, 2.83 and earlier bundled a version of the commons-fileupload library with the denial-of-service vulnerability known as CVE-2016-3092. The fix for that vulnerability has be…	CWE-20 Improper Input Validation	CVE-2017-1000394	2024-11-21 12:04	2018-01-26	Show	GitHub Exploit DB Packet Storm