Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
228311 4.3 警告 Real Time Logic - BarracudaDrive Web Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-6316 2012-12-20 18:34 2007-12-11 Show GitHub Exploit DB Packet Storm
228312 4 警告 Real Time Logic - Group Chat の BarracudaDrive Web Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2007-6315 2012-12-20 18:34 2007-12-11 Show GitHub Exploit DB Packet Storm
228313 5 警告 Real Time Logic - BarracudaDrive Web Server における Web スクリプトに対するソースコードを読まれる脆弱性 CWE-20
不適切な入力確認
CVE-2007-6314 2012-12-20 18:34 2007-12-11 Show GitHub Exploit DB Packet Storm
228314 4.3 警告 ウェブセンス - Websense Enterprise および Web Security Suite の Web Reporting Tools portal におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-6312 2012-12-20 18:34 2007-12-11 Show GitHub Exploit DB Packet Storm
228315 4.3 警告 webSPELL - webSPELL の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-6309 2012-12-20 18:34 2007-12-11 Show GitHub Exploit DB Packet Storm
228316 5 警告 phpmychat - phpMyChat の users_popupL.php3 における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2007-6296 2012-12-20 18:34 2007-12-10 Show GitHub Exploit DB Packet Storm
228317 7.5 危険 xigla - Xigla Absolute Banner Manager .NET の abm.aspx における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-6291 2012-12-20 18:34 2007-12-10 Show GitHub Exploit DB Packet Storm
228318 7.5 危険 tecnick.com - TCExam における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-6288 2012-12-20 18:34 2007-12-10 Show GitHub Exploit DB Packet Storm
228319 10 危険 stbernard - St. Bernard Open File Manager の Open File Manager service におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2007-6281 2012-12-20 18:34 2007-12-19 Show GitHub Exploit DB Packet Storm
228320 9.3 危険 SonicWALL - SonicWALL GLobal VPN Client のコンフィギュレーションファイルにおけるフォーマットストリングの脆弱性 CWE-134
書式文字列の問題
CVE-2007-6273 2012-12-20 18:34 2007-12-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
201061 6.5 MEDIUM
Network
jenkins soapui_pro_functional_testing Jenkins SoapUI Pro Functional Testing Plugin 1.3 and earlier stores project passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by attackers with Extended… CWE-311
Missing Encryption of Sensitive Data
CVE-2020-2250 2024-11-21 14:25 2020-09-1 Show GitHub Exploit DB Packet Storm
201062 3.3 LOW
Local
jenkins team_foundation_server Jenkins Team Foundation Server Plugin 5.157.1 and earlier stores a webhook secret unencrypted in its global configuration file on the Jenkins controller where it can be viewed by attackers with acces… CWE-311
Missing Encryption of Sensitive Data
CVE-2020-2249 2024-11-21 14:25 2020-09-1 Show GitHub Exploit DB Packet Storm
201063 6.1 MEDIUM
Network
jenkins jsgames Jenkins JSGames Plugin 0.2 and earlier evaluates part of a URL as code, resulting in a reflected cross-site scripting (XSS) vulnerability. CWE-79
Cross-site Scripting
CVE-2020-2248 2024-11-21 14:25 2020-09-1 Show GitHub Exploit DB Packet Storm
201064 6.5 MEDIUM
Network
jenkins klocwork_analysis Jenkins Klocwork Analysis Plugin 2020.2.1 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. CWE-611
XXE
CVE-2020-2247 2024-11-21 14:25 2020-09-1 Show GitHub Exploit DB Packet Storm
201065 5.4 MEDIUM
Network
jenkins valgrind Jenkins Valgrind Plugin 0.28 and earlier does not escape content in Valgrind XML reports, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control Valgr… CWE-79
Cross-site Scripting
CVE-2020-2246 2024-11-21 14:25 2020-09-1 Show GitHub Exploit DB Packet Storm
201066 7.1 HIGH
Network
jenkins valgrind Jenkins Valgrind Plugin 0.28 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. CWE-611
XXE
CVE-2020-2245 2024-11-21 14:25 2020-09-1 Show GitHub Exploit DB Packet Storm
201067 5.4 MEDIUM
Network
jenkins build_failure_analyzer Jenkins Build Failure Analyzer Plugin 1.27.0 and earlier does not escape matching text in a form validation response, resulting in a cross-site scripting (XSS) vulnerability exploitable by attackers … CWE-79
Cross-site Scripting
CVE-2020-2244 2024-11-21 14:25 2020-09-1 Show GitHub Exploit DB Packet Storm
201068 5.4 MEDIUM
Network
jenkins cadence_vmanager Jenkins Cadence vManager Plugin 3.0.4 and earlier does not escape build descriptions in tooltips, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Run/Upda… CWE-79
Cross-site Scripting
CVE-2020-2243 2024-11-21 14:25 2020-09-1 Show GitHub Exploit DB Packet Storm
201069 6.5 MEDIUM
Network
jenkins database A missing permission check in Jenkins database Plugin 1.6 and earlier allows attackers with Overall/Read access to Jenkins to connect to an attacker-specified database server using attacker-specified… CWE-862
 Missing Authorization
CVE-2020-2242 2024-11-21 14:25 2020-09-1 Show GitHub Exploit DB Packet Storm
201070 8.8 HIGH
Network
jenkins database A cross-site request forgery (CSRF) vulnerability in Jenkins database Plugin 1.6 and earlier allows attackers to connect to an attacker-specified database server using attacker-specified credentials. CWE-352
 Origin Validation Error
CVE-2020-2241 2024-11-21 14:25 2020-09-1 Show GitHub Exploit DB Packet Storm