Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 1, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228661 7.5 危険 revolutionproducts - Flexbb の includes/start.php における SQL インジェクションの脆弱性 - CVE-2007-1729 2012-12-20 18:19 2007-03-28 Show GitHub Exploit DB Packet Storm
228662 7.8 危険 ソニー・コンピュータエンタテインメント - PS3 および PSP の Remote Play 機能におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-1728 2012-12-20 18:19 2007-03-28 Show GitHub Exploit DB Packet Storm
228663 10 危険 reactos - ReactOS における脆弱性 - CVE-2007-1724 2012-12-20 18:19 2007-03-10 Show GitHub Exploit DB Packet Storm
228664 10 危険 signkorea - SignKorea SKCommAX ActiveX コントロールモジュールの DownloadCertificateExt 関数におけるバッファオーバーフローの脆弱性 - CVE-2007-1722 2012-12-20 18:19 2007-03-27 Show GitHub Exploit DB Packet Storm
228665 10 危険 realink - C-Arbre における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1721 2012-12-20 18:19 2007-03-27 Show GitHub Exploit DB Packet Storm
228666 7.5 危険 sb-websoft - PHP-Nuke 用の Addressbook モジュールにおけるディレクトリトラバーサルの脆弱性 - CVE-2007-1720 2012-12-20 18:19 2007-03-27 Show GitHub Exploit DB Packet Storm
228667 7.5 危険 ttcms - ttCMS の lib/db/ez_sql.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1708 2012-12-20 18:19 2007-03-26 Show GitHub Exploit DB Packet Storm
228668 7.8 危険 yet another telephony engine - Yate の SIP チャネルモジュールにおけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-1693 2012-12-20 18:19 2007-05-17 Show GitHub Exploit DB Packet Storm
228669 6.8 警告 second sight software - Second Sight Software ActiveGS ActiveX コントロール におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-1691 2012-12-20 18:19 2007-04-19 Show GitHub Exploit DB Packet Storm
228670 6.8 警告 second sight software - Second Sight Software ActiveGS ActiveX コントロール におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-1690 2012-12-20 18:19 2007-04-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 2, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199931 6.1 MEDIUM
Network 		jenkins awseb_deployment Jenkins AWSEB Deployment Plugin 0.3.19 and earlier does not escape various values printed as part of form validation output, resulting in a reflected cross-site scripting vulnerability. CWE-79
Cross-site Scripting 		CVE-2020-2174 2024-11-21 14:24 2020-04-7 Show GitHub Exploit DB Packet Storm
199932 5.4 MEDIUM
Network 		jenkins gatling Jenkins Gatling Plugin 1.2.7 and earlier prevents Content-Security-Policy headers from being set for Gatling reports served by the plugin, resulting in an XSS vulnerability exploitable by users able … CWE-79
Cross-site Scripting 		CVE-2020-2173 2024-11-21 14:24 2020-04-7 Show GitHub Exploit DB Packet Storm
199933 6.5 MEDIUM
Network 		jenkins code_coverage_api Jenkins Code Coverage API Plugin 1.1.4 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. CWE-776
XML Entity Expansion 		CVE-2020-2172 2024-11-21 14:24 2020-04-7 Show GitHub Exploit DB Packet Storm
199934 8.8 HIGH
Network 		jenkins rapiddeploy Jenkins RapidDeploy Plugin 4.2 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. CWE-611
XXE 		CVE-2020-2171 2024-11-21 14:24 2020-03-26 Show GitHub Exploit DB Packet Storm
199935 5.4 MEDIUM
Network 		jenkins rapiddeploy Jenkins RapidDeploy Plugin 4.2 and earlier does not escape package names in the table of packages obtained from a remote server, resulting in a stored XSS vulnerability. CWE-79
Cross-site Scripting 		CVE-2020-2170 2024-11-21 14:24 2020-03-26 Show GitHub Exploit DB Packet Storm
199936 6.1 MEDIUM
Network 		jenkins queue_cleanup A form validation endpoint in Jenkins Queue cleanup Plugin 1.3 and earlier does not properly escape a query parameter displayed in an error message, resulting in a reflected XSS vulnerability. CWE-79
Cross-site Scripting 		CVE-2020-2169 2024-11-21 14:24 2020-03-26 Show GitHub Exploit DB Packet Storm
199937 8.8 HIGH
Network 		jenkins azure_container_service Jenkins Azure Container Service Plugin 1.0.1 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability. CWE-20
 Improper Input Validation  		CVE-2020-2168 2024-11-21 14:24 2020-03-26 Show GitHub Exploit DB Packet Storm
199938 8.8 HIGH
Network 		jenkins openshift_pipeline Jenkins OpenShift Pipeline Plugin 1.0.56 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability. CWE-20
 Improper Input Validation  		CVE-2020-2167 2024-11-21 14:24 2020-03-26 Show GitHub Exploit DB Packet Storm
199939 8.8 HIGH
Network 		jenkins pipeline\ Jenkins Pipeline: AWS Steps Plugin 1.40 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability. CWE-20
 Improper Input Validation  		CVE-2020-2166 2024-11-21 14:24 2020-03-26 Show GitHub Exploit DB Packet Storm
199940 7.5 HIGH
Network 		jfrog artifactory Jenkins Artifactory Plugin 3.6.0 and earlier transmits configured passwords in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure. CWE-522
 Insufficiently Protected Credentials 		CVE-2020-2165 2024-11-21 14:24 2020-03-26 Show GitHub Exploit DB Packet Storm