Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 29, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228751 7.5 危険 salims softhouse - ph03y3nk JAF CMS の module/shout/jafshout.php における "" で囲まれたセクション内の任意のコードを実行される脆弱性 - CVE-2006-5131 2012-12-20 18:02 2006-10-3 Show GitHub Exploit DB Packet Storm
228752 6.8 警告 salims softhouse - ph03y3nk JAF CMS におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5130 2012-12-20 18:02 2006-10-3 Show GitHub Exploit DB Packet Storm
228753 6.8 警告 salims softhouse - ph03y3nk JAF CMS におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5129 2012-12-20 18:02 2006-10-3 Show GitHub Exploit DB Packet Storm
228754 7.5 危険 powerportal - John Himmelman PowerPortal の index.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5126 2012-12-20 18:02 2006-10-3 Show GitHub Exploit DB Packet Storm
228755 7.5 危険 phprojekt - Albrecht Guenther PHProjekt における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5123 2012-12-20 18:02 2006-10-3 Show GitHub Exploit DB Packet Storm
228756 7.5 危険 postnuke software foundation - PostNuke の Admin セクションにおける SQL インジェクションの脆弱性 - CVE-2006-5121 2012-12-20 18:02 2006-10-3 Show GitHub Exploit DB Packet Storm
228757 4 警告 scott metoyer - Scott Metoyer Red Mombin におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5120 2012-12-20 18:02 2006-10-3 Show GitHub Exploit DB Packet Storm
228758 4 警告 Zen Cart - Zen Cart におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2006-5119 2012-12-20 18:02 2006-09-28 Show GitHub Exploit DB Packet Storm
228759 7.5 危険 phpselect - PHPSelect Web Development Division 用の PDD パッケージにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5118 2012-12-20 18:02 2006-10-3 Show GitHub Exploit DB Packet Storm
228760 5 警告 The phpMyAdmin Project - phpMyAdmin における重要な情報を取得される脆弱性 - CVE-2006-5117 2012-12-20 18:02 2006-10-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 29, 2026, 4:51 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199281 8.8 HIGH
Network 		jenkins literate Jenkins Literate Plugin 1.0 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability. CWE-502
 Deserialization of Untrusted Data 		CVE-2020-2158 2024-11-21 14:24 2020-03-10 Show GitHub Exploit DB Packet Storm
199282 4.3 MEDIUM
Network 		jenkins skytap_cloud_ci Jenkins Skytap Cloud CI Plugin 2.07 and earlier transmits configured credentials in plain text as part of job configuration forms, potentially resulting in their exposure. CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2020-2157 2024-11-21 14:24 2020-03-10 Show GitHub Exploit DB Packet Storm
199283 4.3 MEDIUM
Network 		jenkins deployhub Jenkins DeployHub Plugin 8.0.14 and earlier transmits configured credentials in plain text as part of job configuration forms, potentially resulting in their exposure. CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2020-2156 2024-11-21 14:24 2020-03-10 Show GitHub Exploit DB Packet Storm
199284 5.3 MEDIUM
Network 		jenkins openshift_deployer Jenkins OpenShift Deployer Plugin 1.2.0 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure. CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2020-2155 2024-11-21 14:24 2020-03-10 Show GitHub Exploit DB Packet Storm
199285 5.5 MEDIUM
Local 		jenkins zephyr_for_jira_test_management Jenkins Zephyr for JIRA Test Management Plugin 1.5 and earlier stores its credentials in plain text in a global configuration file on the Jenkins master file system. CWE-312
 Cleartext Storage of Sensitive Information 		CVE-2020-2154 2024-11-21 14:24 2020-03-10 Show GitHub Exploit DB Packet Storm
199286 4.3 MEDIUM
Network 		jenkins backlog Jenkins Backlog Plugin 2.4 and earlier transmits configured credentials in plain text as part of job configuration forms, potentially resulting in their exposure. CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2020-2153 2024-11-21 14:24 2020-03-10 Show GitHub Exploit DB Packet Storm
199287 6.1 MEDIUM
Network 		jenkins subversion_release_manager Jenkins Subversion Release Manager Plugin 1.2 and earlier does not escape the error message for the Repository URL field form validation, resulting in a reflected cross-site scripting vulnerability. CWE-79
Cross-site Scripting 		CVE-2020-2152 2024-11-21 14:24 2020-03-10 Show GitHub Exploit DB Packet Storm
199288 5.3 MEDIUM
Network 		jenkins quality_gates Jenkins Quality Gates Plugin 2.5 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure. CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2020-2151 2024-11-21 14:24 2020-03-10 Show GitHub Exploit DB Packet Storm
199289 5.3 MEDIUM
Network 		jenkins sonar_quality_gates Jenkins Sonar Quality Gates Plugin 1.3.1 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure. CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2020-2150 2024-11-21 14:24 2020-03-10 Show GitHub Exploit DB Packet Storm
199290 5.3 MEDIUM
Network 		jenkins repository_connector Jenkins Repository Connector Plugin 1.2.6 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure. CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2020-2149 2024-11-21 14:24 2020-03-10 Show GitHub Exploit DB Packet Storm