Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228761 4.4 警告 Zend Technologies Ltd. - Zend Platform の ini_modifier における system.ini ファイルを変更される脆弱性 - CVE-2007-1369 2012-12-20 18:19 2007-03-9 Show GitHub Exploit DB Packet Storm
228762 4.3 警告 VirtueMart - VirtueMart の virtuemart_parser.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1361 2012-12-20 18:19 2007-03-8 Show GitHub Exploit DB Packet Storm
228763 6.6 警告 サン・マイクロシステムズ - Sun Fire X2100M2 および X2200M2 用の ipmitool における権限を取得される脆弱性 - CVE-2007-1346 2012-12-20 18:19 2007-03-7 Show GitHub Exploit DB Packet Storm
228764 7.5 危険 webcalendar - Craig Knudsen WebCalendar の includes/functions.php における任意のグローバル変数を設定される脆弱性 - CVE-2007-1343 2012-12-20 18:19 2007-03-8 Show GitHub Exploit DB Packet Storm
228765 5 警告 Simple Invoices - Simple Invoices の include/auth/auth.php における重要な情報を取得される脆弱性 - CVE-2007-1341 2012-12-20 18:19 2007-03-8 Show GitHub Exploit DB Packet Storm
228766 7.5 危険 weltennetz - Weltennetz News-Letterman の eintrag.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1340 2012-12-20 18:19 2007-03-8 Show GitHub Exploit DB Packet Storm
228767 7.8 危険 VMware - VMware Workstation の仮想マシンプロセスにおけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-1337 2012-12-20 18:19 2007-05-2 Show GitHub Exploit DB Packet Storm
228768 9.3 危険 tks banking solutions - TKS Banking Solutions ePortfolio Java におけるクロスサイトリクエストフォージェリの脆弱性 - CVE-2007-1332 2012-12-20 18:19 2007-03-7 Show GitHub Exploit DB Packet Storm
228769 4.3 警告 tks banking solutions - TKS Banking Solutions ePortfolio Java におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1331 2012-12-20 18:19 2007-03-7 Show GitHub Exploit DB Packet Storm
228770 7.8 危険 silcnet - silc-server の apps/silcd/command.c におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-1327 2012-12-20 18:19 2007-03-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
200451 4.3 MEDIUM
Network 		jenkins digitalocean Jenkins DigitalOcean Plugin 1.1 and earlier stores a token unencrypted in the global config.xml file on the Jenkins master where it can be viewed by users with access to the master file system. CWE-522
 Insufficiently Protected Credentials 		CVE-2020-2126 2024-11-21 14:24 2020-02-13 Show GitHub Exploit DB Packet Storm
200452 4.3 MEDIUM
Network 		jenkins debian_package_builder Jenkins Debian Package Builder Plugin 1.6.11 and earlier stores a GPG passphrase unencrypted in its global configuration file on the Jenkins master where it can be viewed by users with access to the … CWE-522
 Insufficiently Protected Credentials 		CVE-2020-2125 2024-11-21 14:24 2020-02-13 Show GitHub Exploit DB Packet Storm
200453 4.3 MEDIUM
Network 		jenkins dynamic_extended_choice_parameter Jenkins Dynamic Extended Choice Parameter Plugin 1.0.1 and earlier stores a password unencrypted in job config.xml files on the Jenkins master where it can be viewed by users with Extended Read permi… CWE-522
 Insufficiently Protected Credentials 		CVE-2020-2124 2024-11-21 14:24 2020-02-13 Show GitHub Exploit DB Packet Storm
200454 8.8 HIGH
Network 		jenkins radargun Jenkins RadarGun Plugin 1.7 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability. CWE-502
 Deserialization of Untrusted Data 		CVE-2020-2123 2024-11-21 14:24 2020-02-13 Show GitHub Exploit DB Packet Storm
200455 5.4 MEDIUM
Network 		jenkins brakeman Jenkins Brakeman Plugin 0.12 and earlier did not escape values received from parsed JSON files when rendering them, resulting in a stored cross-site scripting vulnerability exploitable by users able … CWE-79
Cross-site Scripting 		CVE-2020-2122 2024-11-21 14:24 2020-02-13 Show GitHub Exploit DB Packet Storm
200456 8.8 HIGH
Network 		jenkins google_kubernetes_engine Jenkins Google Kubernetes Engine Plugin 0.8.0 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability. NVD-CWE-noinfo
CVE-2020-2121 2024-11-21 14:24 2020-02-13 Show GitHub Exploit DB Packet Storm
200457 8.8 HIGH
Network 		jenkins fitnesse Jenkins FitNesse Plugin 1.30 and earlier does not configure the XML parser to prevent XML external entity (XXE) attacks. CWE-611
XXE 		CVE-2020-2120 2024-11-21 14:24 2020-02-13 Show GitHub Exploit DB Packet Storm
200458 5.3 MEDIUM
Network 		jenkins azure_ad Jenkins Azure AD Plugin 1.1.2 and earlier transmits configured credentials in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure. CWE-522
 Insufficiently Protected Credentials 		CVE-2020-2119 2024-11-21 14:24 2020-02-13 Show GitHub Exploit DB Packet Storm
200459 4.3 MEDIUM
Network 		jenkins pipeline_github_notify_step A missing permission check in Jenkins Pipeline GitHub Notify Step Plugin 1.0.4 and earlier in form-related methods allowed users with Overall/Read access to enumerate credentials ID of credentials st… CWE-276
Incorrect Default Permissions  		CVE-2020-2118 2024-11-21 14:24 2020-02-13 Show GitHub Exploit DB Packet Storm
200460 4.3 MEDIUM
Network 		jenkins pipeline_github_notify_step A missing permission check in Jenkins Pipeline GitHub Notify Step Plugin 1.0.4 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specifi… CWE-276
Incorrect Default Permissions  		CVE-2020-2117 2024-11-21 14:24 2020-02-13 Show GitHub Exploit DB Packet Storm