Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 3, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228901 7.5 危険 techexcel inc. - DevTrack における SQL インジェクションの脆弱性 - CVE-2007-0853 2012-12-20 18:19 2007-02-8 Show GitHub Exploit DB Packet Storm
228902 6.8 警告 techexcel inc. - DevTrack におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-0852 2012-12-20 18:19 2007-02-8 Show GitHub Exploit DB Packet Storm
228903 7.5 危険 syscp team - SysCP の scripts/cronscript.php における任意のコードを実行される脆弱性 - CVE-2007-0850 2012-12-20 18:19 2007-02-8 Show GitHub Exploit DB Packet Storm
228904 7.2 危険 syscp team - SysCP の scripts/cronscript.php における権限を取得される脆弱性 - CVE-2007-0849 2012-12-20 18:19 2007-02-8 Show GitHub Exploit DB Packet Storm
228905 10 危険 vbdrupal - vbDrupal における脆弱性 - CVE-2007-0841 2012-12-20 18:19 2007-01-30 Show GitHub Exploit DB Packet Storm
228906 7.5 危険 Wafer - Valarsoft WebMatic の index/index_album.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0839 2012-12-20 18:19 2007-02-7 Show GitHub Exploit DB Packet Storm
228907 1.2 注意 VMware - VMware Workstation におけるクリップボードコンテンツを読み取られる脆弱性 - CVE-2007-0833 2012-12-20 18:19 2007-02-7 Show GitHub Exploit DB Packet Storm
228908 1.2 注意 VMware - VMware Workstation における重要な情報を取得される脆弱性 - CVE-2007-0832 2012-12-20 18:19 2007-02-7 Show GitHub Exploit DB Packet Storm
228909 1.9 注意 Slackware - Slackware Linux 上で稼動する xterm におけるファイルパーミッションを回避される脆弱性 - CVE-2007-0823 2012-12-20 18:19 2007-02-7 Show GitHub Exploit DB Packet Storm
228910 4.3 警告 uapplication - Uapplication Uphotogallery の images_archive.asp におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-0815 2012-12-20 18:19 2007-02-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 3, 2026, 4:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
200041 5.5 MEDIUM
Local 		jenkins zephyr_for_jira_test_management Jenkins Zephyr for JIRA Test Management Plugin 1.5 and earlier stores its credentials in plain text in a global configuration file on the Jenkins master file system. CWE-312
 Cleartext Storage of Sensitive Information 		CVE-2020-2154 2024-11-21 14:24 2020-03-10 Show GitHub Exploit DB Packet Storm
200042 4.3 MEDIUM
Network 		jenkins backlog Jenkins Backlog Plugin 2.4 and earlier transmits configured credentials in plain text as part of job configuration forms, potentially resulting in their exposure. CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2020-2153 2024-11-21 14:24 2020-03-10 Show GitHub Exploit DB Packet Storm
200043 6.1 MEDIUM
Network 		jenkins subversion_release_manager Jenkins Subversion Release Manager Plugin 1.2 and earlier does not escape the error message for the Repository URL field form validation, resulting in a reflected cross-site scripting vulnerability. CWE-79
Cross-site Scripting 		CVE-2020-2152 2024-11-21 14:24 2020-03-10 Show GitHub Exploit DB Packet Storm
200044 5.3 MEDIUM
Network 		jenkins quality_gates Jenkins Quality Gates Plugin 2.5 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure. CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2020-2151 2024-11-21 14:24 2020-03-10 Show GitHub Exploit DB Packet Storm
200045 5.3 MEDIUM
Network 		jenkins sonar_quality_gates Jenkins Sonar Quality Gates Plugin 1.3.1 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure. CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2020-2150 2024-11-21 14:24 2020-03-10 Show GitHub Exploit DB Packet Storm
200046 5.3 MEDIUM
Network 		jenkins repository_connector Jenkins Repository Connector Plugin 1.2.6 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure. CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2020-2149 2024-11-21 14:24 2020-03-10 Show GitHub Exploit DB Packet Storm
200047 4.3 MEDIUM
Network 		jenkins mac A missing permission check in Jenkins Mac Plugin 1.1.0 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified SSH server using attacker-specified credentials. CWE-863
 Incorrect Authorization 		CVE-2020-2148 2024-11-21 14:24 2020-03-10 Show GitHub Exploit DB Packet Storm
200048 4.3 MEDIUM
Network 		jenkins mac A cross-site request forgery vulnerability in Jenkins Mac Plugin 1.1.0 and earlier allows attackers to connect to an attacker-specified SSH server using attacker-specified credentials. CWE-352
 Origin Validation Error 		CVE-2020-2147 2024-11-21 14:24 2020-03-10 Show GitHub Exploit DB Packet Storm
200049 7.4 HIGH
Network 		jenkins mac Jenkins Mac Plugin 1.1.0 and earlier does not validate SSH host keys when connecting agents created by the plugin, enabling man-in-the-middle attacks. CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2020-2146 2024-11-21 14:24 2020-03-10 Show GitHub Exploit DB Packet Storm
200050 5.5 MEDIUM
Local 		jenkins zephyr_enterprise_test_management Jenkins Zephyr Enterprise Test Management Plugin 1.9.1 and earlier stores its Zephyr password in plain text on the Jenkins master file system. CWE-522
 Insufficiently Protected Credentials 		CVE-2020-2145 2024-11-21 14:24 2020-03-10 Show GitHub Exploit DB Packet Storm