Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 11, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
248001 7.5 危険 GForge Group - GForge における SQL インジェクションの脆弱性 CWE-20
CWE-89
CVE-2007-3913 2012-06-26 15:54 2007-09-6 Show GitHub Exploit DB Packet Storm
248002 7.2 危険 Debian - debian-goodies の checkrestart における権限を取得される脆弱性 CWE-20
CWE-264
CVE-2007-3912 2012-06-26 15:54 2007-09-1 Show GitHub Exploit DB Packet Storm
248003 10 危険 bakbone - BakBone NetVault Reporter の clsscheduler.exe におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2007-3911 2012-06-26 15:54 2007-07-30 Show GitHub Exploit DB Packet Storm
248004 4.3 警告 bandersnatch - Bandersnatch におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-3910 2012-06-26 15:54 2007-07-19 Show GitHub Exploit DB Packet Storm
248005 7.5 危険 bandersnatch - Bandersnatch における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-3909 2012-06-26 15:54 2007-07-19 Show GitHub Exploit DB Packet Storm
248006 4.3 警告 asp ziyaretci defteri - ASP Ziyaretci Defteri の mesaj_formu.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-3887 2012-06-26 15:54 2007-07-18 Show GitHub Exploit DB Packet Storm
248007 4.3 警告 ASP indir - husrevforum の philboard_search.asp におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3885 2012-06-26 15:54 2007-07-18 Show GitHub Exploit DB Packet Storm
248008 7.5 危険 ASP indir - husrevforum の philboard_forum.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-3884 2012-06-26 15:54 2007-07-18 Show GitHub Exploit DB Packet Storm
248009 5.1 警告 datadynamics - Data Dynamics ActiveBar ActiveX コントロールにおけるファイルを作成される脆弱性 - CVE-2007-3883 2012-06-26 15:54 2007-07-18 Show GitHub Exploit DB Packet Storm
248010 4.3 警告 CA Technologies - CA Anti-Virus などの arclib.dll におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-3875 2012-06-26 15:54 2007-07-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199411 5.4 MEDIUM
Network
jenkins artifact_repository_parameter Jenkins Artifact Repository Parameter Plugin 1.0.0 and earlier does not escape parameter names and descriptions, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attacker… CWE-79
Cross-site Scripting
CVE-2021-21622 2024-11-21 14:48 2021-02-25 Show GitHub Exploit DB Packet Storm
199412 5.3 MEDIUM
Network
jenkins support_core Jenkins Support Core Plugin 2.72 and earlier provides the serialized user authentication as part of the "About user (basic authentication details only)" information, which can include the session ID … CWE-200
Information Exposure
CVE-2021-21621 2024-11-21 14:48 2021-02-25 Show GitHub Exploit DB Packet Storm
199413 4.3 MEDIUM
Network
jenkins claim A cross-site request forgery (CSRF) vulnerability in Jenkins Claim Plugin 2.18.1 and earlier allows attackers to change claims. CWE-352
 Origin Validation Error
CVE-2021-21620 2024-11-21 14:48 2021-02-25 Show GitHub Exploit DB Packet Storm
199414 5.4 MEDIUM
Network
jenkins claim Jenkins Claim Plugin 2.18.1 and earlier does not escape the user display name, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers who are able to control the disp… CWE-79
Cross-site Scripting
CVE-2021-21619 2024-11-21 14:48 2021-02-25 Show GitHub Exploit DB Packet Storm
199415 5.4 MEDIUM
Network
jenkins repository_connector Jenkins Repository Connector Plugin 2.0.2 and earlier does not escape parameter names and descriptions for past builds, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by a… CWE-79
Cross-site Scripting
CVE-2021-21618 2024-11-21 14:48 2021-02-25 Show GitHub Exploit DB Packet Storm
199416 8.8 HIGH
Network
jenkins configuration_slicing A cross-site request forgery (CSRF) vulnerability in Jenkins Configuration Slicing Plugin 1.51 and earlier allows attackers to apply different slice configurations. CWE-352
 Origin Validation Error
CVE-2021-21617 2024-11-21 14:48 2021-02-25 Show GitHub Exploit DB Packet Storm
199417 4.6 MEDIUM
Network
jenkins active_choices Jenkins Active Choices Plugin 2.5.2 and earlier does not escape reference parameter values, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure … CWE-79
Cross-site Scripting
CVE-2021-21616 2024-11-21 14:48 2021-02-25 Show GitHub Exploit DB Packet Storm
199418 5.3 MEDIUM
Network
brave brave Brave is an open source web browser with a focus on privacy and security. In Brave versions 1.17.73-1.20.103, the CNAME adblocking feature added in Brave 1.17.73 accidentally initiated DNS requests t… - CVE-2021-21323 2024-11-21 14:48 2021-02-24 Show GitHub Exploit DB Packet Storm
199419 6.0 MEDIUM
Local
dell emc_powerprotect_cyber_recovery Dell EMC PowerProtect Cyber Recovery, version 19.7.0.1, contains an Information Disclosure vulnerability. A locally authenticated high privileged Cyber Recovery user may potentially exploit this vuln… CWE-200
Information Exposure
CVE-2021-21512 2024-11-21 14:48 2021-02-20 Show GitHub Exploit DB Packet Storm
199420 5.4 MEDIUM
Network
apereo opencast Opencast is a free, open-source platform to support the management of educational audio and video content. In Opencast before version 9.2 there is a vulnerability in which publishing an episode with … - CVE-2021-21318 2024-11-21 14:48 2021-02-19 Show GitHub Exploit DB Packet Storm