Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 1, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251171	6.9	警告	Linux レッドハット	-	Linux kernel の Radeon GPU ドライバにおける任意のメモリロケーションへ書き込みされる脆弱性	CWE-20 不適切な入力確認	CVE-2011-1016	2011-05-26 10:45	2011-02-28	Show	GitHub Exploit DB Packet Storm

251172	6.9	警告	Linux レッドハット	-	Linux kernel の drm_modeset_ctl 関数における整数符号エラーの脆弱性	CWE-189 数値処理の問題	CVE-2011-1013	2011-05-26 10:43	2011-05-9	Show	GitHub Exploit DB Packet Storm

251173	6.2	警告	Linux レッドハット	-	Linux kernel の caiaq Native Instruments USB オーディオ機能におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-0712	2011-05-26 10:21	2011-02-18	Show	GitHub Exploit DB Packet Storm

251174	4.3	警告	アクセラテクノロジ	-	Accela BizSearch の標準検索画面におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	-	2011-05-26 10:07	2010-04-25	Show	GitHub Exploit DB Packet Storm

251175	4.3	警告	アクセラテクノロジ	-	Accela BizSearch の標準検索画面におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	-	2011-05-26 10:06	2010-04-25	Show	GitHub Exploit DB Packet Storm

251176	4.3	警告	アクセラテクノロジ	-	Accela BizSearch の標準検索画面におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	-	2011-05-26 10:03	2010-04-25	Show	GitHub Exploit DB Packet Storm

251177	5	警告	The Perl Foundation レッドハット	-	Perl の lc、lcfirst、uc および ucfirst 関数における汚染 (Taint) 保護メカニズムを回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-1487	2011-05-26 09:55	2011-03-1	Show	GitHub Exploit DB Packet Storm

251178	7.5	危険	IBM サイバートラスト株式会社サン・マイクロシステムズ Sendmail Consortium ターボリナックスヒューレット・パッカードレッドハット	-	sendmail における X.509 証明書の処理に関する任意の SSL-based SMTP サーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2009-4565	2011-05-26 09:52	2010-01-4	Show	GitHub Exploit DB Packet Storm

251179	5	警告	シックス・アパート株式会社	-	Movable Type におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-5845	2011-05-25 14:03	2011-05-25	Show	GitHub Exploit DB Packet Storm

251180	9.3	危険	マイクロソフト	-	Microsoft PowerPoint におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-1270	2011-05-25 12:24	2011-05-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 1, 2026, 4:54 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
199661	4.3	MEDIUM Network	jenkins	p4	A missing permission check in Jenkins P4 Plugin 1.10.10 and earlier allows attackers with Overall/Read permission to trigger builds.	CWE-862 Missing Authorization	CVE-2020-2142	2024-11-21 14:24	2020-03-10	Show	GitHub Exploit DB Packet Storm

199662	4.3	MEDIUM Network	jenkins	p4	A cross-site request forgery vulnerability in Jenkins P4 Plugin 1.10.10 and earlier allows attackers to trigger builds or add a labels in Perforce.	CWE-352 Origin Validation Error	CVE-2020-2141	2024-11-21 14:24	2020-03-10	Show	GitHub Exploit DB Packet Storm

199663	6.1	MEDIUM Network	jenkins	audit_trail	Jenkins Audit Trail Plugin 3.2 and earlier does not escape the error message for the URL Patterns field form validation, resulting in a reflected cross-site scripting vulnerability.	CWE-79 Cross-site Scripting	CVE-2020-2140	2024-11-21 14:24	2020-03-10	Show	GitHub Exploit DB Packet Storm

199664	6.5	MEDIUM Network	jenkins	cobertura	An arbitrary file write vulnerability in Jenkins Cobertura Plugin 1.15 and earlier allows attackers able to control the coverage report file contents to overwrite any file on the Jenkins master file …	CWE-22 Path Traversal	CVE-2020-2139	2024-11-21 14:24	2020-03-10	Show	GitHub Exploit DB Packet Storm

199665	7.1	HIGH Network	jenkins	cobertura	Jenkins Cobertura Plugin 1.15 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.	CWE-611 XXE	CVE-2020-2138	2024-11-21 14:24	2020-03-10	Show	GitHub Exploit DB Packet Storm

199666	4.8	MEDIUM Network	jenkins	timestamper	Jenkins Timestamper Plugin 1.11.1 and earlier does not sanitize HTML formatting of its output, resulting in a stored XSS vulnerability exploitable by attackers with Overall/Administer permission.	CWE-79 Cross-site Scripting	CVE-2020-2137	2024-11-21 14:24	2020-03-10	Show	GitHub Exploit DB Packet Storm

199667	5.4	MEDIUM Network	jenkins	git	Jenkins Git Plugin 4.2.0 and earlier does not escape the error message for the repository URL for Microsoft TFS field form validation, resulting in a stored cross-site scripting vulnerability.	CWE-79 Cross-site Scripting	CVE-2020-2136	2024-11-21 14:24	2020-03-10	Show	GitHub Exploit DB Packet Storm

199668	8.8	HIGH Network	jenkins	script_security	Sandbox protection in Jenkins Script Security Plugin 1.70 and earlier could be circumvented through crafted method calls on objects that implement GroovyInterceptable.	CWE-863 Incorrect Authorization	CVE-2020-2135	2024-11-21 14:24	2020-03-10	Show	GitHub Exploit DB Packet Storm

199669	8.8	HIGH Network	jenkins	script_security	Sandbox protection in Jenkins Script Security Plugin 1.70 and earlier could be circumvented through crafted constructor calls and crafted constructor bodies.	CWE-863 Incorrect Authorization	CVE-2020-2134	2024-11-21 14:24	2020-03-10	Show	GitHub Exploit DB Packet Storm

199670	6.5	MEDIUM Network	jenkins	applatix	Jenkins Applatix Plugin 1.1 and earlier stores a password unencrypted in job config.xml files on the Jenkins master where it can be viewed by users with Extended Read permission, or access to the mas…	CWE-522 Insufficiently Protected Credentials	CVE-2020-2133	2024-11-21 14:24	2020-02-13	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed