Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 1, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251171	6.9	警告	Linux レッドハット	-	Linux kernel の Radeon GPU ドライバにおける任意のメモリロケーションへ書き込みされる脆弱性	CWE-20 不適切な入力確認	CVE-2011-1016	2011-05-26 10:45	2011-02-28	Show	GitHub Exploit DB Packet Storm

251172	6.9	警告	Linux レッドハット	-	Linux kernel の drm_modeset_ctl 関数における整数符号エラーの脆弱性	CWE-189 数値処理の問題	CVE-2011-1013	2011-05-26 10:43	2011-05-9	Show	GitHub Exploit DB Packet Storm

251173	6.2	警告	Linux レッドハット	-	Linux kernel の caiaq Native Instruments USB オーディオ機能におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-0712	2011-05-26 10:21	2011-02-18	Show	GitHub Exploit DB Packet Storm

251174	4.3	警告	アクセラテクノロジ	-	Accela BizSearch の標準検索画面におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	-	2011-05-26 10:07	2010-04-25	Show	GitHub Exploit DB Packet Storm

251175	4.3	警告	アクセラテクノロジ	-	Accela BizSearch の標準検索画面におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	-	2011-05-26 10:06	2010-04-25	Show	GitHub Exploit DB Packet Storm

251176	4.3	警告	アクセラテクノロジ	-	Accela BizSearch の標準検索画面におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	-	2011-05-26 10:03	2010-04-25	Show	GitHub Exploit DB Packet Storm

251177	5	警告	The Perl Foundation レッドハット	-	Perl の lc、lcfirst、uc および ucfirst 関数における汚染 (Taint) 保護メカニズムを回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-1487	2011-05-26 09:55	2011-03-1	Show	GitHub Exploit DB Packet Storm

251178	7.5	危険	IBM サイバートラスト株式会社サン・マイクロシステムズ Sendmail Consortium ターボリナックスヒューレット・パッカードレッドハット	-	sendmail における X.509 証明書の処理に関する任意の SSL-based SMTP サーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2009-4565	2011-05-26 09:52	2010-01-4	Show	GitHub Exploit DB Packet Storm

251179	5	警告	シックス・アパート株式会社	-	Movable Type におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-5845	2011-05-25 14:03	2011-05-25	Show	GitHub Exploit DB Packet Storm

251180	9.3	危険	マイクロソフト	-	Microsoft PowerPoint におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-1270	2011-05-25 12:24	2011-05-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 1, 2026, 4:54 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
199701	5.3	MEDIUM Network	jenkins	jenkins	Jenkins 2.218 and earlier, LTS 2.204.1 and earlier used a non-constant time comparison function when validating an HMAC.	CWE-203 Information Exposure Through Discrepancy	CVE-2020-2102	2024-11-21 14:24	2020-01-30	Show	GitHub Exploit DB Packet Storm

199702	5.3	MEDIUM Network	jenkins	jenkins	Jenkins 2.218 and earlier, LTS 2.204.1 and earlier did not use a constant-time comparison function for validating connection secrets, which could potentially allow an attacker to use a timing attack …	CWE-203 Information Exposure Through Discrepancy	CVE-2020-2101	2024-11-21 14:24	2020-01-30	Show	GitHub Exploit DB Packet Storm

199703	5.8	MEDIUM Network	jenkins	jenkins	Jenkins 2.218 and earlier, LTS 2.204.1 and earlier was vulnerable to a UDP amplification reflection denial of service attack on port 33848.	NVD-CWE-Other	CVE-2020-2100	2024-11-21 14:24	2020-01-30	Show	GitHub Exploit DB Packet Storm

199704	8.6	HIGH Network	jenkins	jenkins	Jenkins 2.213 and earlier, LTS 2.204.1 and earlier improperly reuses encryption key parameters in the Inbound TCP Agent Protocol/3, allowing unauthorized attackers with knowledge of agent names to ob…	CWE-330 Use of Insufficiently Random Values	CVE-2020-2099	2024-11-21 14:24	2020-01-30	Show	GitHub Exploit DB Packet Storm

199705	8.8	HIGH Network	jenkins	sounds	A cross-site request forgery vulnerability in Jenkins Sounds Plugin 0.5 and earlier allows attacker to execute arbitrary OS commands as the OS user account running Jenkins.	CWE-352 Origin Validation Error	CVE-2020-2098	2024-11-21 14:24	2020-01-16	Show	GitHub Exploit DB Packet Storm

199706	8.8	HIGH Network	jenkins	sounds	Jenkins Sounds Plugin 0.5 and earlier does not perform permission checks in URLs performing form validation, allowing attackers with Overall/Read access to execute arbitrary OS commands as the OS use…	CWE-863 Incorrect Authorization	CVE-2020-2097	2024-11-21 14:24	2020-01-16	Show	GitHub Exploit DB Packet Storm

199707	6.1	MEDIUM Network	jenkins	gitlab_hook	Jenkins Gitlab Hook Plugin 1.4.2 and earlier does not escape project names in the build_now endpoint, resulting in a reflected XSS vulnerability.	CWE-79 Cross-site Scripting	CVE-2020-2096	2024-11-21 14:24	2020-01-16	Show	GitHub Exploit DB Packet Storm

199708	4.3	MEDIUM Network	jenkins	redgate_sql_change_automation	Jenkins Redgate SQL Change Automation Plugin 2.0.4 and earlier stored an API key unencrypted in job config.xml files on the Jenkins master where they could be viewed by users with Extended Read permi…	CWE-522 Insufficiently Protected Credentials	CVE-2020-2095	2024-11-21 14:24	2020-01-16	Show	GitHub Exploit DB Packet Storm

199709	4.3	MEDIUM Network	jenkins	health_advisor_by_cloudbees	A missing permission check in Jenkins Health Advisor by CloudBees Plugin 3.0 and earlier allows attackers with Overall/Read permission to send a fixed email to an attacker-specific recipient.	CWE-862 Missing Authorization	CVE-2020-2094	2024-11-21 14:24	2020-01-16	Show	GitHub Exploit DB Packet Storm

199710	8.8	HIGH Network	jenkins	health_advisor_by_cloudbees	A cross-site request forgery vulnerability in Jenkins Health Advisor by CloudBees Plugin 3.0 and earlier allows attackers to send an email with fixed content to an attacker-specified recipient.	CWE-352 Origin Validation Error	CVE-2020-2093	2024-11-21 14:24	2020-01-16	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed