Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 2, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251391	6.9	警告	Gentoo Linux レッドハット	-	logrotate の shred_file 関数における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-1154	2011-04-27 11:40	2011-03-30	Show	GitHub Exploit DB Packet Storm

251392	1.9	注意	Gentoo Linux レッドハット	-	logrotate の createOutputFile 関数におけるログデータを閲覧される脆弱性	CWE-362 競合状態	CVE-2011-1098	2011-04-27 11:39	2011-03-30	Show	GitHub Exploit DB Packet Storm

251393	6.9	警告	サイバートラスト株式会社 libvirt.org レッドハット	-	複数のレッドハット製品などで利用される libvirt の libvirt.c における任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-1146	2011-04-27 11:34	2011-02-17	Show	GitHub Exploit DB Packet Storm

251394	5.1	警告	rsync.samba.org レッドハット	-	rsync における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-1097	2011-04-27 11:32	2011-03-26	Show	GitHub Exploit DB Packet Storm

251395	6.9	警告	GNOME Project レッドハット	-	GNOME Display Manager におけるファイルの所有権を変更される脆弱性	CWE-59 リンク解釈の問題	CVE-2011-0727	2011-04-27 11:31	2011-03-28	Show	GitHub Exploit DB Packet Storm

251396	7.5	危険	レッドハット	-	Plone における管理者のアクセス権限を取得される脆弱性	CWE-noinfo 情報不足	CVE-2011-0720	2011-04-27 11:30	2011-02-3	Show	GitHub Exploit DB Packet Storm

251397	7.5	危険	CA Technologies	-	複数の CA 製品の mng_core_com.dll におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-3984	2011-04-27 11:29	2010-12-9	Show	GitHub Exploit DB Packet Storm

251398	2.1	注意	freedesktop.org サイバートラスト株式会社レッドハット	-	D-Bus におけるサービス運用妨害 (デーモンクラッシュ) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-4352	2011-04-27 11:26	2010-12-30	Show	GitHub Exploit DB Packet Storm

251399	-	-	foolabs	-	Foolabs Xpdf にサービス運用妨害 (DoS) の脆弱性	-	-	2011-04-26 12:35	2011-03-22	Show	GitHub Exploit DB Packet Storm

251400	4.3	警告	サイバートラスト株式会社 Wireshark レッドハット	-	Wireshark におけるサービス運用妨害 (メモリ消費) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-1141	2011-04-26 12:28	2011-02-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 2, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
199981	4.3	MEDIUM Network	jenkins	dynamic_extended_choice_parameter	Jenkins Dynamic Extended Choice Parameter Plugin 1.0.1 and earlier stores a password unencrypted in job config.xml files on the Jenkins master where it can be viewed by users with Extended Read permi…	CWE-522 Insufficiently Protected Credentials	CVE-2020-2124	2024-11-21 14:24	2020-02-13	Show	GitHub Exploit DB Packet Storm

199982	8.8	HIGH Network	jenkins	radargun	Jenkins RadarGun Plugin 1.7 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability.	CWE-502 Deserialization of Untrusted Data	CVE-2020-2123	2024-11-21 14:24	2020-02-13	Show	GitHub Exploit DB Packet Storm

199983	5.4	MEDIUM Network	jenkins	brakeman	Jenkins Brakeman Plugin 0.12 and earlier did not escape values received from parsed JSON files when rendering them, resulting in a stored cross-site scripting vulnerability exploitable by users able …	CWE-79 Cross-site Scripting	CVE-2020-2122	2024-11-21 14:24	2020-02-13	Show	GitHub Exploit DB Packet Storm

199984	8.8	HIGH Network	jenkins	google_kubernetes_engine	Jenkins Google Kubernetes Engine Plugin 0.8.0 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability.	NVD-CWE-noinfo	CVE-2020-2121	2024-11-21 14:24	2020-02-13	Show	GitHub Exploit DB Packet Storm

199985	8.8	HIGH Network	jenkins	fitnesse	Jenkins FitNesse Plugin 1.30 and earlier does not configure the XML parser to prevent XML external entity (XXE) attacks.	CWE-611 XXE	CVE-2020-2120	2024-11-21 14:24	2020-02-13	Show	GitHub Exploit DB Packet Storm

199986	5.3	MEDIUM Network	jenkins	azure_ad	Jenkins Azure AD Plugin 1.1.2 and earlier transmits configured credentials in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure.	CWE-522 Insufficiently Protected Credentials	CVE-2020-2119	2024-11-21 14:24	2020-02-13	Show	GitHub Exploit DB Packet Storm

199987	4.3	MEDIUM Network	jenkins	pipeline_github_notify_step	A missing permission check in Jenkins Pipeline GitHub Notify Step Plugin 1.0.4 and earlier in form-related methods allowed users with Overall/Read access to enumerate credentials ID of credentials st…	CWE-276 Incorrect Default Permissions	CVE-2020-2118	2024-11-21 14:24	2020-02-13	Show	GitHub Exploit DB Packet Storm

199988	4.3	MEDIUM Network	jenkins	pipeline_github_notify_step	A missing permission check in Jenkins Pipeline GitHub Notify Step Plugin 1.0.4 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specifi…	CWE-276 Incorrect Default Permissions	CVE-2020-2117	2024-11-21 14:24	2020-02-13	Show	GitHub Exploit DB Packet Storm

199989	8.8	HIGH Network	jenkins	pipeline_github_notify_step	A cross-site request forgery vulnerability in Jenkins Pipeline GitHub Notify Step Plugin 1.0.4 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credential…	CWE-352 Origin Validation Error	CVE-2020-2116	2024-11-21 14:24	2020-02-13	Show	GitHub Exploit DB Packet Storm

199990	8.8	HIGH Network	jenkins	nunit	Jenkins NUnit Plugin 0.25 and earlier does not configure the XML parser to prevent XML external entity (XXE) attacks.	CWE-611 XXE	CVE-2020-2115	2024-11-21 14:24	2020-02-13	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed