Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 12:09 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251811 7.5 危険 PivotX - PivotX において第三者にパスワードを変更される脆弱性 CWE-255
証明書・パスワード管理
CVE-2011-1035 2011-03-24 14:46 2011-02-21 Show GitHub Exploit DB Packet Storm
251812 5 警告 オラクル
Memcached
- memcached の memcached.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2010-1152 2011-03-24 14:41 2010-04-12 Show GitHub Exploit DB Packet Storm
251813 6.8 警告 Apache Software Foundation
レッドハット
- Apache HTTP Server の repos.c 内にある walk 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2010-4539 2011-03-23 15:54 2011-01-7 Show GitHub Exploit DB Packet Storm
251814 6.9 警告 サイバートラスト株式会社
Linux
レッドハット
- Linux kernel の OSS サウンドシステムの load_mixer_volumes 関数における重要な情報を取得される脆弱性 CWE-119
バッファエラー
CVE-2010-4527 2011-03-23 15:45 2011-01-13 Show GitHub Exploit DB Packet Storm
251815 4.3 警告 IBM - IBM WebSphere Application Server におけるインターナルアプリケーションハッシュテーブルのログインを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2008-7274 2011-03-23 15:35 2007-10-11 Show GitHub Exploit DB Packet Storm
251816 3.5 注意 Apache Software Foundation
レッドハット
- Apache Subversion の rev_hunt.c におけるメモリリークの脆弱性 CWE-399
リソース管理の問題
CVE-2010-4644 2011-03-23 15:22 2011-01-7 Show GitHub Exploit DB Packet Storm
251817 6 警告 アップル
Apache Software Foundation
レッドハット
- Apache HTTP Server の authz.c におけるアクセス制限を回避される脆弱性 CWE-16
環境設定
CVE-2010-3315 2011-03-23 14:24 2010-10-4 Show GitHub Exploit DB Packet Storm
251818 5 警告 IBM - IBM WebSphere Application Server における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-0316 2011-03-22 15:29 2010-12-17 Show GitHub Exploit DB Packet Storm
251819 4.3 警告 IBM - IBM WebSphere Application Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-0315 2011-03-22 15:28 2010-12-17 Show GitHub Exploit DB Packet Storm
251820 4.9 警告 サイバートラスト株式会社
Linux
レッドハット
- Linux kernel の ATI Rage 128 ドライバにおける権限昇格の脆弱性 CWE-20
不適切な入力確認
CVE-2009-3620 2011-03-18 15:30 2009-10-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
200801 6.5 MEDIUM
Network
jenkins harvest_scm Jenkins Harvest SCM Plugin 0.5.1 and earlier stores a password unencrypted in its global configuration file on the Jenkins master where it can be viewed by users with access to the master file system. CWE-522
 Insufficiently Protected Credentials
CVE-2020-2130 2024-11-21 14:24 2020-02-13 Show GitHub Exploit DB Packet Storm
200802 6.5 MEDIUM
Network
jenkins eagle_tester Jenkins Eagle Tester Plugin 1.0.9 and earlier stores a password unencrypted in its global configuration file on the Jenkins master where it can be viewed by users with access to the master file syste… CWE-522
 Insufficiently Protected Credentials
CVE-2020-2129 2024-11-21 14:24 2020-02-13 Show GitHub Exploit DB Packet Storm
200803 4.3 MEDIUM
Network
jenkins ecx_copy_data_management Jenkins ECX Copy Data Management Plugin 1.9 and earlier stores a password unencrypted in job config.xml files on the Jenkins master where it can be viewed by users with Extended Read permission, or a… CWE-522
 Insufficiently Protected Credentials
CVE-2020-2128 2024-11-21 14:24 2020-02-13 Show GitHub Exploit DB Packet Storm
200804 4.3 MEDIUM
Network
jenkins bmc_release_package_and_deployment Jenkins BMC Release Package and Deployment Plugin 1.1 and earlier stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access t… CWE-522
 Insufficiently Protected Credentials
CVE-2020-2127 2024-11-21 14:24 2020-02-13 Show GitHub Exploit DB Packet Storm
200805 4.3 MEDIUM
Network
jenkins digitalocean Jenkins DigitalOcean Plugin 1.1 and earlier stores a token unencrypted in the global config.xml file on the Jenkins master where it can be viewed by users with access to the master file system. CWE-522
 Insufficiently Protected Credentials
CVE-2020-2126 2024-11-21 14:24 2020-02-13 Show GitHub Exploit DB Packet Storm
200806 4.3 MEDIUM
Network
jenkins debian_package_builder Jenkins Debian Package Builder Plugin 1.6.11 and earlier stores a GPG passphrase unencrypted in its global configuration file on the Jenkins master where it can be viewed by users with access to the … CWE-522
 Insufficiently Protected Credentials
CVE-2020-2125 2024-11-21 14:24 2020-02-13 Show GitHub Exploit DB Packet Storm
200807 4.3 MEDIUM
Network
jenkins dynamic_extended_choice_parameter Jenkins Dynamic Extended Choice Parameter Plugin 1.0.1 and earlier stores a password unencrypted in job config.xml files on the Jenkins master where it can be viewed by users with Extended Read permi… CWE-522
 Insufficiently Protected Credentials
CVE-2020-2124 2024-11-21 14:24 2020-02-13 Show GitHub Exploit DB Packet Storm
200808 8.8 HIGH
Network
jenkins radargun Jenkins RadarGun Plugin 1.7 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability. CWE-502
 Deserialization of Untrusted Data
CVE-2020-2123 2024-11-21 14:24 2020-02-13 Show GitHub Exploit DB Packet Storm
200809 5.4 MEDIUM
Network
jenkins brakeman Jenkins Brakeman Plugin 0.12 and earlier did not escape values received from parsed JSON files when rendering them, resulting in a stored cross-site scripting vulnerability exploitable by users able … CWE-79
Cross-site Scripting
CVE-2020-2122 2024-11-21 14:24 2020-02-13 Show GitHub Exploit DB Packet Storm
200810 8.8 HIGH
Network
jenkins google_kubernetes_engine Jenkins Google Kubernetes Engine Plugin 0.8.0 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability. NVD-CWE-noinfo
CVE-2020-2121 2024-11-21 14:24 2020-02-13 Show GitHub Exploit DB Packet Storm