Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 8, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252311 5 警告 inventivetec - MediaCAST の authenticate_ad_setup_finished.cfm におけるユーザ名および平文のパスワードを発見される脆弱性 CWE-310
暗号の問題 		CVE-2010-0216 2012-03-27 18:42 2011-05-10 Show GitHub Exploit DB Packet Storm
252312 7.5 危険 シマンテック - Symantec Web Gateway の login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-0115 2012-03-27 18:42 2011-01-12 Show GitHub Exploit DB Packet Storm
252313 7.1 危険 ヒューレット・パッカード - Palm Pre WebOS における任意の JavaScript を実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-5097 2012-03-27 18:42 2011-09-13 Show GitHub Exploit DB Packet Storm
252314 6.8 警告 ea-style - gBook の index_inc.php における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-5095 2012-03-27 18:42 2011-09-12 Show GitHub Exploit DB Packet Storm
252315 7.5 危険 cmsfaethon - CMS Faethon の info.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-5094 2012-03-27 18:42 2011-09-12 Show GitHub Exploit DB Packet Storm
252316 5 警告 php4scripte - Gastebuch の gastbuch.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-5093 2012-03-27 18:42 2011-09-12 Show GitHub Exploit DB Packet Storm
252317 7.5 危険 vlinks - Vlinks の page.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-5091 2012-03-27 18:42 2011-09-12 Show GitHub Exploit DB Packet Storm
252318 6.8 警告 daman371 - Bloggeruniverse の editcomments.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-5090 2012-03-27 18:42 2011-09-12 Show GitHub Exploit DB Packet Storm
252319 4.3 警告 ideacart - IdeaCart の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-5089 2012-03-27 18:42 2011-09-12 Show GitHub Exploit DB Packet Storm
252320 7.5 危険 ideacart - IdeaCart 0.02 の secure/index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-5088 2012-03-27 18:42 2011-09-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
208351 4.3 MEDIUM
Network 		jenkins fortify Jenkins Fortify Plugin 19.1.29 and earlier stores proxy server passwords unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or … CWE-522
 Insufficiently Protected Credentials 		CVE-2020-2107 2024-11-21 14:24 2020-01-30 Show GitHub Exploit DB Packet Storm
208352 5.4 MEDIUM
Network 		jenkins code_coverage_api Jenkins Code Coverage API Plugin 1.1.2 and earlier does not escape the filename of the coverage report used in its view, resulting in a stored XSS vulnerability exploitable by users able to change jo… CWE-79
Cross-site Scripting 		CVE-2020-2106 2024-11-21 14:24 2020-01-30 Show GitHub Exploit DB Packet Storm
208353 5.4 MEDIUM
Network 		jenkins jenkins REST API endpoints in Jenkins 2.218 and earlier, LTS 2.204.1 and earlier were vulnerable to clickjacking attacks. CWE-1021
 Improper Restriction of Rendered UI Layers or Frames 		CVE-2020-2105 2024-11-21 14:24 2020-01-30 Show GitHub Exploit DB Packet Storm
208354 4.3 MEDIUM
Network 		jenkins jenkins Jenkins 2.218 and earlier, LTS 2.204.1 and earlier allowed users with Overall/Read access to view a JVM memory usage chart. CWE-863
 Incorrect Authorization 		CVE-2020-2104 2024-11-21 14:24 2020-01-30 Show GitHub Exploit DB Packet Storm
208355 5.4 MEDIUM
Network 		jenkins jenkins Jenkins 2.218 and earlier, LTS 2.204.1 and earlier exposed session identifiers on a user's detail object in the whoAmI diagnostic page. CWE-200
Information Exposure 		CVE-2020-2103 2024-11-21 14:24 2020-01-30 Show GitHub Exploit DB Packet Storm
208356 5.3 MEDIUM
Network 		jenkins jenkins Jenkins 2.218 and earlier, LTS 2.204.1 and earlier used a non-constant time comparison function when validating an HMAC. CWE-203
 Information Exposure Through Discrepancy 		CVE-2020-2102 2024-11-21 14:24 2020-01-30 Show GitHub Exploit DB Packet Storm
208357 5.3 MEDIUM
Network 		jenkins jenkins Jenkins 2.218 and earlier, LTS 2.204.1 and earlier did not use a constant-time comparison function for validating connection secrets, which could potentially allow an attacker to use a timing attack … CWE-203
 Information Exposure Through Discrepancy 		CVE-2020-2101 2024-11-21 14:24 2020-01-30 Show GitHub Exploit DB Packet Storm
208358 5.8 MEDIUM
Network 		jenkins jenkins Jenkins 2.218 and earlier, LTS 2.204.1 and earlier was vulnerable to a UDP amplification reflection denial of service attack on port 33848. NVD-CWE-Other
CVE-2020-2100 2024-11-21 14:24 2020-01-30 Show GitHub Exploit DB Packet Storm
208359 8.6 HIGH
Network 		jenkins jenkins Jenkins 2.213 and earlier, LTS 2.204.1 and earlier improperly reuses encryption key parameters in the Inbound TCP Agent Protocol/3, allowing unauthorized attackers with knowledge of agent names to ob… CWE-330
 Use of Insufficiently Random Values 		CVE-2020-2099 2024-11-21 14:24 2020-01-30 Show GitHub Exploit DB Packet Storm
208360 8.8 HIGH
Network 		jenkins sounds A cross-site request forgery vulnerability in Jenkins Sounds Plugin 0.5 and earlier allows attacker to execute arbitrary OS commands as the OS user account running Jenkins. CWE-352
 Origin Validation Error 		CVE-2020-2098 2024-11-21 14:24 2020-01-16 Show GitHub Exploit DB Packet Storm