Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 2, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252351	4.3	警告	マイクロソフト	-	Microsoft Forefront Unified Access Gateway の Web Monitor におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2733	2010-12-7 16:44	2010-11-9	Show	GitHub Exploit DB Packet Storm

252352	5.8	警告	マイクロソフト	-	Microsoft Forefront Unified Access Gateway の Web インターフェースにおける任意の Web サイトへリダイレクトされる脆弱性	CWE-20 不適切な入力確認	CVE-2010-2732	2010-12-7 16:44	2010-11-9	Show	GitHub Exploit DB Packet Storm

252353	10	危険	アップルサイバートラスト株式会社 MIT Kerberos サン・マイクロシステムズ VMware レッドハット	-	MIT Kerberos の AES および RC4 の復号化機能における任意のコードを実行される脆弱性	CWE-189 数値処理の問題	CVE-2009-4212	2010-12-7 16:40	2010-01-12	Show	GitHub Exploit DB Packet Storm

252354	10	危険	アップルサイバートラスト株式会社 MIT Kerberos サン・マイクロシステムズヒューレット・パッカード VMware レッドハット	-	MIT Kerberos の asn1_decode_generaltime 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2009-0846	2010-12-7 16:39	2009-04-7	Show	GitHub Exploit DB Packet Storm

252355	5	警告	アップルサイバートラスト株式会社 MIT Kerberos サン・マイクロシステムズ VMware レッドハット	-	MIT Kerberos の spnego_gss_accept_sec_context 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2009-0845	2010-12-7 16:38	2009-03-27	Show	GitHub Exploit DB Packet Storm

252356	5.8	警告	アップルサイバートラスト株式会社 MIT Kerberos サン・マイクロシステムズ VMware レッドハット	-	MIT Kerberos の SPNEGO 実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2009-0844	2010-12-7 16:38	2009-04-7	Show	GitHub Exploit DB Packet Storm

252357	4	警告	Pidgin レッドハット	-	Pidgin の libpurple におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-3711	2010-12-7 15:44	2010-05-12	Show	GitHub Exploit DB Packet Storm

252358	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-3336	2010-12-6 16:51	2010-11-9	Show	GitHub Exploit DB Packet Storm

252359	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における整数アンダーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-2573	2010-12-6 16:30	2010-11-9	Show	GitHub Exploit DB Packet Storm

252360	9.3	危険	マイクロソフト	-	Microsoft Office における権限昇格の脆弱性	CWE-Other その他	CVE-2010-3337	2010-12-6 15:44	2010-08-23	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 2, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
199851	7.5	HIGH Network	sick	package_analytics	SICK Package Analytics software up to and including version V04.0.0 are vulnerable due to incorrect default permissions settings. An unauthorized attacker could read sensitive data from the system by…	CWE-276 Incorrect Default Permissions	CVE-2020-2077	2024-11-21 14:24	2020-07-29	Show	GitHub Exploit DB Packet Storm

199852	9.8	CRITICAL Network	sick	package_analytics	SICK Package Analytics software up to and including version V04.0.0 are vulnerable to an authentication bypass by directly interfacing with the REST API. An attacker can send unauthorized requests, b…	CWE-306 Missing Authentication for Critical Function	CVE-2020-2076	2024-11-21 14:24	2020-07-29	Show	GitHub Exploit DB Packet Storm

199853	5.4	MEDIUM Network	jenkins	jenkins	Jenkins 2.244 and earlier, LTS 2.235.1 and earlier does not escape the upstream job's display name shown as part of a build cause, resulting in a stored cross-site scripting vulnerability.	CWE-79 Cross-site Scripting	CVE-2020-2221	2024-11-21 14:24	2020-07-16	Show	GitHub Exploit DB Packet Storm

199854	5.4	MEDIUM Network	jenkins	jenkins	Jenkins 2.244 and earlier, LTS 2.235.1 and earlier does not escape the agent name in the build time trend page, resulting in a stored cross-site scripting vulnerability.	CWE-79 Cross-site Scripting	CVE-2020-2220	2024-11-21 14:24	2020-07-16	Show	GitHub Exploit DB Packet Storm

199855	8.1	HIGH Network	paloaltonetworks	pan-os	An OS Command Injection vulnerability in the PAN-OS GlobalProtect portal allows an unauthenticated network based attacker to execute arbitrary OS commands with root privileges. An attacker requires s…	CWE-78 OS Command	CVE-2020-2034	2024-11-21 14:24	2020-07-9	Show	GitHub Exploit DB Packet Storm

199856	4.9	MEDIUM Network	paloaltonetworks	pan-os	An integer underflow vulnerability in the dnsproxyd component of the PAN-OS management interface allows authenticated administrators to issue a command from the command line interface that causes the…	CWE-191 Integer Underflow (Wrap or Wraparound)	CVE-2020-2031	2024-11-21 14:24	2020-07-9	Show	GitHub Exploit DB Packet Storm

199857	7.2	HIGH Network	paloaltonetworks	pan-os	An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated administrators to execute arbitrary OS commands with root privileges. This issue impacts PAN-OS 8.1 …	CWE-78 OS Command	CVE-2020-2030	2024-11-21 14:24	2020-07-9	Show	GitHub Exploit DB Packet Storm

199858	5.4	MEDIUM Network	jenkins	link_column	Jenkins Link Column Plugin 1.0 and earlier does not filter URLs of links created by users with View/Configure permission, resulting in a stored cross-site scripting vulnerability.	CWE-79 Cross-site Scripting	CVE-2020-2219	2024-11-21 14:24	2020-07-3	Show	GitHub Exploit DB Packet Storm

199859	3.3	LOW Local	hp_application_lifecycle_management_quality_center_project	hp_application_lifecycle_management_quality_center	Jenkins HP ALM Quality Center Plugin 1.6 and earlier stores a password unencrypted in its global configuration file on the Jenkins master where it can be viewed by users with access to the master fil…	CWE-522 Insufficiently Protected Credentials	CVE-2020-2218	2024-11-21 14:24	2020-07-3	Show	GitHub Exploit DB Packet Storm

199860	6.1	MEDIUM Network	praqma	compatibility_action_storage	Jenkins Compatibility Action Storage Plugin 1.0 and earlier does not escape the content coming from the MongoDB in the testConnection form validation endpoint, resulting in a reflected cross-site scr…	CWE-79 Cross-site Scripting	CVE-2020-2217	2024-11-21 14:24	2020-07-3	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed