Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
253581 7.5 危険 アップル
MySQL AB		 - MySQL で使用される yaSSL における複数のバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0226 2010-02-19 11:32 2008-01-10 Show GitHub Exploit DB Packet Storm
253582 7.5 危険 Linux
レッドハット		 - Linux kernel の do_coredump 関数における任意のファイルを改ざんされる脆弱性 - CVE-2006-6304 2010-02-18 14:28 2006-12-14 Show GitHub Exploit DB Packet Storm
253583 7.8 危険 Linux
レッドハット		 - Linux kernel の net/ipv4/route.c 用の特定のレッドハットパッチにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2009-4272 2010-02-18 14:28 2010-01-19 Show GitHub Exploit DB Packet Storm
253584 9.3 危険 レッドハット
リアルネットワークス		 - Realnetworks RealPlayer におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-4248 2010-02-17 11:48 2010-01-19 Show GitHub Exploit DB Packet Storm
253585 9.3 危険 リアルネットワークス - Realnetworks RealPlayer における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2009-4246 2010-02-17 11:48 2010-01-19 Show GitHub Exploit DB Packet Storm
253586 9.3 危険 レッドハット
リアルネットワークス		 - Realnetworks RealPlayer の smlrender.dll における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2009-4257 2010-02-17 11:48 2010-01-19 Show GitHub Exploit DB Packet Storm
253587 9.3 危険 レッドハット
リアルネットワークス		 - Realnetworks RealPlayer におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-4245 2010-02-17 11:48 2010-01-19 Show GitHub Exploit DB Packet Storm
253588 9.3 危険 リアルネットワークス - Realnetworks RealPlayer における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2009-4244 2010-02-17 11:48 2010-01-19 Show GitHub Exploit DB Packet Storm
253589 9.3 危険 リアルネットワークス - RealNetworks RealPlayer の DLL ファイルにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2009-0376 2010-02-17 11:47 2010-01-19 Show GitHub Exploit DB Packet Storm
253590 9.3 危険 リアルネットワークス - RealNetworks RealPlayer の DLL ファイルにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-0375 2010-02-17 11:47 2010-01-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199491 7.1 HIGH
Network 		jenkins rundeck Jenkins Rundeck Plugin 3.6.6 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. CWE-611
XXE 		CVE-2020-2144 2024-11-21 14:24 2020-03-10 Show GitHub Exploit DB Packet Storm
199492 5.3 MEDIUM
Network 		jenkins logstash Jenkins Logstash Plugin 2.3.1 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure. CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2020-2143 2024-11-21 14:24 2020-03-10 Show GitHub Exploit DB Packet Storm
199493 4.3 MEDIUM
Network 		jenkins p4 A missing permission check in Jenkins P4 Plugin 1.10.10 and earlier allows attackers with Overall/Read permission to trigger builds. CWE-862
 Missing Authorization 		CVE-2020-2142 2024-11-21 14:24 2020-03-10 Show GitHub Exploit DB Packet Storm
199494 4.3 MEDIUM
Network 		jenkins p4 A cross-site request forgery vulnerability in Jenkins P4 Plugin 1.10.10 and earlier allows attackers to trigger builds or add a labels in Perforce. CWE-352
 Origin Validation Error 		CVE-2020-2141 2024-11-21 14:24 2020-03-10 Show GitHub Exploit DB Packet Storm
199495 6.1 MEDIUM
Network 		jenkins audit_trail Jenkins Audit Trail Plugin 3.2 and earlier does not escape the error message for the URL Patterns field form validation, resulting in a reflected cross-site scripting vulnerability. CWE-79
Cross-site Scripting 		CVE-2020-2140 2024-11-21 14:24 2020-03-10 Show GitHub Exploit DB Packet Storm
199496 6.5 MEDIUM
Network 		jenkins cobertura An arbitrary file write vulnerability in Jenkins Cobertura Plugin 1.15 and earlier allows attackers able to control the coverage report file contents to overwrite any file on the Jenkins master file … CWE-22
Path Traversal 		CVE-2020-2139 2024-11-21 14:24 2020-03-10 Show GitHub Exploit DB Packet Storm
199497 7.1 HIGH
Network 		jenkins cobertura Jenkins Cobertura Plugin 1.15 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. CWE-611
XXE 		CVE-2020-2138 2024-11-21 14:24 2020-03-10 Show GitHub Exploit DB Packet Storm
199498 4.8 MEDIUM
Network 		jenkins timestamper Jenkins Timestamper Plugin 1.11.1 and earlier does not sanitize HTML formatting of its output, resulting in a stored XSS vulnerability exploitable by attackers with Overall/Administer permission. CWE-79
Cross-site Scripting 		CVE-2020-2137 2024-11-21 14:24 2020-03-10 Show GitHub Exploit DB Packet Storm
199499 5.4 MEDIUM
Network 		jenkins git Jenkins Git Plugin 4.2.0 and earlier does not escape the error message for the repository URL for Microsoft TFS field form validation, resulting in a stored cross-site scripting vulnerability. CWE-79
Cross-site Scripting 		CVE-2020-2136 2024-11-21 14:24 2020-03-10 Show GitHub Exploit DB Packet Storm
199500 8.8 HIGH
Network 		jenkins script_security Sandbox protection in Jenkins Script Security Plugin 1.70 and earlier could be circumvented through crafted method calls on objects that implement GroovyInterceptable. CWE-863
 Incorrect Authorization 		CVE-2020-2135 2024-11-21 14:24 2020-03-10 Show GitHub Exploit DB Packet Storm