Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 8, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253881	7.8	危険	オラクル	-	Oracle Database Server の Listener コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0911	2010-08-2 19:30	2010-07-13	Show	GitHub Exploit DB Packet Storm

253882	5.5	警告	PostgreSQL.org サイバートラスト株式会社サン・マイクロシステムズレッドハット	-	PostgreSQL における任意のパラメータ設定を削除される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1975	2010-08-2 17:13	2010-05-19	Show	GitHub Exploit DB Packet Storm

253883	5	警告	MySQL AB	-	MySQL の mysql_uninstall_plugin 関数における任意のプラグインを削除される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1621	2010-08-2 17:13	2010-04-6	Show	GitHub Exploit DB Packet Storm

253884	3.5	注意	オラクル	-	Oracle Fusion Middleware の Application Server Control コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2381	2010-07-30 17:43	2010-07-13	Show	GitHub Exploit DB Packet Storm

253885	3.5	注意	オラクル	-	Oracle Fusion Middleware の Application Server Control コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0081	2010-07-30 17:42	2010-07-13	Show	GitHub Exploit DB Packet Storm

253886	4.3	警告	オラクル	-	Oracle Fusion Middleware の Wireless コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0835	2010-07-30 17:42	2010-07-13	Show	GitHub Exploit DB Packet Storm

253887	6.4	警告	オラクル	-	Oracle Fusion Middleware の WebLogic Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2375	2010-07-30 17:42	2010-07-13	Show	GitHub Exploit DB Packet Storm

253888	9.3	危険	マイクロソフト	-	Microsoft Office Outlook における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0266	2010-07-30 17:42	2010-07-13	Show	GitHub Exploit DB Packet Storm

253889	9.3	危険	マイクロソフト	-	Microsoft Office Access の FieldList の ActiveX コントロールにおける任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-1881	2010-07-30 17:41	2010-07-13	Show	GitHub Exploit DB Packet Storm

253890	9.3	危険	マイクロソフト	-	Microsoft Office Access の Microsoft Access Wizard Controls における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0814	2010-07-30 17:41	2010-07-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
201061	5.6	MEDIUM Network	jenkins	amazon_ec2	Jenkins Amazon EC2 Plugin 1.50.1 and earlier unconditionally accepts self-signed certificates and does not perform hostname validation, enabling man-in-the-middle attacks.	CWE-295 Improper Certificate Validation	CVE-2020-2187	2024-11-21 14:24	2020-05-6	Show	GitHub Exploit DB Packet Storm

201062	4.3	MEDIUM Network	jenkins	amazon_ec2	A cross-site request forgery vulnerability in Jenkins Amazon EC2 Plugin 1.50.1 and earlier allows attackers to provision instances.	CWE-352 Origin Validation Error	CVE-2020-2186	2024-11-21 14:24	2020-05-6	Show	GitHub Exploit DB Packet Storm

201063	5.6	MEDIUM Network	jenkins	amazon_ec2	Jenkins Amazon EC2 Plugin 1.50.1 and earlier does not validate SSH host keys when connecting agents, enabling man-in-the-middle attacks.	NVD-CWE-Other	CVE-2020-2185	2024-11-21 14:24	2020-05-6	Show	GitHub Exploit DB Packet Storm

201064	4.3	MEDIUM Network	jenkins	current_versions_systems	A cross-site request forgery vulnerability in Jenkins CVS Plugin 2.15 and earlier allows attackers to create and manipulate tags, and to connect to an attacker-specified URL.	CWE-352 Origin Validation Error	CVE-2020-2184	2024-11-21 14:24	2020-05-6	Show	GitHub Exploit DB Packet Storm

201065	6.5	MEDIUM Network	jenkins	copy_artifact	Jenkins Copy Artifact Plugin 1.43.1 and earlier performs improper permission checks, allowing attackers to copy artifacts from jobs they have no permission to access.	CWE-276 Incorrect Default Permissions	CVE-2020-2183	2024-11-21 14:24	2020-05-6	Show	GitHub Exploit DB Packet Storm

201066	4.3	MEDIUM Network	jenkins	credentials_binding	Jenkins Credentials Binding Plugin 1.22 and earlier does not mask (i.e., replace with asterisks) secrets containing a `$` character in some circumstances.	CWE-522 Insufficiently Protected Credentials	CVE-2020-2182	2024-11-21 14:24	2020-05-6	Show	GitHub Exploit DB Packet Storm

201067	6.5	MEDIUM Network	jenkins	credentials_binding	Jenkins Credentials Binding Plugin 1.22 and earlier does not mask (i.e., replace with asterisks) secrets in the build log when the build contains no build steps.	CWE-522 Insufficiently Protected Credentials	CVE-2020-2181	2024-11-21 14:24	2020-05-6	Show	GitHub Exploit DB Packet Storm

201068	8.8	HIGH Network	jenkins	amazon_web_services_serverless_application_model	Jenkins AWS SAM Plugin 1.2.2 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability.	CWE-502 Deserialization of Untrusted Data	CVE-2020-2180	2024-11-21 14:24	2020-04-17	Show	GitHub Exploit DB Packet Storm

201069	8.8	HIGH Network	jenkins	yaml_axis	Jenkins Yaml Axis Plugin 0.2.0 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability.	CWE-502 Deserialization of Untrusted Data	CVE-2020-2179	2024-11-21 14:24	2020-04-17	Show	GitHub Exploit DB Packet Storm

201070	7.1	HIGH Network	jenkins	parasoft_findings	Jenkins Parasoft Findings Plugin 10.4.3 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.	CWE-611 XXE	CVE-2020-2178	2024-11-21 14:24	2020-04-17	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed