Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255551	9.3	危険	アドビシステムズ	-	Windows 上で稼働する Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-2888	2010-10-20 14:35	2010-10-5	Show	GitHub Exploit DB Packet Storm

255552	9.3	危険	アドビシステムズレッドハット	-	Linux 上で稼働する Adobe Reader および Acrobat における権限を取得される脆弱性	CWE-noinfo 情報不足	CVE-2010-2887	2010-10-20 14:35	2010-10-5	Show	GitHub Exploit DB Packet Storm

255553	6.8	警告	pon software	-	Archive Decoder における実行ファイル読み込みに関する脆弱性	CWE-Other その他	CVE-2010-3160	2010-10-20 14:03	2010-10-20	Show	GitHub Exploit DB Packet Storm

255554	5.1	警告	pon software	-	Explzh における実行ファイル読み込みに関する脆弱性	CWE-Other その他	CVE-2010-3159	2010-10-20 14:02	2010-10-20	Show	GitHub Exploit DB Packet Storm

255555	6.8	警告	サイバートラスト株式会社 FreeType Project ターボリナックスレッドハット	-	FreeType のデモプログラムにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-2527	2010-10-19 15:22	2010-07-12	Show	GitHub Exploit DB Packet Storm

255556	6.8	警告	サイバートラスト株式会社 FreeType Project ターボリナックスレッドハット	-	FreeType の ftmulti.c におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-2541	2010-10-19 15:20	2010-08-6	Show	GitHub Exploit DB Packet Storm

255557	7.5	危険	The PHP Group アップルターボリナックス	-	PHP の SplObjectStorage における重要な情報を取得される脆弱性	CWE-399 リソース管理の問題	CVE-2010-2225	2010-10-19 15:20	2010-06-24	Show	GitHub Exploit DB Packet Storm

255558	2.1	注意	The PHP Group サイバートラスト株式会社ターボリナックスレッドハット	-	PHP における同じ Web サーバ上でホストされた別サイトの振る舞いを変更される脆弱性	CWE-134 書式文字列の問題	CVE-2009-0754	2010-10-19 15:17	2009-03-3	Show	GitHub Exploit DB Packet Storm

255559	5	警告	The PHP Group アップルターボリナックスレッドハット	-	PHP の JSON_parser 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2009-1271	2010-10-19 15:16	2009-04-8	Show	GitHub Exploit DB Packet Storm

255560	7.5	危険	アップルサイバートラスト株式会社ターボリナックスサン・マイクロシステムズレッドハット	-	FreeType2 における一つずれエラーの脆弱性	CWE-189 数値処理の問題	CVE-2008-1808	2010-10-19 15:15	2008-06-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
225321	7.2	HIGH Network	centreon	centreon_web	Centreon Web before 2.8.30, 18.10.x before 18.10.8, 19.04.x before 19.04.5 and 19.10.x before 19.10.2 allows Remote Code Execution by an administrator who can modify Macro Expression location setting…	NVD-CWE-noinfo	CVE-2019-16405	2024-11-21 13:30	2019-11-22	Show	GitHub Exploit DB Packet Storm

225322	8.8	HIGH Network	jenkins	google_compute_engine	A cross-site request forgery vulnerability in Jenkins Google Compute Engine Plugin 4.1.1 and earlier in ComputeEngineCloud#doProvision could be used to provision new agents.	CWE-352 Origin Validation Error	CVE-2019-16548	2024-11-21 13:30	2019-11-22	Show	GitHub Exploit DB Packet Storm

225323	4.3	MEDIUM Network	jenkins	google_compute_engine	Missing permission checks in various API endpoints in Jenkins Google Compute Engine Plugin 4.1.1 and earlier allow attackers with Overall/Read permission to obtain limited information about the plugi…	CWE-862 Missing Authorization	CVE-2019-16547	2024-11-21 13:30	2019-11-22	Show	GitHub Exploit DB Packet Storm

225324	5.9	MEDIUM Network	jenkins	google_compute_engine	Jenkins Google Compute Engine Plugin 4.1.1 and earlier does not verify SSH host keys when connecting agents created by the plugin, enabling man-in-the-middle attacks.	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2019-16546	2024-11-21 13:30	2019-11-22	Show	GitHub Exploit DB Packet Storm

225325	6.5	MEDIUM Network	qmetry	jenkins_qmetry_for_jira	Jenkins QMetry for JIRA - Test Management Plugin transmits credentials in its configuration in plain text as part of job configuration forms, potentially resulting in their exposure.	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2019-16545	2024-11-21 13:30	2019-11-22	Show	GitHub Exploit DB Packet Storm

225326	8.8	HIGH Network	qmetry	jenkins_qmetry_for_jira	Jenkins QMetry for JIRA - Test Management Plugin 1.12 and earlier stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read per…	CWE-522 Insufficiently Protected Credentials	CVE-2019-16544	2024-11-21 13:30	2019-11-22	Show	GitHub Exploit DB Packet Storm

225327	5.5	MEDIUM Local	jenkins	spira_importer	Jenkins Spira Importer Plugin 3.2.2 and earlier stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file …	CWE-522 Insufficiently Protected Credentials	CVE-2019-16543	2024-11-21 13:30	2019-11-22	Show	GitHub Exploit DB Packet Storm

225328	6.5	MEDIUM Network	jenkins	anchore_container_image_scanner	Jenkins Anchore Container Image Scanner Plugin 1.0.19 and earlier stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read per…	CWE-522 Insufficiently Protected Credentials	CVE-2019-16542	2024-11-21 13:30	2019-11-22	Show	GitHub Exploit DB Packet Storm

225329	9.9	CRITICAL Network	jenkins	jira	Jenkins JIRA Plugin 3.0.10 and earlier does not declare the correct (folder) scope for per-folder Jira site definitions, allowing users to select and use credentials with System scope.	CWE-668 Exposure of Resource to Wrong Sphere	CVE-2019-16541	2024-11-21 13:30	2019-11-22	Show	GitHub Exploit DB Packet Storm

225330	6.5	MEDIUM Network	jenkins	support_core	A path traversal vulnerability in Jenkins Support Core Plugin 2.63 and earlier allows attackers with Overall/Read permission to delete arbitrary files on the Jenkins master.	CWE-22 Path Traversal	CVE-2019-16540	2024-11-21 13:30	2019-11-22	Show	GitHub Exploit DB Packet Storm