Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
255641 6.8 警告 マイクロソフト - Windows 上で稼働する Microsoft Internet Information Services におけるアクセス制限を回避される脆弱性 CWE-287
不適切な認証 		CVE-2010-2731 2010-10-6 16:54 2010-09-14 Show GitHub Exploit DB Packet Storm
255642 9.3 危険 マイクロソフト - Microsoft Internet Information Services におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-2730 2010-10-5 19:00 2010-09-14 Show GitHub Exploit DB Packet Storm
255643 4.3 警告 マイクロソフト - Microsoft Internet Information Services の ASP 実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2010-1899 2010-10-5 18:59 2010-09-14 Show GitHub Exploit DB Packet Storm
255644 9.3 危険 マイクロソフト - Microsoft Outlook におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-2728 2010-10-5 18:59 2010-09-14 Show GitHub Exploit DB Packet Storm
255645 9.3 危険 マイクロソフト - Microsoft Windows の USP10.DLL 内の Uniscribe 実装における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-2738 2010-10-5 18:58 2010-09-14 Show GitHub Exploit DB Packet Storm
255646 9.3 危険 マイクロソフト - Microsoft Windows の MPEG-4 コーデックにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0818 2010-10-5 18:58 2010-09-14 Show GitHub Exploit DB Packet Storm
255647 9.3 危険 マイクロソフト - Microsoft Windows の Print Spooler サービスにおける任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-2729 2010-10-5 18:57 2010-09-14 Show GitHub Exploit DB Packet Storm
255648 1.7 注意 IBM - IBM AIX の sa_snap におけるファイルを削除される脆弱性 CWE-noinfo
情報不足 		CVE-2010-3406 2010-10-5 18:57 2010-08-6 Show GitHub Exploit DB Packet Storm
255649 6.8 警告 IBM - IBM AIX および VIOS の sa_snap におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-3405 2010-10-5 18:56 2010-08-6 Show GitHub Exploit DB Packet Storm
255650 4.3 警告 有限会社 のれんずプロ - AD-EDIT2 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-2367 2010-10-5 11:02 2010-10-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
225311 4.3 MEDIUM
Network 		jenkins google_compute_engine Missing permission checks in various API endpoints in Jenkins Google Compute Engine Plugin 4.1.1 and earlier allow attackers with Overall/Read permission to obtain limited information about the plugi… CWE-862
 Missing Authorization 		CVE-2019-16547 2024-11-21 13:30 2019-11-22 Show GitHub Exploit DB Packet Storm
225312 5.9 MEDIUM
Network 		jenkins google_compute_engine Jenkins Google Compute Engine Plugin 4.1.1 and earlier does not verify SSH host keys when connecting agents created by the plugin, enabling man-in-the-middle attacks. CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2019-16546 2024-11-21 13:30 2019-11-22 Show GitHub Exploit DB Packet Storm
225313 6.5 MEDIUM
Network 		qmetry jenkins_qmetry_for_jira Jenkins QMetry for JIRA - Test Management Plugin transmits credentials in its configuration in plain text as part of job configuration forms, potentially resulting in their exposure. CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2019-16545 2024-11-21 13:30 2019-11-22 Show GitHub Exploit DB Packet Storm
225314 8.8 HIGH
Network 		qmetry jenkins_qmetry_for_jira Jenkins QMetry for JIRA - Test Management Plugin 1.12 and earlier stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read per… CWE-522
 Insufficiently Protected Credentials 		CVE-2019-16544 2024-11-21 13:30 2019-11-22 Show GitHub Exploit DB Packet Storm
225315 5.5 MEDIUM
Local 		jenkins spira_importer Jenkins Spira Importer Plugin 3.2.2 and earlier stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file … CWE-522
 Insufficiently Protected Credentials 		CVE-2019-16543 2024-11-21 13:30 2019-11-22 Show GitHub Exploit DB Packet Storm
225316 6.5 MEDIUM
Network 		jenkins anchore_container_image_scanner Jenkins Anchore Container Image Scanner Plugin 1.0.19 and earlier stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read per… CWE-522
 Insufficiently Protected Credentials 		CVE-2019-16542 2024-11-21 13:30 2019-11-22 Show GitHub Exploit DB Packet Storm
225317 9.9 CRITICAL
Network 		jenkins jira Jenkins JIRA Plugin 3.0.10 and earlier does not declare the correct (folder) scope for per-folder Jira site definitions, allowing users to select and use credentials with System scope. CWE-668
 Exposure of Resource to Wrong Sphere 		CVE-2019-16541 2024-11-21 13:30 2019-11-22 Show GitHub Exploit DB Packet Storm
225318 6.5 MEDIUM
Network 		jenkins support_core A path traversal vulnerability in Jenkins Support Core Plugin 2.63 and earlier allows attackers with Overall/Read permission to delete arbitrary files on the Jenkins master. CWE-22
Path Traversal 		CVE-2019-16540 2024-11-21 13:30 2019-11-22 Show GitHub Exploit DB Packet Storm
225319 6.5 MEDIUM
Network 		jenkins support_core A missing permission check in Jenkins Support Core Plugin 2.63 and earlier allows attackers with Overall/Read permission to delete support bundles. CWE-281
 Improper Preservation of Permissions 		CVE-2019-16539 2024-11-21 13:30 2019-11-22 Show GitHub Exploit DB Packet Storm
225320 8.8 HIGH
Network 		jenkins script_security A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.67 and earlier related to the handling of default parameter expressions in closures allowed attackers to execute arbitrary code in s… CWE-863
 Incorrect Authorization 		CVE-2019-16538 2024-11-21 13:30 2019-11-22 Show GitHub Exploit DB Packet Storm