Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
257251 7.5 危険 Glyph & Cog, LLC
freedesktop.org
日本電気
サイバートラスト株式会社
CUPS
レッドハット
- JBIG2 MMR デコーダにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-1182 2010-05-26 16:30 2009-04-16 Show GitHub Exploit DB Packet Storm
257252 5 警告 Glyph & Cog, LLC
freedesktop.org
日本電気
サイバートラスト株式会社
CUPS
レッドハット
- JBIG2 デコーダにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2009-1181 2010-05-26 16:29 2009-04-16 Show GitHub Exploit DB Packet Storm
257253 6.8 警告 Glyph & Cog, LLC
freedesktop.org
日本電気
サイバートラスト株式会社
CUPS
レッドハット
- JBIG2 デコーダにおける任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2009-1180 2010-05-26 16:29 2009-04-16 Show GitHub Exploit DB Packet Storm
257254 6.8 警告 Glyph & Cog, LLC
freedesktop.org
日本電気
アップル
サイバートラスト株式会社
CUPS
レッドハット
- JBIG2 デコーダにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2009-1179 2010-05-26 16:29 2009-04-16 Show GitHub Exploit DB Packet Storm
257255 6.8 警告 Glyph & Cog, LLC
freedesktop.org
日本電気
サイバートラスト株式会社
CUPS
レッドハット
- JBIG2 デコーダにおける任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2009-0800 2010-05-26 16:29 2009-04-16 Show GitHub Exploit DB Packet Storm
257256 4.3 警告 Glyph & Cog, LLC
freedesktop.org
日本電気
サイバートラスト株式会社
CUPS
レッドハット
- JBIG2 デコーダにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-0799 2010-05-26 16:28 2009-04-16 Show GitHub Exploit DB Packet Storm
257257 6.9 警告 レッドハット - RHEL の Linux kernel 用の特定のレッドハットパッチにおける権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-0729 2010-05-25 16:05 2010-03-16 Show GitHub Exploit DB Packet Storm
257258 4 警告 IBM - IBM DB2 の REPEAT 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-1560 2010-05-24 18:34 2010-04-27 Show GitHub Exploit DB Packet Storm
257259 4 警告 サン・マイクロシステムズ - Sun Solaris における lx ブランドゾーンに関するサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2009-4774 2010-05-24 18:33 2009-09-9 Show GitHub Exploit DB Packet Storm
257260 6.9 警告 サイバートラスト株式会社
Todd C. Miller
ターボリナックス
レッドハット
- sudo における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-0426 2010-05-21 18:23 2010-02-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
208181 5.4 MEDIUM
Network
jenkins jenkins Jenkins 2.227 and earlier, LTS 2.204.5 and earlier improperly processes HTML content of list view column headers, resulting in a stored XSS vulnerability exploitable by users able to control column h… CWE-79
Cross-site Scripting
CVE-2020-2163 2024-11-21 14:24 2020-03-26 Show GitHub Exploit DB Packet Storm
208182 5.4 MEDIUM
Network
jenkins jenkins Jenkins 2.227 and earlier, LTS 2.204.5 and earlier does not set Content-Security-Policy headers for files uploaded as file parameters to a build, resulting in a stored XSS vulnerability. CWE-79
Cross-site Scripting
CVE-2020-2162 2024-11-21 14:24 2020-03-26 Show GitHub Exploit DB Packet Storm
208183 5.4 MEDIUM
Network
jenkins jenkins Jenkins 2.227 and earlier, LTS 2.204.5 and earlier does not properly escape node labels that are shown in the form validation for label expressions on job configuration pages, resulting in a stored X… CWE-79
Cross-site Scripting
CVE-2020-2161 2024-11-21 14:24 2020-03-26 Show GitHub Exploit DB Packet Storm
208184 8.8 HIGH
Network
jenkins jenkins Jenkins 2.227 and earlier, LTS 2.204.5 and earlier uses different representations of request URL paths, which allows attackers to craft URLs that allow bypassing CSRF protection of any target URL. CWE-352
 Origin Validation Error
CVE-2020-2160 2024-11-21 14:24 2020-03-26 Show GitHub Exploit DB Packet Storm
208185 8.8 HIGH
Network
jenkins cryptomove Jenkins CryptoMove Plugin 0.1.33 and earlier allows attackers with Job/Configure access to execute arbitrary OS commands on the Jenkins master as the OS user account running Jenkins. CWE-78
OS Command 
CVE-2020-2159 2024-11-21 14:24 2020-03-10 Show GitHub Exploit DB Packet Storm
208186 8.8 HIGH
Network
jenkins literate Jenkins Literate Plugin 1.0 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability. CWE-502
 Deserialization of Untrusted Data
CVE-2020-2158 2024-11-21 14:24 2020-03-10 Show GitHub Exploit DB Packet Storm
208187 4.3 MEDIUM
Network
jenkins skytap_cloud_ci Jenkins Skytap Cloud CI Plugin 2.07 and earlier transmits configured credentials in plain text as part of job configuration forms, potentially resulting in their exposure. CWE-319
Cleartext Transmission of Sensitive Information
CVE-2020-2157 2024-11-21 14:24 2020-03-10 Show GitHub Exploit DB Packet Storm
208188 4.3 MEDIUM
Network
jenkins deployhub Jenkins DeployHub Plugin 8.0.14 and earlier transmits configured credentials in plain text as part of job configuration forms, potentially resulting in their exposure. CWE-319
Cleartext Transmission of Sensitive Information
CVE-2020-2156 2024-11-21 14:24 2020-03-10 Show GitHub Exploit DB Packet Storm
208189 5.3 MEDIUM
Network
jenkins openshift_deployer Jenkins OpenShift Deployer Plugin 1.2.0 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure. CWE-319
Cleartext Transmission of Sensitive Information
CVE-2020-2155 2024-11-21 14:24 2020-03-10 Show GitHub Exploit DB Packet Storm
208190 5.5 MEDIUM
Local
jenkins zephyr_for_jira_test_management Jenkins Zephyr for JIRA Test Management Plugin 1.5 and earlier stores its credentials in plain text in a global configuration file on the Jenkins master file system. CWE-312
 Cleartext Storage of Sensitive Information
CVE-2020-2154 2024-11-21 14:24 2020-03-10 Show GitHub Exploit DB Packet Storm