Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
257991 6.8 警告 IBM - IBM AIX および VIOS の sa_snap におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-3405 2010-10-5 18:56 2010-08-6 Show GitHub Exploit DB Packet Storm
257992 4.3 警告 有限会社 のれんずプロ - AD-EDIT2 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-2367 2010-10-5 11:02 2010-10-5 Show GitHub Exploit DB Packet Storm
257993 9.3 危険 アップル - iPhone および iPod touch 上で稼動する Apple iOS の ImageIO におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-1817 2010-10-4 17:59 2010-09-8 Show GitHub Exploit DB Packet Storm
257994 5.8 警告 アップル - iPhone および iPod touch 上で稼動する Apple iOS の FaceTime における通話をリダイレクトされる脆弱性 CWE-Other
その他 		CVE-2010-1810 2010-10-4 17:55 2010-09-8 Show GitHub Exploit DB Packet Storm
257995 10 危険 アップル - iPhone および iPod touch 上で稼動する Apple iOS の Accessibility コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-1809 2010-10-4 17:55 2010-09-8 Show GitHub Exploit DB Packet Storm
257996 4 警告 ISC, Inc.
IBM
サイバートラスト株式会社
サン・マイクロシステムズ
ターボリナックス
ヒューレット・パッカード
レッドハット		 - BIND 9 の DNSSEC 検証処理における脆弱性 CWE-noinfo
情報不足 		CVE-2009-4022 2010-10-1 17:39 2009-12-2 Show GitHub Exploit DB Packet Storm
257997 4 警告 ISC, Inc.
サイバートラスト株式会社
ターボリナックス
ヒューレット・パッカード
レッドハット		 - ISC BIND における DNS キャッシュ汚染の脆弱性 CWE-noinfo
情報不足 		CVE-2010-0290 2010-10-1 17:39 2010-01-22 Show GitHub Exploit DB Packet Storm
257998 7.6 危険 ISC, Inc.
ヒューレット・パッカード		 - ISC BIND における処理範囲外のデータ処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2010-0382 2010-10-1 17:38 2010-01-22 Show GitHub Exploit DB Packet Storm
257999 9 危険 日立 - Groupmax Scheduler Server における複数の脆弱性 CWE-noinfo
情報不足 		- 2010-10-1 17:37 2010-09-6 Show GitHub Exploit DB Packet Storm
258000 5.8 警告 富士通
アクセラテクノロジ		 - Accela BizSearch の文書参照画面におけるフィッシング脅威の脆弱性 CWE-noinfo
情報不足 		- 2010-10-1 17:37 2010-09-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199811 7.1 HIGH
Network 		jenkins xcode_integration Jenkins Xcode integration Plugin 2.0.14 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. - CVE-2021-21656 2024-11-21 14:48 2021-05-12 Show GitHub Exploit DB Packet Storm
199812 7.1 HIGH
Network 		jenkins p4 A cross-site request forgery (CSRF) vulnerability in Jenkins P4 Plugin 1.11.4 and earlier allows attackers to connect to an attacker-specified Perforce server using attacker-specified username and pa… CWE-352
 Origin Validation Error 		CVE-2021-21655 2024-11-21 14:48 2021-05-12 Show GitHub Exploit DB Packet Storm
199813 4.3 MEDIUM
Network 		jenkins p4 Jenkins P4 Plugin 1.11.4 and earlier does not perform permission checks in multiple HTTP endpoints, allowing attackers with Overall/Read permission to connect to an attacker-specified Perforce server… - CVE-2021-21654 2024-11-21 14:48 2021-05-12 Show GitHub Exploit DB Packet Storm
199814 4.3 MEDIUM
Network 		jenkins xray_-_test_management_for_jira Jenkins Xray - Test Management for Jira Plugin 2.4.0 and earlier does not perform a permission check in an HTTP endpoint, allowing with Overall/Read permission to enumerate credentials IDs of credent… - CVE-2021-21653 2024-11-21 14:48 2021-05-12 Show GitHub Exploit DB Packet Storm
199815 7.1 HIGH
Network 		jenkins xray_-_test_management_for_jira A cross-site request forgery (CSRF) vulnerability in Jenkins Xray - Test Management for Jira Plugin 2.4.0 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified… CWE-352
 Origin Validation Error 		CVE-2021-21652 2024-11-21 14:48 2021-05-12 Show GitHub Exploit DB Packet Storm
199816 4.3 MEDIUM
Network 		jenkins s3_publisher Jenkins S3 publisher Plugin 0.11.6 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to obtain the list of configured profiles. - CVE-2021-21651 2024-11-21 14:48 2021-05-12 Show GitHub Exploit DB Packet Storm
199817 4.3 MEDIUM
Network 		jenkins s3_publisher Jenkins S3 publisher Plugin 0.11.6 and earlier does not perform Run/Artifacts permission checks in various HTTP endpoints and API models, allowing attackers with Item/Read permission to obtain inform… - CVE-2021-21650 2024-11-21 14:48 2021-05-12 Show GitHub Exploit DB Packet Storm
199818 5.4 MEDIUM
Network 		jenkins dashboard_view Jenkins Dashboard View Plugin 2.15 and earlier does not escape URLs referenced in Image Dashboard Portlets, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers wit… CWE-79
Cross-site Scripting 		CVE-2021-21649 2024-11-21 14:48 2021-05-12 Show GitHub Exploit DB Packet Storm
199819 6.1 MEDIUM
Network 		jenkins credentials Jenkins Credentials Plugin 2.3.18 and earlier does not escape user-controlled information on a view it provides, resulting in a reflected cross-site scripting (XSS) vulnerability. CWE-79
Cross-site Scripting 		CVE-2021-21648 2024-11-21 14:48 2021-05-12 Show GitHub Exploit DB Packet Storm
199820 5.5 MEDIUM
Local 		openapi-generator openapi_generator OpenAPI Generator allows generation of API client libraries (SDK generation), server stubs, documentation and configuration automatically given an OpenAPI Spec. Using `File.createTempFile` in JDK wil… CWE-668
 Exposure of Resource to Wrong Sphere 		CVE-2021-21430 2024-11-21 14:48 2021-05-11 Show GitHub Exploit DB Packet Storm