Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 10, 2026, 4:07 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258201	5	警告	オラクル	-	Oracle Fusion Middleware の Oracle Internet Directory コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0872	2010-05-12 15:18	2010-04-13	Show	GitHub Exploit DB Packet Storm

258202	2.1	注意	オラクル	-	Oracle Database の Audit コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0854	2010-05-12 15:18	2010-04-13	Show	GitHub Exploit DB Packet Storm

258203	3.6	注意	オラクル	-	Oracle Database の Change Data Capture コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0870	2010-05-12 15:18	2010-04-13	Show	GitHub Exploit DB Packet Storm

258204	4	警告	オラクル	-	Oracle Database の XML DB コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0851	2010-05-12 15:17	2010-04-13	Show	GitHub Exploit DB Packet Storm

258205	4	警告	オラクル	-	Oracle Database の JavaVM コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0867	2010-05-12 15:17	2010-04-13	Show	GitHub Exploit DB Packet Storm

258206	5.5	警告	オラクル	-	Oracle Database の XML DB コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0852	2010-05-12 15:17	2010-04-13	Show	GitHub Exploit DB Packet Storm

258207	6.5	警告	オラクル	-	Oracle Database の JavaVM コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0866	2010-05-12 15:17	2010-04-13	Show	GitHub Exploit DB Packet Storm

258208	7.1	危険	オラクル	-	Oracle Database の Core RDBMS コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0860	2010-05-12 15:16	2010-04-13	Show	GitHub Exploit DB Packet Storm

258209	7.5	危険	オラクル	-	複数の Oracle 製品の Oracle Internet Directory コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0853	2010-05-12 15:16	2010-04-13	Show	GitHub Exploit DB Packet Storm

258210	2.6	注意	シックス・アパート株式会社	-	Movable Type におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1985	2010-05-12 12:01	2010-05-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
209131	8.8	HIGH Network	jenkins	jenkins	Jenkins 2.227 and earlier, LTS 2.204.5 and earlier uses different representations of request URL paths, which allows attackers to craft URLs that allow bypassing CSRF protection of any target URL.	CWE-352 Origin Validation Error	CVE-2020-2160	2024-11-21 14:24	2020-03-26	Show	GitHub Exploit DB Packet Storm

209132	8.8	HIGH Network	jenkins	cryptomove	Jenkins CryptoMove Plugin 0.1.33 and earlier allows attackers with Job/Configure access to execute arbitrary OS commands on the Jenkins master as the OS user account running Jenkins.	CWE-78 OS Command	CVE-2020-2159	2024-11-21 14:24	2020-03-10	Show	GitHub Exploit DB Packet Storm

209133	8.8	HIGH Network	jenkins	literate	Jenkins Literate Plugin 1.0 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability.	CWE-502 Deserialization of Untrusted Data	CVE-2020-2158	2024-11-21 14:24	2020-03-10	Show	GitHub Exploit DB Packet Storm

209134	4.3	MEDIUM Network	jenkins	skytap_cloud_ci	Jenkins Skytap Cloud CI Plugin 2.07 and earlier transmits configured credentials in plain text as part of job configuration forms, potentially resulting in their exposure.	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2020-2157	2024-11-21 14:24	2020-03-10	Show	GitHub Exploit DB Packet Storm

209135	4.3	MEDIUM Network	jenkins	deployhub	Jenkins DeployHub Plugin 8.0.14 and earlier transmits configured credentials in plain text as part of job configuration forms, potentially resulting in their exposure.	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2020-2156	2024-11-21 14:24	2020-03-10	Show	GitHub Exploit DB Packet Storm

209136	5.3	MEDIUM Network	jenkins	openshift_deployer	Jenkins OpenShift Deployer Plugin 1.2.0 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure.	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2020-2155	2024-11-21 14:24	2020-03-10	Show	GitHub Exploit DB Packet Storm

209137	5.5	MEDIUM Local	jenkins	zephyr_for_jira_test_management	Jenkins Zephyr for JIRA Test Management Plugin 1.5 and earlier stores its credentials in plain text in a global configuration file on the Jenkins master file system.	CWE-312 Cleartext Storage of Sensitive Information	CVE-2020-2154	2024-11-21 14:24	2020-03-10	Show	GitHub Exploit DB Packet Storm

209138	4.3	MEDIUM Network	jenkins	backlog	Jenkins Backlog Plugin 2.4 and earlier transmits configured credentials in plain text as part of job configuration forms, potentially resulting in their exposure.	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2020-2153	2024-11-21 14:24	2020-03-10	Show	GitHub Exploit DB Packet Storm

209139	6.1	MEDIUM Network	jenkins	subversion_release_manager	Jenkins Subversion Release Manager Plugin 1.2 and earlier does not escape the error message for the Repository URL field form validation, resulting in a reflected cross-site scripting vulnerability.	CWE-79 Cross-site Scripting	CVE-2020-2152	2024-11-21 14:24	2020-03-10	Show	GitHub Exploit DB Packet Storm

209140	5.3	MEDIUM Network	jenkins	quality_gates	Jenkins Quality Gates Plugin 2.5 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure.	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2020-2151	2024-11-21 14:24	2020-03-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed