Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
200981 7.5 危険 CloudBees - CloudBees Jenkins の Jenkins CLI サブシステムにおける任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2015-8103 2016-02-4 16:52 2015-11-11 Show GitHub Exploit DB Packet Storm
200982 4.3 警告 CloudBees - CloudBees Jenkins のスレーブの overview ページにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-5326 2016-02-4 16:52 2015-11-11 Show GitHub Exploit DB Packet Storm
200983 7.5 危険 CloudBees - CloudBees Jenkins におけるスレーブからマスターへのアクセス制限を回避される脆弱性 CWE-Other
その他
CVE-2015-5325 2016-02-4 16:52 2015-11-11 Show GitHub Exploit DB Packet Storm
200984 5 警告 CloudBees - CloudBees Jenkins における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2015-5324 2016-02-4 16:52 2015-11-11 Show GitHub Exploit DB Packet Storm
200985 6.5 警告 CloudBees - CloudBees Jenkins における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2015-5323 2016-02-4 16:51 2015-11-11 Show GitHub Exploit DB Packet Storm
200986 5 警告 CloudBees - CloudBees Jenkins におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2015-5322 2016-02-4 16:51 2015-11-11 Show GitHub Exploit DB Packet Storm
200987 5 警告 CloudBees - CloudBees Jenkins の CLI コマンドの overview および help ページのサイドパネルウィジェットにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2015-5321 2016-02-4 16:51 2015-11-11 Show GitHub Exploit DB Packet Storm
200988 5 警告 CloudBees - CloudBees Jenkins におけるスレーブとして接続される脆弱性 CWE-200
情報漏えい
CVE-2015-5320 2016-02-4 16:51 2015-11-11 Show GitHub Exploit DB Packet Storm
200989 5 警告 CloudBees - CloudBees Jenkins のジョブ作成 CLI コマンドにおける XML 外部エンティティの脆弱性 CWE-Other
その他
CVE-2015-5319 2016-02-4 16:51 2015-11-11 Show GitHub Exploit DB Packet Storm
200990 6.8 警告 CloudBees - CloudBees Jenkins における CSRF 保護メカニズムを回避される脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2015-5318 2016-02-4 16:51 2015-11-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 19, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
307001 - symantec altiris_deployment_solution Race condition in the file transfer functionality in Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430 allows remote attackers to read sensitive files and prevent client updates by … CWE-362
Race Condition
CVE-2009-3110 2013-02-7 13:21 2009-09-9 Show GitHub Exploit DB Packet Storm
307002 - ibm filenet_content_manager IBM FileNet Content Manager 4.0, 4.0.1, and 4.5, as used in IBM WebSphere Application Server (WAS) and Oracle BEA WebLogic Application Server, when the CE Web Services listener has a certain WSEAF co… CWE-264
Permissions, Privileges, and Access Controls
CVE-2009-1953 2013-01-29 14:00 2009-06-8 Show GitHub Exploit DB Packet Storm
307003 - oracle mojarra Oracle Mojarra 1.2_14 and 2.0.2, as used in IBM WebSphere Application Server, Caucho Resin, and other applications, does not properly handle an unencrypted view state, which allows remote attackers t… CWE-79
Cross-site Scripting
CVE-2010-2087 2013-01-28 14:00 2010-05-28 Show GitHub Exploit DB Packet Storm
307004 - fr.simon_rundell pd_resources SQL injection vulnerability in the Diocese of Portsmouth Resources Database (pd_resources) extension 0.1.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecif… CWE-89
SQL Injection
CVE-2009-4396 2013-01-4 14:00 2009-12-23 Show GitHub Exploit DB Packet Storm
307005 - vocera wireless_handset Vocera Communications wireless handsets, when using Protected Extensible Authentication Protocol (PEAP), do not validate server certificates, which allows remote wireless access points to steal hashe… CWE-20
 Improper Input Validation 
CVE-2008-1114 2013-01-3 14:00 2008-03-4 Show GitHub Exploit DB Packet Storm
307006 - oracle secure_backup Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.1.0.1 allows remote attackers to affect confidentiality via unknown vectors. NVD-CWE-noinfo
CVE-2008-3981 2013-01-3 14:00 2009-01-14 Show GitHub Exploit DB Packet Storm
307007 - nec mobile_handset Unspecified vulnerability in the NEC mobile handset allows remote attackers to cause a denial of service (reboot) via crafted packets. NOTE: as of 20071016, the only disclosure is a vague pre-advisor… CWE-20
 Improper Input Validation 
CVE-2007-5557 2013-01-3 14:00 2007-10-19 Show GitHub Exploit DB Packet Storm
307008 - mybb mybb Multiple unspecified vulnerabilities in MyBulletinBoard (MyBB) before 1.0.2 have unspecified impact and attack vectors, related to (1) admin/moderate.php, (2) admin/themes.php, (3) inc/functions.php,… NVD-CWE-noinfo
CVE-2006-0218 2013-01-3 14:00 2006-01-17 Show GitHub Exploit DB Packet Storm
307009 - invisionpower invision_power_board The make_password function in ipsclass.php in Invision Power Board (IPB) 2.1.4 uses random data generated from partially predictable seeds to create the authentication code that is sent by e-mail to … CWE-287
Improper Authentication
CVE-2006-0633 2013-01-3 14:00 2006-02-10 Show GitHub Exploit DB Packet Storm
307010 - zen-cart zen_cart Zen Cart before 1.2.7 does not protect the admin/includes directory, which allows remote attackers to cause unknown impact via unspecified vectors, probably direct requests. CWE-264
Permissions, Privileges, and Access Controls
CVE-2006-0697 2013-01-3 14:00 2006-02-15 Show GitHub Exploit DB Packet Storm