Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251861 7.5 危険 DrBenHur - DBHcms の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4869 2012-02-9 11:10 2011-10-5 Show GitHub Exploit DB Packet Storm
251862 4.3 警告 W-Agora - W-Agora の search.php3 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4868 2012-02-9 11:10 2011-10-5 Show GitHub Exploit DB Packet Storm
251863 7.5 危険 W-Agora - W-Agora の search.php3 におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-4867 2012-02-9 11:10 2011-10-5 Show GitHub Exploit DB Packet Storm
251864 7.5 危険 Chipmunk Scripts - Chipmunk Board の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4866 2012-02-9 11:09 2011-10-5 Show GitHub Exploit DB Packet Storm
251865 7.5 危険 Jextensions - Joomla! 用 JE Guestbook (com_jeguestbook) コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4865 2012-02-9 11:08 2011-10-5 Show GitHub Exploit DB Packet Storm
251866 7.5 危険 Daniel James Scott - Joomla! 用 Club Manager (com_clubmanager) コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4864 2012-02-9 11:08 2011-10-5 Show GitHub Exploit DB Packet Storm
251867 4.3 警告 The GetSimple Team - GetSimple CMS の admin/changedata.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4863 2012-02-9 11:07 2011-10-5 Show GitHub Exploit DB Packet Storm
251868 7.5 危険 Joomla!
Jextensions		 - Joomla! 用 JExtensions JE Director コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4862 2012-02-9 11:07 2011-10-5 Show GitHub Exploit DB Packet Storm
251869 7.5 危険 webSPELL - webSPELL の asearch.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4861 2012-02-9 11:06 2011-10-5 Show GitHub Exploit DB Packet Storm
251870 7.5 危険 Galaxyscriptz - MyPhpAuction の product_desc.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4860 2012-02-9 11:05 2011-10-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
246961 9.8 CRITICAL
Network 		paloaltonetworks expedition The Palo Alto Networks Expedition Migration tool 1.0.107 and earlier may allow an unauthenticated attacker with remote access to run system level commands on the device hosting this service/applicati… CWE-269
 Improper Privilege Management 		CVE-2018-10143 2024-11-21 12:40 2018-12-12 Show GitHub Exploit DB Packet Storm
246962 8.8 HIGH
Network 		jenkins
redhat 		pipeline\
openshift_container_platform 		A sandbox bypass vulnerability exists in Pipeline: Groovy Plugin 2.59 and earlier in groovy-sandbox/src/main/java/org/kohsuke/groovy/sandbox/SandboxTransformer.java, groovy-cps/lib/src/main/java/com/… CWE-269
 Improper Privilege Management 		CVE-2018-1000866 2024-11-21 12:40 2018-12-10 Show GitHub Exploit DB Packet Storm
246963 8.8 HIGH
Network 		jenkins
redhat 		script_security
openshift_container_platform 		A sandbox bypass vulnerability exists in Script Security Plugin 1.47 and earlier in groovy-sandbox/src/main/java/org/kohsuke/groovy/sandbox/SandboxTransformer.java that allows attackers with Job/Conf… CWE-269
 Improper Privilege Management 		CVE-2018-1000865 2024-11-21 12:40 2018-12-10 Show GitHub Exploit DB Packet Storm
246964 6.5 MEDIUM
Network 		jenkins
redhat 		jenkins
openshift_container_platform 		A denial of service vulnerability exists in Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in CronTab.java that allows attackers with Overall/Read permission to have a request handling thread ent… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2018-1000864 2024-11-21 12:40 2018-12-10 Show GitHub Exploit DB Packet Storm
246965 8.2 HIGH
Network 		jenkins
redhat 		jenkins
openshift_container_platform 		A data modification vulnerability exists in Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in User.java, IdStrategy.java that allows attackers to submit crafted user names that can cause an impro… CWE-22
Path Traversal 		CVE-2018-1000863 2024-11-21 12:40 2018-12-10 Show GitHub Exploit DB Packet Storm
246966 4.3 MEDIUM
Network 		jenkins
redhat 		jenkins
openshift_container_platform 		An information exposure vulnerability exists in Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in DirectoryBrowserSupport.java that allows attackers with the ability to control build output to br… CWE-200
Information Exposure 		CVE-2018-1000862 2024-11-21 12:40 2018-12-10 Show GitHub Exploit DB Packet Storm
246967 9.8 CRITICAL
Network 		jenkins
redhat 		jenkins
openshift_container_platform 		A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in stapler/core/src/main/java/org/kohsuke/stapler/MetaClass.java that all… CWE-502
 Deserialization of Untrusted Data 		CVE-2018-1000861 2024-11-21 12:40 2018-12-10 Show GitHub Exploit DB Packet Storm
246968 8.8 HIGH
Network 		kubernetes minikube In Minikube versions 0.3.0-0.29.0, minikube exposes the Kubernetes Dashboard listening on the VM IP at port 30000. In VM environments where the IP is easy to predict, the attacker can use DNS rebindi… CWE-352
 Origin Validation Error 		CVE-2018-1002103 2024-11-21 12:40 2018-12-6 Show GitHub Exploit DB Packet Storm
246969 9.8 CRITICAL
Network 		kubernetes kubernetes In Kubernetes versions 1.9.0-1.9.9, 1.10.0-1.10.5, and 1.11.0-1.11.1, user input was handled insecurely while setting up volume mounts on Windows nodes, which could lead to command line argument inje… NVD-CWE-noinfo
CVE-2018-1002101 2024-11-21 12:40 2018-12-6 Show GitHub Exploit DB Packet Storm
246970 9.8 CRITICAL
Network 		kubernetes
redhat
netapp 		kubernetes
openshift_container_platform
trident 		In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the kube-apiserver allowed specially crafted requests to estab… CWE-388
 7PK - Errors 		CVE-2018-1002105 2024-11-21 12:40 2018-12-6 Show GitHub Exploit DB Packet Storm