Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 7, 2026, 2:09 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252201	4.6	警告	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux kernel における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0291	2011-03-1 14:44	2010-02-15	Show	GitHub Exploit DB Packet Storm

252202	7.1	危険	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux kernel の sctp_process_unk_param 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-1173	2011-03-1 14:43	2010-05-7	Show	GitHub Exploit DB Packet Storm

252203	2.6	注意	サイバートラスト株式会社 VMware Linux レッドハット	-	RHEL の MMIO 命令デコーダにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-0730	2011-03-1 14:42	2010-05-6	Show	GitHub Exploit DB Packet Storm

252204	4.9	警告	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux kernel の drivers/connector/connector.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-0410	2011-03-1 14:41	2010-02-22	Show	GitHub Exploit DB Packet Storm

252205	7.1	危険	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux Kernel の azx_position_ok 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-189 数値処理の問題	CVE-2010-1085	2011-03-1 14:40	2010-04-6	Show	GitHub Exploit DB Packet Storm

252206	7.8	危険	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux Kernel の ULE decapsulation functionality におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-1086	2011-03-1 14:39	2010-04-6	Show	GitHub Exploit DB Packet Storm

252207	4.7	警告	サイバートラスト株式会社 VMware Linux レッドハット	-	x86_64 プラットフォーム上の Linux kernel の load_elf_binary 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-0307	2011-03-1 14:38	2010-03-16	Show	GitHub Exploit DB Packet Storm

252208	4.6	警告	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux Kernel の do_pages_move 関数におけるカーネルメモリの情報が漏えいする脆弱性	CWE-Other その他	CVE-2010-0415	2011-03-1 14:35	2010-02-17	Show	GitHub Exploit DB Packet Storm

252209	7.1	危険	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux kernel の ext4_decode_error 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-4308	2011-03-1 14:34	2009-12-13	Show	GitHub Exploit DB Packet Storm

252210	7.8	危険	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux Kernel の SCTP 実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-0008	2011-03-1 14:33	2010-03-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
256961	7.5	HIGH Network	jenkins	pipeline-input-step	The Pipeline: Input Step Plugin by default allowed users with Item/Read access to a pipeline to interact with the step to provide input. This has been changed, and now requires users to have the Item…	CWE-200 Information Exposure	CVE-2017-1000108	2024-11-21 12:04	2017-10-5	Show	GitHub Exploit DB Packet Storm

256962	8.8	HIGH Network	jenkins	script_security	Script Security Plugin did not apply sandboxing restrictions to constructor invocations via positional arguments list, super constructor invocations, method references, and type coercion expressions.…	NVD-CWE-noinfo	CVE-2017-1000107	2024-11-21 12:04	2017-10-5	Show	GitHub Exploit DB Packet Storm

256963	5.3	MEDIUM Network	jenkins	blue_ocean	The optional Run/Artifacts permission can be enabled by setting a Java system property. Blue Ocean did not check this permission before providing access to archived artifacts, Item/Read permission wa…	CWE-862 Missing Authorization	CVE-2017-1000105	2024-11-21 12:04	2017-10-5	Show	GitHub Exploit DB Packet Storm

256964	5.4	MEDIUM Network	jenkins	dry	The custom Details view of the Static Analysis Utilities based DRY Plugin, was vulnerable to a persisted cross-site scripting vulnerability: Malicious users able to influence the input to this plugin…	CWE-79 Cross-site Scripting	CVE-2017-1000103	2024-11-21 12:04	2017-10-5	Show	GitHub Exploit DB Packet Storm

256965	5.4	MEDIUM Network	jenkins	static_analysis_utilities	The Details view of some Static Analysis Utilities based plugins, was vulnerable to a persisted cross-site scripting vulnerability: Malicious users able to influence the input to these plugins, for e…	CWE-79 Cross-site Scripting	CVE-2017-1000102	2024-11-21 12:04	2017-10-5	Show	GitHub Exploit DB Packet Storm

256966	8.5	HIGH Network	jenkins	blue_ocean	Blue Ocean allows the creation of GitHub organization folders that are set up to scan a GitHub organization for repositories and branches containing a Jenkinsfile, and create corresponding pipelines …	CWE-287 Improper Authentication	CVE-2017-1000106	2024-11-21 12:04	2017-10-5	Show	GitHub Exploit DB Packet Storm

256967	6.5	MEDIUM Network	jenkins	config_file_provider	The Config File Provider Plugin is used to centrally manage configuration files that often include secrets, such as passwords. Users with only Overall/Read access to Jenkins were able to access URLs …	CWE-269 Improper Privilege Management	CVE-2017-1000104	2024-11-21 12:04	2017-10-5	Show	GitHub Exploit DB Packet Storm

256968	6.5	MEDIUM Network	haxx	curl	curl supports "globbing" of URLs, in which a user can pass a numerical range to have the tool iterate over those numbers to do a sequence of transfers. In the globbing function that parses the numeri…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-1000101	2024-11-21 12:04	2017-10-5	Show	GitHub Exploit DB Packet Storm

256969	6.5	MEDIUM Network	haxx	libcurl	When doing a TFTP transfer and curl/libcurl is given a URL that contains a very long file name (longer than about 515 bytes), the file name is truncated to fit within the buffer boundaries, but the b…	CWE-200 Information Exposure	CVE-2017-1000100	2024-11-21 12:04	2017-10-5	Show	GitHub Exploit DB Packet Storm

256970	6.5	MEDIUM Network	haxx	libcurl	When asking to get a file from a file:// URL, libcurl provides a feature that outputs meta-data about the file using HTTP-like headers. The code doing this would send the wrong buffer to the user (st…	CWE-200 Information Exposure	CVE-2017-1000099	2024-11-21 12:04	2017-10-5	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed