Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 3, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252541	6.9	警告	Mozilla Foundation	-	Windows 上で稼働する複数の Mozilla 製品における権限昇格の脆弱性	CWE-Other その他	CVE-2010-3181	2010-11-11 15:07	2010-10-19	Show	GitHub Exploit DB Packet Storm

252542	9.3	危険	アドビシステムズ	-	複数の Adobe 製品における任意のコードを実行される脆弱性	CWE-Other その他	CVE-2010-3153	2010-11-10 15:34	2010-10-18	Show	GitHub Exploit DB Packet Storm

252543	4.3	警告	アドビシステムズ	-	Adobe RoboHelp および RoboHelp Server におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2886	2010-11-10 15:34	2010-10-18	Show	GitHub Exploit DB Packet Storm

252544	4.3	警告	アドビシステムズ	-	Adobe RoboHelp および RoboHelp Server におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2885	2010-11-10 15:33	2010-10-18	Show	GitHub Exploit DB Packet Storm

252545	9.3	危険	リアルネットワークス	-	RealNetworks RealPlayer の browser-plugin 実装における任意のプログラムを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-3749	2010-11-10 15:33	2010-10-15	Show	GitHub Exploit DB Packet Storm

252546	10	危険	リアルネットワークス	-	RealNetworks RealPlayer の RichFX コンポーネントにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-3748	2010-11-10 15:32	2010-10-15	Show	GitHub Exploit DB Packet Storm

252547	9.3	危険	リアルネットワークス	-	RealNetworks RealPlayer の ActiveX コントロールにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-3751	2010-11-10 15:32	2010-10-15	Show	GitHub Exploit DB Packet Storm

252548	10	危険	SAP	-	SAP BusinessObjects Axis2 におけるデフォルトパスワードの問題	CWE-255 証明書・パスワード管理	CVE-2010-0219	2010-11-10 15:32	2010-10-14	Show	GitHub Exploit DB Packet Storm

252549	4	警告	IBM	-	IBM WebSphere Application Server の管理コンソールにおけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2010-0781	2010-11-9 15:30	2010-09-13	Show	GitHub Exploit DB Packet Storm

252550	10	危険	IBM	-	IBM WebSphere Application Server における脆弱性	CWE-20 不適切な入力確認	CVE-2010-3186	2010-11-9 15:30	2010-08-26	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 3, 2026, 4:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
256201	5.4	MEDIUM Network	pluxml	pluxml	PluXml version 5.6 is vulnerable to stored cross-site scripting vulnerability, within the article creation page, which can result in escalation of privileges.	CWE-79 Cross-site Scripting	CVE-2017-1001001	2024-11-21 12:04	2017-11-2	Show	GitHub Exploit DB Packet Storm

256202	9.8	CRITICAL Network	jenkins	ssh	The SSH Plugin stores credentials which allow jobs to access remote servers via the SSH protocol. User passwords and passphrases for encrypted SSH keys are stored in plaintext in a configuration file.	CWE-522 Insufficiently Protected Credentials	CVE-2017-1000245	2024-11-21 12:04	2017-11-1	Show	GitHub Exploit DB Packet Storm

256203	8.8	HIGH Network	jenkins	favorite	Jenkins Favorite Plugin version 2.2.0 and older is vulnerable to CSRF resulting in data modification	CWE-352 Origin Validation Error	CVE-2017-1000244	2024-11-21 12:04	2017-11-1	Show	GitHub Exploit DB Packet Storm

256204	4.3	MEDIUM Network	jenkins	favorite_plugin	Jenkins Favorite Plugin 2.1.4 and older does not perform permission checks when changing favorite status, allowing any user to set any other user's favorites	CWE-862 Missing Authorization	CVE-2017-1000243	2024-11-21 12:04	2017-11-1	Show	GitHub Exploit DB Packet Storm

256205	3.3	LOW Local	jenkins	git_client	Jenkins Git Client Plugin 2.4.2 and earlier creates temporary file with insecure permissions resulting in information disclosure	CWE-200 Information Exposure	CVE-2017-1000242	2024-11-21 12:04	2017-11-1	Show	GitHub Exploit DB Packet Storm

256206	9.1	CRITICAL Network	haxx debian	libcurl debian_linux	An IMAP FETCH response line indicates the size of the returned data, in number of bytes. When that response says the data is zero bytes, libcurl would pass on that (non-existing) data with a pointer …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-1000257	2024-11-21 12:04	2017-11-1	Show	GitHub Exploit DB Packet Storm

256207	5.5	MEDIUM Local	gnu	emacs	GNU Emacs version 25.3.1 (and other versions most likely) ignores umask when creating a backup save file ("[ORIGINAL_FILENAME]~") resulting in files that may be world readable or otherwise accessible…	CWE-200 Information Exposure	CVE-2017-1000383	2024-11-21 12:04	2017-11-1	Show	GitHub Exploit DB Packet Storm

256208	5.5	MEDIUM Local	vim	vim	VIM version 8.0.1187 (and other versions most likely) ignores umask when creating a swap file ("[ORIGINAL_FILENAME].swp") resulting in files that may be world readable or otherwise accessible in ways…	CWE-200 Information Exposure	CVE-2017-1000382	2024-11-21 12:04	2017-11-1	Show	GitHub Exploit DB Packet Storm

256209	8.1	HIGH Network	redhat debian	libvirt debian_linux	libvirt version 2.3.0 and later is vulnerable to a bad default configuration of "verify-peer=no" passed to QEMU by libvirt resulting in a failure to validate SSL/TLS certificates by default.	CWE-295 Improper Certificate Validation	CVE-2017-1000256	2024-11-21 12:04	2017-11-1	Show	GitHub Exploit DB Packet Storm

256210	5.5	MEDIUM Local	linux	linux_kernel	On Linux running on PowerPC hardware (Power8 or later) a user process can craft a signal frame and then do a sigreturn so that the kernel will take an exception (interrupt), and use the r1 value *fro…	CWE-787 Out-of-bounds Write	CVE-2017-1000255	2024-11-21 12:04	2017-10-31	Show	GitHub Exploit DB Packet Storm