Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 1, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253081	4	警告	オラクル	-	Oracle PeopleSoft and JDEdwards Suite の PeopleSoft Enterprise PeopleTools コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2377	2010-08-6 18:29	2010-07-13	Show	GitHub Exploit DB Packet Storm

253082	4	警告	オラクル	-	Oracle PeopleSoft and JDEdwards Suite の PeopleSoft Enterprise HCM - Time & Labor コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2379	2010-08-6 18:29	2010-07-13	Show	GitHub Exploit DB Packet Storm

253083	4	警告	オラクル	-	Oracle PeopleSoft and JDEdwards Suite の PeopleSoft Enterprise HCM コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2398	2010-08-6 18:28	2010-07-13	Show	GitHub Exploit DB Packet Storm

253084	4.3	警告	オラクル	-	Oracle PeopleSoft and JDEdwards Suite の PeopleSoft Enterprise FSCM コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2380	2010-08-6 18:28	2010-07-13	Show	GitHub Exploit DB Packet Storm

253085	5.5	警告	オラクル	-	Oracle PeopleSoft and JDEdwards Suite の PeopleSoft Enterprise PeopleTools コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2402	2010-08-6 18:28	2010-07-13	Show	GitHub Exploit DB Packet Storm

253086	5.5	警告	オラクル	-	Oracle PeopleSoft and JDEdwards Suite の PeopleSoft Enterprise HCM - eProfile Mgr コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2401	2010-08-6 18:28	2010-07-13	Show	GitHub Exploit DB Packet Storm

253087	1.9	注意	オラクル	-	Oracle Supply Chain Products Suite の Oracle Transportation Management コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2371	2010-08-6 18:27	2010-07-13	Show	GitHub Exploit DB Packet Storm

253088	4.3	警告	オラクル	-	Oracle Supply Chain Products Suite の Oracle Transportation Management コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2372	2010-08-6 18:27	2010-07-13	Show	GitHub Exploit DB Packet Storm

253089	10	危険	アップルサイバートラスト株式会社サン・マイクロシステムズレッドハット	-	複数の Oracle 製品の New Java Plug-in コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0887	2010-08-5 17:16	2010-04-15	Show	GitHub Exploit DB Packet Storm

253090	2.6	注意	オラクル	-	Oracle E-Business Suite の Oracle Knowledge Management コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0836	2010-08-5 16:36	2010-07-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 1, 2026, 4:54 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
280521	-	jenkins	jenkins	Session fixation vulnerability in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to hijack web sessions via vectors involving the "override" of Jenkins cookies.	CWE-287 Improper Authentication	CVE-2014-2066	2024-11-21 11:05	2014-10-18	Show	GitHub Exploit DB Packet Storm

280522	-	jenkins	jenkins	Cross-site scripting (XSS) vulnerability in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to inject arbitrary web script or HTML via the iconSize cookie.	CWE-79 Cross-site Scripting	CVE-2014-2065	2024-11-21 11:05	2014-10-18	Show	GitHub Exploit DB Packet Storm

280523	-	jenkins	jenkins	The loadUserByUsername function in hudson/security/HudsonPrivateSecurityRealm.java in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to determine whether a user exists via vector…	CWE-200 Information Exposure	CVE-2014-2064	2024-11-21 11:05	2014-10-18	Show	GitHub Exploit DB Packet Storm

280524	-	jenkins	jenkins	Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to conduct clickjacking attacks via unspecified vectors.	NVD-CWE-noinfo	CVE-2014-2063	2024-11-21 11:05	2014-10-18	Show	GitHub Exploit DB Packet Storm

280525	-	jenkins	jenkins	Jenkins before 1.551 and LTS before 1.532.2 does not invalidate the API token when a user is deleted, which allows remote authenticated users to retain access via the token.	CWE-287 Improper Authentication	CVE-2014-2062	2024-11-21 11:05	2014-10-18	Show	GitHub Exploit DB Packet Storm

280526	-	jenkins	jenkins	The input control in PasswordParameterDefinition in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to obtain passwords by reading the HTML source code, related to the default val…	CWE-310 Cryptographic Issues	CVE-2014-2061	2024-11-21 11:05	2014-10-18	Show	GitHub Exploit DB Packet Storm

280527	-	jenkins	jenkins	The Winstone servlet container in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to hijack sessions via unspecified vectors.	NVD-CWE-noinfo	CVE-2014-2060	2024-11-21 11:05	2014-10-18	Show	GitHub Exploit DB Packet Storm

280528	-	jenkins	jenkins	BuildTrigger in Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users to bypass access restrictions and execute arbitrary jobs by configuring a job to trigger another job. NOT…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2014-2058	2024-11-21 11:05	2014-10-18	Show	GitHub Exploit DB Packet Storm

280529	-	vbulletin	vbulletin	SQL injection vulnerability in includes/api/4/breadcrumbs_create.php in vBulletin 4.2.2, 4.2.1, 4.2.0 PL2, and earlier allows remote authenticated users to execute arbitrary SQL commands via the conc…	CWE-89 SQL Injection	CVE-2014-2022	2024-11-21 11:05	2014-10-15	Show	GitHub Exploit DB Packet Storm

280530	-	opensuse python	opensuse requests	Requests (aka python-requests) before 2.3.0 allows remote servers to obtain sensitive information by reading the Proxy-Authorization header in a redirected request.	CWE-200 Information Exposure	CVE-2014-1830	2024-11-21 11:05	2014-10-15	Show	GitHub Exploit DB Packet Storm