Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 2, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
253891 10 危険 アドビシステムズ - Adobe Reader および Acrobat のダウンロードマネージャーにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2009-3958 2010-02-10 13:39 2010-01-12 Show GitHub Exploit DB Packet Storm
253892 5 警告 アドビシステムズ - Adobe Reader および Acrobat におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2009-3957 2010-02-10 13:39 2010-01-12 Show GitHub Exploit DB Packet Storm
253893 10 危険 アドビシステムズ
レッドハット		 - Adobe Reader および Acrobat におけるスクリプトインジェクションの脆弱性に関連した脆弱性 CWE-16
環境設定 		CVE-2009-3956 2010-02-10 13:39 2010-01-12 Show GitHub Exploit DB Packet Storm
253894 10 危険 アドビシステムズ
レッドハット		 - Adobe Reader および Acrobat における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2009-3955 2010-02-10 13:38 2010-01-12 Show GitHub Exploit DB Packet Storm
253895 10 危険 アドビシステムズ
レッドハット		 - Adobe Reader および Acrobat の 3D 実装における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-3954 2010-02-10 13:38 2010-01-12 Show GitHub Exploit DB Packet Storm
253896 6.8 警告 サン・マイクロシステムズ - Sun Solaris の Trusted Extensions における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-0310 2010-02-10 13:38 2010-01-11 Show GitHub Exploit DB Packet Storm
253897 7.1 危険 アップル
アドビシステムズ		 - Windows 上で稼動する Adobe Flash Player および Adobe AIR の Flash Player の ActiveX コントロールにおけるローカルファイルのファイル名を取得される脆弱性 CWE-200
情報漏えい 		CVE-2009-3951 2010-02-10 13:36 2009-12-8 Show GitHub Exploit DB Packet Storm
253898 9.3 危険 アップル
アドビシステムズ
サン・マイクロシステムズ
レッドハット		 - Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2009-3800 2010-02-10 13:36 2009-12-8 Show GitHub Exploit DB Packet Storm
253899 9.3 危険 アップル
アドビシステムズ
サン・マイクロシステムズ
レッドハット		 - Adobe Flash Player および Adobe AIR の Verifier::parseExceptionHandlers 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-3799 2010-02-10 13:36 2009-12-8 Show GitHub Exploit DB Packet Storm
253900 9.3 危険 アップル
アドビシステムズ
サン・マイクロシステムズ
レッドハット		 - Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2009-3798 2010-02-10 13:35 2009-12-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 2, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
256141 6.5 MEDIUM
Network 		jenkins config_file_provider The Config File Provider Plugin is used to centrally manage configuration files that often include secrets, such as passwords. Users with only Overall/Read access to Jenkins were able to access URLs … CWE-269
 Improper Privilege Management 		CVE-2017-1000104 2024-11-21 12:04 2017-10-5 Show GitHub Exploit DB Packet Storm
256142 6.5 MEDIUM
Network 		haxx curl curl supports "globbing" of URLs, in which a user can pass a numerical range to have the tool iterate over those numbers to do a sequence of transfers. In the globbing function that parses the numeri… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2017-1000101 2024-11-21 12:04 2017-10-5 Show GitHub Exploit DB Packet Storm
256143 6.5 MEDIUM
Network 		haxx libcurl When doing a TFTP transfer and curl/libcurl is given a URL that contains a very long file name (longer than about 515 bytes), the file name is truncated to fit within the buffer boundaries, but the b… CWE-200
Information Exposure 		CVE-2017-1000100 2024-11-21 12:04 2017-10-5 Show GitHub Exploit DB Packet Storm
256144 6.5 MEDIUM
Network 		haxx libcurl When asking to get a file from a file:// URL, libcurl provides a feature that outputs meta-data about the file using HTTP-like headers. The code doing this would send the wrong buffer to the user (st… CWE-200
Information Exposure 		CVE-2017-1000099 2024-11-21 12:04 2017-10-5 Show GitHub Exploit DB Packet Storm
256145 7.5 HIGH
Network 		golang go The net/http package's Request.ParseMultipartForm method starts writing to temporary files once the request body size surpasses the given "maxMemory" limit. It was possible for an attacker to generat… CWE-769
 DEPRECATED: Uncontrolled File Descriptor Consumption 		CVE-2017-1000098 2024-11-21 12:04 2017-10-5 Show GitHub Exploit DB Packet Storm
256146 7.5 HIGH
Network 		golang go On Darwin, user's trust preferences for root certificates were not honored. If the user had a root certificate loaded in their Keychain that was explicitly not trusted, a Go program would still verif… CWE-295
Improper Certificate Validation  		CVE-2017-1000097 2024-11-21 12:04 2017-10-5 Show GitHub Exploit DB Packet Storm
256147 8.8 HIGH
Network 		jenkins pipeline\ Arbitrary code execution due to incomplete sandbox protection: Constructors, instance variable initializers, and instance initializers in Pipeline scripts were not subject to sandbox protection, and … CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2017-1000096 2024-11-21 12:04 2017-10-5 Show GitHub Exploit DB Packet Storm
256148 6.5 MEDIUM
Network 		jenkins docker_commons Docker Commons Plugin provides a list of applicable credential IDs to allow users configuring a job to select the one they'd like to use to authenticate with a Docker Registry. This functionality did… CWE-200
Information Exposure 		CVE-2017-1000094 2024-11-21 12:04 2017-10-5 Show GitHub Exploit DB Packet Storm
256149 6.5 MEDIUM
Network 		jenkins script_security The default whitelist included the following unsafe entries: DefaultGroovyMethods.putAt(Object, String, Object); DefaultGroovyMethods.getAt(Object, String). These allowed circumventing many of the ac… CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2017-1000095 2024-11-21 12:04 2017-10-5 Show GitHub Exploit DB Packet Storm
256150 8.8 HIGH
Network 		jenkins poll_scm Poll SCM Plugin was not requiring requests to its API be sent via POST, thereby opening itself to Cross-Site Request Forgery attacks. This allowed attackers to initiate polling of projects with a kno… CWE-352
 Origin Validation Error 		CVE-2017-1000093 2024-11-21 12:04 2017-10-5 Show GitHub Exploit DB Packet Storm