Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 6, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
254281	6.9	警告	PlotSoft L.L.C.	-	PlotSoft PDFill PDF Editor における権限を取得される脆弱性	CWE-Other その他	CVE-2011-3690	2011-10-4 10:00	2011-09-27	Show	GitHub Exploit DB Packet Storm

254282	7.5	危険	Sonexis Technology, Inc.	-	Sonexis ConferenceManager における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-3688	2011-10-4 09:45	2011-09-27	Show	GitHub Exploit DB Packet Storm

254283	4.3	警告	Sonexis Technology, Inc.	-	Sonexis ConferenceManager におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3687	2011-10-3 14:56	2011-09-27	Show	GitHub Exploit DB Packet Storm

254284	4.3	警告	Sonexis Technology, Inc.	-	Sonexis ConferenceManager の myAddressBook.asp におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3686	2011-10-3 14:55	2011-09-27	Show	GitHub Exploit DB Packet Storm

254285	1.9	注意	Tembria	-	Tembria Server Monitor における重要な情報を取得される脆弱性	CWE-310 暗号の問題	CVE-2011-3685	2011-10-3 14:54	2011-09-27	Show	GitHub Exploit DB Packet Storm

254286	4.3	警告	Tembria	-	Tembria Server Monitor におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3684	2011-10-3 14:52	2011-09-27	Show	GitHub Exploit DB Packet Storm

254287	7.5	危険	Newgen Software Technologies Limited	-	Newgen OmniDocs におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-3645	2011-10-3 14:48	2011-09-27	Show	GitHub Exploit DB Packet Storm

254288	7.5	危険	AliBabaClone.com	-	Alibaba Clone B2B の countrydetails.php におけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4849	2011-09-30 14:24	2011-09-27	Show	GitHub Exploit DB Packet Storm

254289	4.3	警告	Diferior	-	Diferior におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4850	2011-09-30 14:22	2011-09-27	Show	GitHub Exploit DB Packet Storm

254290	7.5	危険	Eclime	-	Eclime における複数の SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4851	2011-09-30 14:19	2011-09-27	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
264351	9.8	CRITICAL Network	jenkins	ssh	The SSH Plugin stores credentials which allow jobs to access remote servers via the SSH protocol. User passwords and passphrases for encrypted SSH keys are stored in plaintext in a configuration file.	CWE-522 Insufficiently Protected Credentials	CVE-2017-1000245	2024-11-21 12:04	2017-11-1	Show	GitHub Exploit DB Packet Storm

264352	8.8	HIGH Network	jenkins	favorite	Jenkins Favorite Plugin version 2.2.0 and older is vulnerable to CSRF resulting in data modification	CWE-352 Origin Validation Error	CVE-2017-1000244	2024-11-21 12:04	2017-11-1	Show	GitHub Exploit DB Packet Storm

264353	4.3	MEDIUM Network	jenkins	favorite_plugin	Jenkins Favorite Plugin 2.1.4 and older does not perform permission checks when changing favorite status, allowing any user to set any other user's favorites	CWE-862 Missing Authorization	CVE-2017-1000243	2024-11-21 12:04	2017-11-1	Show	GitHub Exploit DB Packet Storm

264354	3.3	LOW Local	jenkins	git_client	Jenkins Git Client Plugin 2.4.2 and earlier creates temporary file with insecure permissions resulting in information disclosure	CWE-200 Information Exposure	CVE-2017-1000242	2024-11-21 12:04	2017-11-1	Show	GitHub Exploit DB Packet Storm

264355	9.1	CRITICAL Network	haxx debian	libcurl debian_linux	An IMAP FETCH response line indicates the size of the returned data, in number of bytes. When that response says the data is zero bytes, libcurl would pass on that (non-existing) data with a pointer …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-1000257	2024-11-21 12:04	2017-11-1	Show	GitHub Exploit DB Packet Storm

264356	5.5	MEDIUM Local	gnu	emacs	GNU Emacs version 25.3.1 (and other versions most likely) ignores umask when creating a backup save file ("[ORIGINAL_FILENAME]~") resulting in files that may be world readable or otherwise accessible…	CWE-200 Information Exposure	CVE-2017-1000383	2024-11-21 12:04	2017-11-1	Show	GitHub Exploit DB Packet Storm

264357	5.5	MEDIUM Local	vim	vim	VIM version 8.0.1187 (and other versions most likely) ignores umask when creating a swap file ("[ORIGINAL_FILENAME].swp") resulting in files that may be world readable or otherwise accessible in ways…	CWE-200 Information Exposure	CVE-2017-1000382	2024-11-21 12:04	2017-11-1	Show	GitHub Exploit DB Packet Storm

264358	8.1	HIGH Network	redhat debian	libvirt debian_linux	libvirt version 2.3.0 and later is vulnerable to a bad default configuration of "verify-peer=no" passed to QEMU by libvirt resulting in a failure to validate SSL/TLS certificates by default.	CWE-295 Improper Certificate Validation	CVE-2017-1000256	2024-11-21 12:04	2017-11-1	Show	GitHub Exploit DB Packet Storm

264359	5.5	MEDIUM Local	linux	linux_kernel	On Linux running on PowerPC hardware (Power8 or later) a user process can craft a signal frame and then do a sigreturn so that the kernel will take an exception (interrupt), and use the r1 value *fro…	CWE-787 Out-of-bounds Write	CVE-2017-1000255	2024-11-21 12:04	2017-10-31	Show	GitHub Exploit DB Packet Storm

264360	7.5	HIGH Network	koji_project	koji	Koji 1.13.0 does not properly validate SCM paths, allowing an attacker to work around blacklisted paths for build submission.	CWE-20 Improper Input Validation	CVE-2017-1002153	2024-11-21 12:04	2017-10-7	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed