Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":July 1, 2026, 4:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
258071 5 警告 CAREL INDUSTRIES S.p.a. - Carel PlantVisor の CarelDataServer.exe におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2011-3487 2011-09-28 14:13 2011-09-16 Show GitHub Exploit DB Packet Storm
258072 10 危険 MetaStock - Equis MetaStock における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2011-3488 2011-09-28 14:10 2011-09-16 Show GitHub Exploit DB Packet Storm
258073 5 警告 Rockwell Automation - Rockwell RSLogix の RnaUtility.dll におけるサービス運用妨害 (クラッシュ) の脆弱性 CWE-119
バッファエラー 		CVE-2011-3489 2011-09-28 13:53 2011-09-16 Show GitHub Exploit DB Packet Storm
258074 10 危険 AzeoTech, Inc. - Azeotech DAQFactory におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-3492 2011-09-28 13:49 2011-09-16 Show GitHub Exploit DB Packet Storm
258075 10 危険 ヒューレット・パッカード - HP Business Service Automation Essentials における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2011-2412 2011-09-27 11:28 2011-09-19 Show GitHub Exploit DB Packet Storm
258076 3.5 注意 シスコシステムズ - Cisco TelePresence System MXP の Web インターフェイスにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-2544 2011-09-27 11:24 2011-09-23 Show GitHub Exploit DB Packet Storm
258077 4.3 警告 MantisBT Group - MantisBT の bug_actiongroup_ext_page.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-3578 2011-09-27 11:19 2011-08-31 Show GitHub Exploit DB Packet Storm
258078 4.3 警告 MantisBT Group - MantisBT におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-3358 2011-09-27 11:18 2011-09-21 Show GitHub Exploit DB Packet Storm
258079 6.8 警告 MantisBT Group - MantisBT の bug_actiongroup_ext_page.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2011-3357 2011-09-27 11:17 2011-08-31 Show GitHub Exploit DB Packet Storm
258080 4.3 警告 MantisBT Group - MantisBT の filter_api.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-2938 2011-09-27 11:15 2011-08-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
248131 6.5 MEDIUM
Network 		anchore container_image_scanner An exposure of sensitive information vulnerability exists in Jenkins Anchore Container Image Scanner Plugin 10.16 and earlier in AnchoreBuilder.java that allows attackers with Item/ExtendedRead permi… CWE-200
Information Exposure 		CVE-2018-1999033 2024-11-21 12:57 2018-08-1 Show GitHub Exploit DB Packet Storm
248132 6.5 MEDIUM
Network 		agiletestware pangolin_connector_for_testrail A data modification vulnerability exists in Jenkins Agiletestware Pangolin Connector for TestRail Plugin 2.1 and earlier in GlobalConfig.java that allows attackers with Overall/Read permission to ove… CWE-269
 Improper Privilege Management 		CVE-2018-1999032 2024-11-21 12:57 2018-08-1 Show GitHub Exploit DB Packet Storm
248133 6.5 MEDIUM
Network 		jenkins meliora_testlab An exposure of sensitive information vulnerability exists in Jenkins meliora-testlab Plugin 1.14 and earlier in TestlabNotifier.java that allows attackers with file system access to the Jenkins maste… CWE-200
Information Exposure 		CVE-2018-1999031 2024-11-21 12:57 2018-08-1 Show GitHub Exploit DB Packet Storm
248134 5.4 MEDIUM
Network 		jenkins maven_artifact_choicelistprovider_\(nexus\) An exposure of sensitive information vulnerability exists in Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin 1.3.1 and earlier in ArtifactoryChoiceListProvider.java, NexusChoiceListProvider.… CWE-200
Information Exposure 		CVE-2018-1999030 2024-11-21 12:57 2018-08-1 Show GitHub Exploit DB Packet Storm
248135 5.4 MEDIUM
Network 		jenkins shelve_project A cross-site scripting vulnerability exists in Jenkins Shelve Project Plugin 1.5 and earlier in ShelveProjectAction/index.jelly, ShelvedProjectsAction/index.jelly that allows attackers with Job/Confi… CWE-79
Cross-site Scripting 		CVE-2018-1999029 2024-11-21 12:57 2018-08-1 Show GitHub Exploit DB Packet Storm
248136 8.8 HIGH
Network 		jenkins accurev An exposure of sensitive information vulnerability exists in Jenkins Accurev Plugin 0.7.16 and earlier in AccurevSCM.java that allows attackers to capture credentials with a known credentials ID stor… CWE-200
Information Exposure 		CVE-2018-1999028 2024-11-21 12:57 2018-08-1 Show GitHub Exploit DB Packet Storm
248137 7.5 HIGH
Network 		jenkins saltstack An exposure of sensitive information vulnerability exists in Jenkins SaltStack Plugin 3.1.6 and earlier in SaltAPIBuilder.java, SaltAPIStep.java that allows attackers to capture credentials with a kn… CWE-352
 Origin Validation Error 		CVE-2018-1999027 2024-11-21 12:57 2018-08-1 Show GitHub Exploit DB Packet Storm
248138 6.5 MEDIUM
Network 		jenkins tracetronic_ecu-test A server-side request forgery vulnerability exists in Jenkins TraceTronic ECU-TEST Plugin 2.3 and earlier in ATXPublisher.java that allows attackers to have Jenkins send HTTP requests to an attacker-… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2018-1999026 2024-11-21 12:57 2018-08-1 Show GitHub Exploit DB Packet Storm
248139 7.4 HIGH
Network 		jenkins tracetronic_ecu-test A man in the middle vulnerability exists in Jenkins TraceTronic ECU-TEST Plugin 2.3 and earlier in ATXPublisher.java, ATXValidator.java that allows attackers to impersonate any service that Jenkins c… CWE-295
Improper Certificate Validation  		CVE-2018-1999025 2024-11-21 12:57 2018-08-1 Show GitHub Exploit DB Packet Storm
248140 5.4 MEDIUM
Network 		jenkins
oracle 		jenkins
communications_cloud_native_core_automated_test_suite 		A cross-site scripting vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in the Stapler web framework's org/kohsuke/stapler/Stapler.java that allows attackers with the ability to… CWE-79
Cross-site Scripting 		CVE-2018-1999007 2024-11-21 12:57 2018-07-24 Show GitHub Exploit DB Packet Storm