Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 20, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
258661 7.5 危険 シトリックス・システムズ - Citrix XenCenterWeb の XenServer Resource Kit における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-3758 2010-09-14 15:53 2009-10-22 Show GitHub Exploit DB Packet Storm
258662 4.3 警告 シトリックス・システムズ - Citrix XenCenterWeb の XenServer Resource Kit におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-3757 2010-09-14 15:53 2009-10-22 Show GitHub Exploit DB Packet Storm
258663 7.2 危険 シトリックス・システムズ - Xen の xend におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-5716 2010-09-14 15:53 2008-12-24 Show GitHub Exploit DB Packet Storm
258664 6 警告 VMware - VMware Studio の Virtual Appliance Management Infrastructure における任意のコマンドを実行される脆弱性 CWE-noinfo
情報不足
CVE-2010-2667 2010-09-13 16:05 2010-07-13 Show GitHub Exploit DB Packet Storm
258665 4.4 警告 VMware - VMware Studio における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-2427 2010-09-13 16:05 2010-07-13 Show GitHub Exploit DB Packet Storm
258666 6.8 警告 VMware - VMware SpringSource tc Server Runtime における JMX インターフェイスへのアクセス権を取得される脆弱性 CWE-287
不適切な認証
CVE-2010-1454 2010-09-13 16:05 2010-05-13 Show GitHub Exploit DB Packet Storm
258667 4.3 警告 VMware - VMware View におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-1143 2010-09-13 16:04 2010-05-5 Show GitHub Exploit DB Packet Storm
258668 4.9 警告 VMware - 複数の VMware 製品の hcmon.sys におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2008-3761 2010-09-13 16:04 2008-08-21 Show GitHub Exploit DB Packet Storm
258669 2.1 注意 VMware - VMware VirtualCenter におけるパスワードを盗まれる脆弱性 CWE-200
情報漏えい
CVE-2008-4278 2010-09-13 16:04 2008-10-3 Show GitHub Exploit DB Packet Storm
258670 5 警告 VMware - VMware VirtualCenter における他のシステムユーザに権限を割り当てられる脆弱性 CWE-200
情報漏えい
CVE-2008-3514 2010-09-13 16:03 2008-08-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
252171 8.8 HIGH
Network
jenkins absint_astree A command execution vulnerability exists in Jenkins Absint Astree Plugin 1.0.5 and older in AstreeBuilder.java that allows attackers with Overall/Read access to execute a command on the Jenkins maste… NVD-CWE-noinfo
CVE-2018-1000189 2024-11-21 12:39 2018-06-6 Show GitHub Exploit DB Packet Storm
252172 5.4 MEDIUM
Network
jenkins cas A server-side request forgery vulnerability exists in Jenkins CAS Plugin 1.4.1 and older in CasSecurityRealm.java that allows attackers with Overall/Read access to cause Jenkins to send a GET request… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2018-1000188 2024-11-21 12:39 2018-06-6 Show GitHub Exploit DB Packet Storm
252173 6.5 MEDIUM
Network
jenkins kubernetes A exposure of sensitive information vulnerability exists in Jenkins Kubernetes Plugin 1.7.0 and older in ContainerExecDecorator.java that results in sensitive variables such as passwords being writte… CWE-200
Information Exposure
CVE-2018-1000187 2024-11-21 12:39 2018-06-6 Show GitHub Exploit DB Packet Storm
252174 6.5 MEDIUM
Network
jenkins github_pull_request_builder A exposure of sensitive information vulnerability exists in Jenkins GitHub Pull Request Builder Plugin 1.41.0 and older in GhprbGitHubAuth.java that allows attackers with Overall/Read access to conne… CWE-200
Information Exposure
CVE-2018-1000186 2024-11-21 12:39 2018-06-6 Show GitHub Exploit DB Packet Storm
252175 4.3 MEDIUM
Network
jenkins github_branch_source A server-side request forgery vulnerability exists in Jenkins GitHub Branch Source Plugin 2.3.4 and older in Endpoint.java that allows attackers with Overall/Read access to cause Jenkins to send a GE… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2018-1000185 2024-11-21 12:39 2018-06-6 Show GitHub Exploit DB Packet Storm
252176 5.4 MEDIUM
Network
jenkins github A server-side request forgery vulnerability exists in Jenkins GitHub Plugin 1.29.0 and older in GitHubPluginConfig.java that allows attackers with Overall/Read access to cause Jenkins to send a GET r… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2018-1000184 2024-11-21 12:39 2018-06-6 Show GitHub Exploit DB Packet Storm
252177 6.5 MEDIUM
Network
jenkins github A exposure of sensitive information vulnerability exists in Jenkins GitHub Plugin 1.29.0 and older in GitHubServerConfig.java that allows attackers with Overall/Read access to connect to an attacker-… CWE-200
Information Exposure
CVE-2018-1000183 2024-11-21 12:39 2018-06-6 Show GitHub Exploit DB Packet Storm
252178 6.4 MEDIUM
Network
jenkins git A server-side request forgery vulnerability exists in Jenkins Git Plugin 3.9.0 and older in AssemblaWeb.java, GitBlitRepositoryBrowser.java, Gitiles.java, TFS2013GitRepositoryBrowser.java, ViewGitWeb… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2018-1000182 2024-11-21 12:39 2018-06-6 Show GitHub Exploit DB Packet Storm
252179 5.5 MEDIUM
Local
linux linux_kernel The Linux Kernel versions 4.14, 4.15, and 4.16 has a null pointer dereference which can result in an out of memory (OOM) killing of large mlocked processes. The issue arises from an oom killed proces… CWE-476
 NULL Pointer Dereference
CVE-2018-1000200 2024-11-21 12:39 2018-06-5 Show GitHub Exploit DB Packet Storm
252180 7.5 HIGH
Network
ibm kitura Kitura 2.3.0 and earlier have an unintended read access to unauthorised files and folders that can be exploited by a crafted URL resulting in information disclosure. CWE-200
Information Exposure
CVE-2018-1000181 2024-11-21 12:39 2018-06-5 Show GitHub Exploit DB Packet Storm