Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 29, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
229461 6.8 警告 Mozilla Foundation - 複数の Mozilla 製品におけるアドレスバーを偽造される脆弱性 CWE-Other
その他
CVE-2012-1955 2012-12-14 18:11 2012-07-17 Show GitHub Exploit DB Packet Storm
229462 10 危険 Mozilla Foundation - 複数の Mozilla 製品の nsDocument::AdoptNode 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2012-1954 2012-12-14 18:11 2012-07-17 Show GitHub Exploit DB Packet Storm
229463 9.3 危険 Mozilla Foundation - 複数の Mozilla 製品の ElementAnimations::EnsureStyleRuleFor 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2012-1953 2012-12-14 18:10 2012-07-17 Show GitHub Exploit DB Packet Storm
229464 9.3 危険 Mozilla Foundation - 複数の Mozilla 製品の nsTableFrame::InsertFrames 関数における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2012-1952 2012-12-14 18:09 2012-07-17 Show GitHub Exploit DB Packet Storm
229465 10 危険 Mozilla Foundation - 複数の Mozilla 製品の nsSMILTimeValueSpec::IsEventBased 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2012-1951 2012-12-14 18:07 2012-07-17 Show GitHub Exploit DB Packet Storm
229466 9.3 危険 Mozilla Foundation - 複数の Mozilla 製品のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2012-1948 2012-12-14 18:07 2012-07-17 Show GitHub Exploit DB Packet Storm
229467 10 危険 Mozilla Foundation - 複数の Mozilla 製品の WebGL サブシステムにおける任意のコードを実行される脆弱性 CWE-189
数値処理の問題
CVE-2012-5838 2012-12-14 18:02 2012-11-20 Show GitHub Exploit DB Packet Storm
229468 6.8 警告 Mozilla Foundation - Mozilla Firefox の Web 開発ツールバーにおけるクロスサイトスクリプティングの脆弱性 CWE-94
コード・インジェクション
CVE-2012-5837 2012-12-14 18:01 2012-11-20 Show GitHub Exploit DB Packet Storm
229469 10 危険 Mozilla Foundation - 複数の Mozilla 製品における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2012-5836 2012-12-14 17:59 2012-11-20 Show GitHub Exploit DB Packet Storm
229470 10 危険 Mozilla Foundation - 複数の Mozilla 製品の BuildTextRunsScanner::BreakSink::SetBreaks 関数における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2012-4218 2012-12-14 17:53 2012-11-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 29, 2026, 4:51 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212081 8.8 HIGH
Network
magento magento A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can leverage plugin functionality related to email templates… NVD-CWE-noinfo
CVE-2019-8111 2024-11-21 13:49 2019-11-6 Show GitHub Exploit DB Packet Storm
212082 8.8 HIGH
Network
magento magento A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can leverage email templates hierarchy to manipulate the int… NVD-CWE-noinfo
CVE-2019-8110 2024-11-21 13:49 2019-11-6 Show GitHub Exploit DB Packet Storm
212083 8.0 HIGH
Network
magento magento A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can craft a malicious CSRF payload that can result in arbitr… CWE-352
 Origin Validation Error
CVE-2019-8109 2024-11-21 13:49 2019-11-6 Show GitHub Exploit DB Packet Storm
212084 6.5 MEDIUM
Network
magento magento Insecure authentication and session management vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can manipulate session validation set… CWE-287
Improper Authentication
CVE-2019-8108 2024-11-21 13:49 2019-11-6 Show GitHub Exploit DB Packet Storm
212085 6.5 MEDIUM
Network
magento magento An arbitrary file deletion vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with export data transfer privileges can craft a request … NVD-CWE-noinfo
CVE-2019-8107 2024-11-21 13:49 2019-11-6 Show GitHub Exploit DB Packet Storm
212086 8.8 HIGH
Network
magento magento An arbitrary file access vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can leverage file upload controller for downloadable produc… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2019-8093 2024-11-21 13:49 2019-11-6 Show GitHub Exploit DB Packet Storm
212087 5.4 MEDIUM
Network
magento magento A reflected cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can inject arbitrary JavaScript code via emai… CWE-79
Cross-site Scripting
CVE-2019-8092 2024-11-21 13:49 2019-11-6 Show GitHub Exploit DB Packet Storm
212088 7.2 HIGH
Network
magento magento A remote code execution vulnerability exists in Magento 1 prior to 1.9.4.3 and 1.14.4.3. An authenticated admin user with privileges to access product attributes can leverage layout updates to trigge… NVD-CWE-noinfo
CVE-2019-8091 2024-11-21 13:49 2019-11-6 Show GitHub Exploit DB Packet Storm
212089 6.5 MEDIUM
Network
magento magento An arbitrary file deletion vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. An authenticated users can manipulate the design layout update… NVD-CWE-noinfo
CVE-2019-8090 2024-11-21 13:49 2019-11-6 Show GitHub Exploit DB Packet Storm
212090 6.5 MEDIUM
Network
magento magento An insecure direct object reference (IDOR) vulnerability exists in Magento 2.3 prior to 2.3.1, 2.2 prior to 2.2.8, and 2.1 prior to 2.1.17 versions. An authenticated user may be able to view personal… CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2019-8235 2024-11-21 13:49 2019-10-30 Show GitHub Exploit DB Packet Storm