Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 30, 2026, 12:07 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229551 7.5 危険 vistabb - VistaBB における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4365 2012-12-20 18:02 2006-08-26 Show GitHub Exploit DB Packet Storm
229552 5.1 警告 trident software - Windows 2000 上で稼動している Trident Software PowerZip におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2006-4359 2012-12-20 18:02 2006-08-26 Show GitHub Exploit DB Packet Storm
229553 5 警告 サン・マイクロシステムズ - Sun Java System Content Delivery Server における任意のファイルからデータを読まれる脆弱性 - CVE-2006-4353 2012-12-20 18:02 2006-08-24 Show GitHub Exploit DB Packet Storm
229554 7.5 危険 shadows rising rpg - Shadows Rising RPG における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4329 2012-12-20 18:02 2006-08-23 Show GitHub Exploit DB Packet Storm
229555 6.5 警告 texas imperial software - WFTPD Server におけるバッファオーバーフローの脆弱性 - CVE-2006-4318 2012-12-20 18:02 2006-08-23 Show GitHub Exploit DB Packet Storm
229556 6.8 警告 woltlab - WBB の attachment.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4317 2012-12-20 18:02 2006-08-23 Show GitHub Exploit DB Packet Storm
229557 7.2 危険 SSH コミュニケーションズ・セキュリティ - SSH Tectia Management Agent における root 権限を取得される脆弱性 - CVE-2006-4316 2012-12-20 18:02 2006-08-23 Show GitHub Exploit DB Packet Storm
229558 5 警告 シマンテック - Symantec ESM の管理サーバにおけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-4314 2012-12-20 18:02 2006-08-21 Show GitHub Exploit DB Packet Storm
229559 7.5 危険 sonium - Sonium Enterprise Adressbook における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4311 2012-12-20 18:02 2006-08-23 Show GitHub Exploit DB Packet Storm
229560 2.6 注意 サン・マイクロシステムズ - Sun Solaris の libnsl および TLI/XTI API ルーチンにおけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-4303 2012-12-20 18:02 2006-08-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212241 9.8 CRITICAL
Network 		magento magento Insecure authentication and session management vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An unauthenticated user can append arbitrary session id tha… CWE-613
 Insufficient Session Expiration 		CVE-2019-8149 2024-11-21 13:49 2019-11-6 Show GitHub Exploit DB Packet Storm
212242 4.8 MEDIUM
Network 		magento magento A stored cross-site scripting (XSS) vulnerability exists in Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated admin user can inject arbitrary JavaScript code when creating a content page via p… CWE-79
Cross-site Scripting 		CVE-2019-8148 2024-11-21 13:49 2019-11-6 Show GitHub Exploit DB Packet Storm
212243 5.4 MEDIUM
Network 		magento magento A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can inject arbitrary JavaScript code via custome… CWE-79
Cross-site Scripting 		CVE-2019-8147 2024-11-21 13:49 2019-11-6 Show GitHub Exploit DB Packet Storm
212244 5.4 MEDIUM
Network 		magento magento A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can inject arbitrary JavaScript code when adding… CWE-79
Cross-site Scripting 		CVE-2019-8146 2024-11-21 13:49 2019-11-6 Show GitHub Exploit DB Packet Storm
212245 9.8 CRITICAL
Network 		magento magento A remote code execution vulnerability exists in Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An unauthenticated user can insert a malicious payload through PageBuilder template methods. NVD-CWE-noinfo
CVE-2019-8144 2024-11-21 13:49 2019-11-6 Show GitHub Exploit DB Packet Storm
212246 6.5 MEDIUM
Network 		magento magento A SQL injection vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with access to email templates can send malicious SQL queries and ob… CWE-89
SQL Injection 		CVE-2019-8143 2024-11-21 13:49 2019-11-6 Show GitHub Exploit DB Packet Storm
212247 5.4 MEDIUM
Network 		magento magento A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can inject arbitrary JavaScript code via title o… CWE-79
Cross-site Scripting 		CVE-2019-8142 2024-11-21 13:49 2019-11-6 Show GitHub Exploit DB Packet Storm
212248 7.2 HIGH
Network 		magento magento A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. An authenticated user with administrative privileges (system leve… CWE-502
 Deserialization of Untrusted Data 		CVE-2019-8141 2024-11-21 13:49 2019-11-6 Show GitHub Exploit DB Packet Storm
212249 4.9 MEDIUM
Network 		magento magento An unrestricted file upload vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated admin user can manipulate the Synchronization feature in the … CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2019-8140 2024-11-21 13:49 2019-11-6 Show GitHub Exploit DB Packet Storm
212250 5.4 MEDIUM
Network 		magento magento A stored cross-site scripting (XSS) vulnerability exists in Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can inject arbitrary Javascript code into the dynamic block when invoking pag… CWE-79
Cross-site Scripting 		CVE-2019-8139 2024-11-21 13:49 2019-11-6 Show GitHub Exploit DB Packet Storm