Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229581 2.1 注意 PHPNUKE - PHP-Nuke 用の AutoHTML モジュールの autohtml.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-4190 2012-12-20 18:02 2006-08-16 Show GitHub Exploit DB Packet Storm
229582 4.9 警告 smartline - SmartLine DeviceLock における NTFS コントロールを回避される脆弱性 - CVE-2006-4184 2012-12-20 18:02 2006-08-16 Show GitHub Exploit DB Packet Storm
229583 7.5 危険 TinyWebGallery - TinyWebGallery における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4166 2012-12-20 18:02 2006-08-16 Show GitHub Exploit DB Packet Storm
229584 7.5 危険 phpprintanalyzer - phpPrintAnalyzer の inc/header.inc.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4164 2012-12-20 18:02 2006-08-16 Show GitHub Exploit DB Packet Storm
229585 5 警告 xennobb - XennoBB の profile.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-4161 2012-12-20 18:02 2006-08-16 Show GitHub Exploit DB Packet Storm
229586 7.8 危険 サン・マイクロシステムズ - Sun Java System Directory Server および ONE Directory Server の LDAP server におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-4175 2012-12-20 18:02 2007-03-23 Show GitHub Exploit DB Packet Storm
229587 5.5 警告 SquirrelMail Project - Squirrelmail 用の GPG Plugin におけるディレクトリトラバーサルの脆弱性 - CVE-2006-4169 2012-12-20 18:02 2007-07-15 Show GitHub Exploit DB Packet Storm
229588 7.5 危険 tutti nova - Tutti Nova における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4277 2012-12-20 18:02 2006-08-21 Show GitHub Exploit DB Packet Storm
229589 7.5 危険 tutti nova - Tutti Nova における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4276 2012-12-20 18:02 2006-08-21 Show GitHub Exploit DB Packet Storm
229590 3.6 注意 シマンテック - Symantec Norton Personal Firewall におけるトロイの木馬ライプラリを追加される脆弱性 - CVE-2006-4266 2012-12-20 18:02 2006-08-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212261 8.8 HIGH
Network 		magento magento A SQL injection vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with privileges to an account with Newsletter Template editing permi… CWE-89
SQL Injection 		CVE-2019-8127 2024-11-21 13:49 2019-11-6 Show GitHub Exploit DB Packet Storm
212262 4.9 MEDIUM
Network 		magento magento An XML entity injection vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated admin user can craft document type definition for an XML represen… CWE-611
XXE 		CVE-2019-8126 2024-11-21 13:49 2019-11-6 Show GitHub Exploit DB Packet Storm
212263 7.2 HIGH
Network 		magento magento A remote code execution vulnerability exists in Magento 1 prior to 1.9.x and 1.14.x. An authenticated admin user can modify configuration parameters via crafted support configuration. The modificatio… NVD-CWE-noinfo
CVE-2019-8125 2024-11-21 13:49 2019-11-6 Show GitHub Exploit DB Packet Storm
212264 4.9 MEDIUM
Network 		magento magento An insufficient logging and monitoring vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. Failure to track admin actions related to design c… NVD-CWE-noinfo
CVE-2019-8124 2024-11-21 13:49 2019-11-6 Show GitHub Exploit DB Packet Storm
212265 5.3 MEDIUM
Network 		magento magento An insufficient logging and monitoring vulnerability exists in Magento 1 prior to 1.9.4.3 and 1.14.4.3, Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. The loggi… NVD-CWE-noinfo
CVE-2019-8123 2024-11-21 13:49 2019-11-6 Show GitHub Exploit DB Packet Storm
212266 8.8 HIGH
Network 		magento magento A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. An authenticated user with privileges to create products can craf… NVD-CWE-noinfo
CVE-2019-8122 2024-11-21 13:49 2019-11-6 Show GitHub Exploit DB Packet Storm
212267 9.8 CRITICAL
Network 		magento magento An insecure component vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. Magento 2 codebase leveraged outdated versions of JS libraries (Boo… NVD-CWE-noinfo
CVE-2019-8121 2024-11-21 13:49 2019-11-6 Show GitHub Exploit DB Packet Storm
212268 5.4 MEDIUM
Network 		magento magento A stored cross-site scripting (XSS) vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. An authenticated user can inject arbitrary Javascript… CWE-79
Cross-site Scripting 		CVE-2019-8120 2024-11-21 13:49 2019-11-6 Show GitHub Exploit DB Packet Storm
212269 7.2 HIGH
Network 		magento magento A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. An authenticated admin user with import product privileges can de… NVD-CWE-noinfo
CVE-2019-8119 2024-11-21 13:49 2019-11-6 Show GitHub Exploit DB Packet Storm
212270 5.3 MEDIUM
Network 		magento magento Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 uses weak cryptographic function to store the failed login attempts for customer accounts. CWE-312
 Cleartext Storage of Sensitive Information 		CVE-2019-8118 2024-11-21 13:49 2019-11-6 Show GitHub Exploit DB Packet Storm