Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 4:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229611 10 危険 website designs for less - Website Designs For Less Click N' Print Coupons の coupon_detail.asp における SQL インジェクションの脆弱性 - CVE-2006-6859 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
229612 7.5 危険 webtext - WebText CMS における wt/users/ 配下のスクリプトへ任意の PHP コードを挿入される脆弱性 - CVE-2006-6856 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
229613 7.5 危険 shadowed works - Shadowed Portal の include.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-6850 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
229614 5 警告 リアルネットワークス - RealNetworks RealPlayer の ierpplug.dll におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-6847 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
229615 10 危険 phpBB - phpBB の特定のフォームにおける脆弱性 - CVE-2006-6841 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
229616 10 危険 phpBB - phpBB における脆弱性 - CVE-2006-6840 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
229617 10 危険 phpBB - phpBB における脆弱性 - CVE-2006-6839 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
229618 7.5 危険 rediff - Rediff Bol Downloader OCX コントロールにおける重要な情報 (ユーザ名およびパス名) を取得される脆弱性 - CVE-2006-6838 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
229619 6.8 警告 sergey oblomov - Total Commander 用の ISO プラグインの LoadTree などの関数におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2006-6837 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
229620 7.5 危険 yrch - Yrch! の plugins/metasearch/plug.inc.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-6823 2012-12-20 18:02 2006-12-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
213561 5.3 MEDIUM
Network 		magento magento An insufficient logging and monitoring vulnerability exists in Magento 1 prior to 1.9.4.3 and 1.14.4.3, Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. The loggi… NVD-CWE-noinfo
CVE-2019-8123 2024-11-21 13:49 2019-11-6 Show GitHub Exploit DB Packet Storm
213562 8.8 HIGH
Network 		magento magento A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. An authenticated user with privileges to create products can craf… NVD-CWE-noinfo
CVE-2019-8122 2024-11-21 13:49 2019-11-6 Show GitHub Exploit DB Packet Storm
213563 9.8 CRITICAL
Network 		magento magento An insecure component vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. Magento 2 codebase leveraged outdated versions of JS libraries (Boo… NVD-CWE-noinfo
CVE-2019-8121 2024-11-21 13:49 2019-11-6 Show GitHub Exploit DB Packet Storm
213564 5.4 MEDIUM
Network 		magento magento A stored cross-site scripting (XSS) vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. An authenticated user can inject arbitrary Javascript… CWE-79
Cross-site Scripting 		CVE-2019-8120 2024-11-21 13:49 2019-11-6 Show GitHub Exploit DB Packet Storm
213565 7.2 HIGH
Network 		magento magento A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. An authenticated admin user with import product privileges can de… NVD-CWE-noinfo
CVE-2019-8119 2024-11-21 13:49 2019-11-6 Show GitHub Exploit DB Packet Storm
213566 5.3 MEDIUM
Network 		magento magento Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 uses weak cryptographic function to store the failed login attempts for customer accounts. CWE-312
 Cleartext Storage of Sensitive Information 		CVE-2019-8118 2024-11-21 13:49 2019-11-6 Show GitHub Exploit DB Packet Storm
213567 5.4 MEDIUM
Network 		magento magento A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticates user can inject arbitrary JavaScript code via product… CWE-79
Cross-site Scripting 		CVE-2019-8117 2024-11-21 13:49 2019-11-6 Show GitHub Exploit DB Packet Storm
213568 7.5 HIGH
Network 		magento magento Insecure authentication and session management vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An unauthenticated user can leverage a guest session id val… CWE-384
 Session Fixation 		CVE-2019-8116 2024-11-21 13:49 2019-11-6 Show GitHub Exploit DB Packet Storm
213569 4.8 MEDIUM
Network 		magento magento A reflected cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated admin user can inject arbitrary JavaScript code wh… CWE-79
Cross-site Scripting 		CVE-2019-8115 2024-11-21 13:49 2019-11-6 Show GitHub Exploit DB Packet Storm
213570 7.2 HIGH
Network 		magento magento A remote code execution vulnerability exists in Magento 1 prior to 1.9.4.3 and 1.14.4.3, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with admin privileg… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2019-8114 2024-11-21 13:49 2019-11-6 Show GitHub Exploit DB Packet Storm