Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 3, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229651 7.5 危険 web-news - Web-News の webnews/template.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5053 2012-12-20 18:02 2006-09-27 Show GitHub Exploit DB Packet Storm
229652 5 警告 rob landley - Rob Landley BusyBox の httpd におけるディレクトリトラバーサルの脆弱性 - CVE-2006-5050 2012-12-20 18:02 2006-09-27 Show GitHub Exploit DB Packet Storm
229653 6.8 警告 waltercedric - Joomla! 用の Security Images コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-5048 2012-12-20 18:02 2006-07-31 Show GitHub Exploit DB Packet Storm
229654 7.5 危険 phpartenaire - PHPartenaire の dix.php3 における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5032 2012-12-20 18:02 2006-09-27 Show GitHub Exploit DB Packet Storm
229655 7.5 危険 woltlab - wBB の thread.php における SQL インジェクションの脆弱性 - CVE-2006-5029 2012-12-20 18:02 2006-09-27 Show GitHub Exploit DB Packet Storm
229656 5 警告 swsoft - Swsoft Pleask Reload および Pleask の filemanager/filemanager.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-5028 2012-12-20 18:02 2006-09-27 Show GitHub Exploit DB Packet Storm
229657 7.5 危険 pnews systems - Joshua Wilson pNews System の includes/global.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5022 2012-12-20 18:02 2006-09-27 Show GitHub Exploit DB Packet Storm
229658 7.5 危険 redblog - redgun RedBLoG における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5021 2012-12-20 18:02 2006-09-27 Show GitHub Exploit DB Packet Storm
229659 7.5 危険 solidstate - SolidState における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5020 2012-12-20 18:02 2006-09-27 Show GitHub Exploit DB Packet Storm
229660 7.5 危険 voice of web - Voodoo chat における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4993 2012-12-20 18:02 2006-09-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 4, 2026, 4:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212841 9.8 CRITICAL
Network 		magento magento Insecure authentication and session management vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An unauthenticated user can append arbitrary session id tha… CWE-613
 Insufficient Session Expiration 		CVE-2019-8149 2024-11-21 13:49 2019-11-6 Show GitHub Exploit DB Packet Storm
212842 4.8 MEDIUM
Network 		magento magento A stored cross-site scripting (XSS) vulnerability exists in Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated admin user can inject arbitrary JavaScript code when creating a content page via p… CWE-79
Cross-site Scripting 		CVE-2019-8148 2024-11-21 13:49 2019-11-6 Show GitHub Exploit DB Packet Storm
212843 5.4 MEDIUM
Network 		magento magento A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can inject arbitrary JavaScript code via custome… CWE-79
Cross-site Scripting 		CVE-2019-8147 2024-11-21 13:49 2019-11-6 Show GitHub Exploit DB Packet Storm
212844 5.4 MEDIUM
Network 		magento magento A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can inject arbitrary JavaScript code when adding… CWE-79
Cross-site Scripting 		CVE-2019-8146 2024-11-21 13:49 2019-11-6 Show GitHub Exploit DB Packet Storm
212845 9.8 CRITICAL
Network 		magento magento A remote code execution vulnerability exists in Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An unauthenticated user can insert a malicious payload through PageBuilder template methods. NVD-CWE-noinfo
CVE-2019-8144 2024-11-21 13:49 2019-11-6 Show GitHub Exploit DB Packet Storm
212846 6.5 MEDIUM
Network 		magento magento A SQL injection vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with access to email templates can send malicious SQL queries and ob… CWE-89
SQL Injection 		CVE-2019-8143 2024-11-21 13:49 2019-11-6 Show GitHub Exploit DB Packet Storm
212847 5.4 MEDIUM
Network 		magento magento A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can inject arbitrary JavaScript code via title o… CWE-79
Cross-site Scripting 		CVE-2019-8142 2024-11-21 13:49 2019-11-6 Show GitHub Exploit DB Packet Storm
212848 7.2 HIGH
Network 		magento magento A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. An authenticated user with administrative privileges (system leve… CWE-502
 Deserialization of Untrusted Data 		CVE-2019-8141 2024-11-21 13:49 2019-11-6 Show GitHub Exploit DB Packet Storm
212849 4.9 MEDIUM
Network 		magento magento An unrestricted file upload vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated admin user can manipulate the Synchronization feature in the … CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2019-8140 2024-11-21 13:49 2019-11-6 Show GitHub Exploit DB Packet Storm
212850 5.4 MEDIUM
Network 		magento magento A stored cross-site scripting (XSS) vulnerability exists in Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can inject arbitrary Javascript code into the dynamic block when invoking pag… CWE-79
Cross-site Scripting 		CVE-2019-8139 2024-11-21 13:49 2019-11-6 Show GitHub Exploit DB Packet Storm