Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 5, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229771 5 警告 the address book - The Address Book の users.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-4579 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
229772 7.5 危険 the address book - The Address Book の export.php における重要な情報を取得される脆弱性 - CVE-2006-4578 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
229773 6.8 警告 the address book - The Address Book におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4577 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
229774 6.8 警告 the address book - The Address Book におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4576 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
229775 7.5 危険 the address book - The Address Book における SQL インジェクションの脆弱性 - CVE-2006-4575 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
229776 5.1 警告 Simple Machines - Simple Machines Forum の Sources/ManageBoards.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2006-4564 2012-12-20 18:02 2006-09-5 Show GitHub Exploit DB Packet Storm
229777 6.8 警告 PHPNUKE - PHP-Nuke 用の MyHeadlines モジュールにおけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4563 2012-12-20 18:02 2006-09-5 Show GitHub Exploit DB Packet Storm
229778 7.5 危険 retro64 - Retro64 / Miniclip CR64Loader ActiveX コントロールにおけるバッファオーバーフローの脆弱性 - CVE-2006-4555 2012-12-20 18:02 2006-09-5 Show GitHub Exploit DB Packet Storm
229779 7.5 危険 Plume CMS - Plume CMS における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-4533 2012-12-20 18:02 2006-09-1 Show GitHub Exploit DB Packet Storm
229780 5 警告 qbik - Qbik WinGate におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-4518 2012-12-20 18:02 2006-11-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212981 5.4 MEDIUM
Network 		magento magento A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can manipulate downloadable link and cause an in… CWE-79
Cross-site Scripting 		CVE-2019-8157 2024-11-21 13:49 2019-11-6 Show GitHub Exploit DB Packet Storm
212982 7.2 HIGH
Network 		magento magento A server-side request forgery (SSRF) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with admin privileges to modify store configura… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2019-8156 2024-11-21 13:49 2019-11-6 Show GitHub Exploit DB Packet Storm
212983 5.4 MEDIUM
Network 		magento magento A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can inject arbitrary JavaScript code into the at… CWE-79
Cross-site Scripting 		CVE-2019-8145 2024-11-21 13:49 2019-11-6 Show GitHub Exploit DB Packet Storm
212984 5.4 MEDIUM
Network 		magento magento A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can craft malicious payload in the template Name… CWE-79
Cross-site Scripting 		CVE-2019-8132 2024-11-21 13:49 2019-11-6 Show GitHub Exploit DB Packet Storm
212985 6.1 MEDIUM
Network 		magento magento In Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1, an unauthenticated user can inject arbitrary JavaScript code as a result of the sanitization engine ignoring HTML comments. CWE-79
Cross-site Scripting 		CVE-2019-8233 2024-11-21 13:49 2019-11-6 Show GitHub Exploit DB Packet Storm
212986 6.6 MEDIUM
Network 		magento magento In Magento prior to 1.9.4.3, Magento prior to 1.14.4.3, Magento 2.2 prior to 2.2.10, and Magento 2.3 prior to 2.3.3 or 2.3.2-p1, an authenticated user with administrative privileges for the import fe… CWE-362
Race Condition 		CVE-2019-8232 2024-11-21 13:49 2019-11-6 Show GitHub Exploit DB Packet Storm
212987 7.2 HIGH
Network 		magento magento In Magento to 1.9.4.3 and Magento prior to 1.14.4.3, an authenticated user with administrative privileges for editing attribute sets can execute arbitrary code through custom layout modification. NVD-CWE-noinfo
CVE-2019-8231 2024-11-21 13:49 2019-11-6 Show GitHub Exploit DB Packet Storm
212988 7.2 HIGH
Network 		magento magento In Magentoprior to 1.9.4.3, and Magento prior to 1.14.4.3, an authenticated user with administrative privileges to edit configuration settings can execute arbitrary code through a crafted support/out… NVD-CWE-noinfo
CVE-2019-8230 2024-11-21 13:49 2019-11-6 Show GitHub Exploit DB Packet Storm
212989 7.2 HIGH
Network 		magento magento In Magento prior to 1.9.4.3, and Magento prior to 1.14.4.3, an authenticated user with administrative privileges to edit product attributes can execute arbitrary code through crafted layout updates. NVD-CWE-noinfo
CVE-2019-8229 2024-11-21 13:49 2019-11-6 Show GitHub Exploit DB Packet Storm
212990 4.8 MEDIUM
Network 		magento magento in Magento prior to 1.9.4.3 and Magento prior to 1.14.4.3, an authenticated user with limited administrative privileges can inject arbitrary JavaScript code into transactional email page when creatin… CWE-79
Cross-site Scripting 		CVE-2019-8228 2024-11-21 13:49 2019-11-6 Show GitHub Exploit DB Packet Storm