Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 2:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
245621 5 警告 bolinos - BolinOS における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2008-1557 2012-06-26 16:02 2008-03-31 Show GitHub Exploit DB Packet Storm
245622 4.3 警告 bolinos - BolinOS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-1556 2012-06-26 16:02 2008-03-31 Show GitHub Exploit DB Packet Storm
245623 6.8 警告 bolinos - BolinOS の system/_b/contentFiles/gbincluder.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-1555 2012-06-26 16:02 2008-03-31 Show GitHub Exploit DB Packet Storm
245624 4.3 警告 CubeCart Limited - CubeCart の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-1550 2012-06-26 16:02 2008-03-31 Show GitHub Exploit DB Packet Storm
245625 6.8 警告 aeries - Eagle Software Aries Student Information System の ABI における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-1549 2012-06-26 16:02 2008-03-31 Show GitHub Exploit DB Packet Storm
245626 4.3 警告 aeries - Eagle Software Aries Student Information System の ABI におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-1548 2012-06-26 16:02 2008-03-31 Show GitHub Exploit DB Packet Storm
245627 7.5 危険 airspan - Airspan WiMAX ProST 上で稼動する ProST Web Management コンポーネントの Advanced User Interface Page コンポーネントにおける管理者アクセスの一部を取得される脆弱性 CWE-255
証明書・パスワード管理
CVE-2008-1543 2012-06-26 16:02 2008-03-28 Show GitHub Exploit DB Packet Storm
245628 7.5 危険 airspan - Airspan BSDU における管理者アクセス権を取得される脆弱性 CWE-255
証明書・パスワード管理
CVE-2008-1542 2012-06-26 16:02 2008-03-28 Show GitHub Exploit DB Packet Storm
245629 7.5 危険 futurenuke - PHP Nuke Platinum の includes/dynamic_titles.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-1539 2012-06-26 16:02 2008-03-28 Show GitHub Exploit DB Packet Storm
245630 9.3 危険 GNU Project - gpg におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2008-1530 2012-06-26 16:02 2008-03-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
220461 8.8 HIGH
Network
magento magento Insufficient input validation in the config builder of the Elastic search module could lead to remote code execution in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2… CWE-20
 Improper Input Validation 
CVE-2019-7885 2024-11-21 13:48 2019-08-3 Show GitHub Exploit DB Packet Storm
220462 5.4 MEDIUM
Network
magento magento A stored cross-site scripting vulnerability exists in the WYSIWYG editor of Magento Open Source prior to 1.9.4.2, and Magento Commerce prior to 1.14.4.2, Magento 2.1 prior to 2.1.18, Magento 2.2 prio… CWE-79
Cross-site Scripting
CVE-2019-7882 2024-11-21 13:48 2019-08-3 Show GitHub Exploit DB Packet Storm
220463 5.4 MEDIUM
Network
magento magento A cross-site scripting mitigation bypass exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This could be exploited by an authenticated user to escalate pr… CWE-79
Cross-site Scripting
CVE-2019-7881 2024-11-21 13:48 2019-08-3 Show GitHub Exploit DB Packet Storm
220464 4.8 MEDIUM
Network
magento magento A stored cross-site scripting vulnerability exists in the admin panel of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This could be exploited by an authenticat… CWE-79
Cross-site Scripting
CVE-2019-7880 2024-11-21 13:48 2019-08-3 Show GitHub Exploit DB Packet Storm
220465 6.1 MEDIUM
Network
magento magento A stored cross-site scripting vulnerability exists in the admin panel of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An authenticated user with privileges to … CWE-79
Cross-site Scripting
CVE-2019-7877 2024-11-21 13:48 2019-08-3 Show GitHub Exploit DB Packet Storm
220466 8.8 HIGH
Network
magento magento A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An authenticated user with privileges to manipulate layouts can in… NVD-CWE-noinfo
CVE-2019-7876 2024-11-21 13:48 2019-08-3 Show GitHub Exploit DB Packet Storm
220467 4.8 MEDIUM
Network
magento magento A stored cross-site scripting vulnerability exists in the admin panel of Magento Open Source prior to 1.9.4.2, and Magento Commerce prior to 1.14.4.2, Magento 2.1 prior to 2.1.18, Magento 2.2 prior t… CWE-79
Cross-site Scripting
CVE-2019-7875 2024-11-21 13:48 2019-08-3 Show GitHub Exploit DB Packet Storm
220468 6.5 MEDIUM
Network
magento magento A cross-site request forgery vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can result in unintended deletion of user roles. CWE-352
 Origin Validation Error
CVE-2019-7874 2024-11-21 13:48 2019-08-3 Show GitHub Exploit DB Packet Storm
220469 4.3 MEDIUM
Network
magento magento A cross-site request forgery vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can result in unintended deletion of the store design sc… CWE-352
 Origin Validation Error
CVE-2019-7873 2024-11-21 13:48 2019-08-3 Show GitHub Exploit DB Packet Storm
220470 6.5 MEDIUM
Network
magento magento An insecure direct object reference (IDOR) vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 due to insufficient authorizations checks. This … CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2019-7872 2024-11-21 13:48 2019-08-3 Show GitHub Exploit DB Packet Storm