Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1431 8.3 重要
Network 		openwebui open webui openwebuiのopen webuiにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-44570 2026-05-20 13:27 2026-05-15 Show GitHub Exploit DB Packet Storm
1432 6.5 警告
Network 		openwebui open webui openwebuiのopen webuiにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-44571 2026-05-20 13:27 2026-05-15 Show GitHub Exploit DB Packet Storm
1433 7.3 重要
Network 		openwebui open webui openwebuiのopen webuiにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-44721 2026-05-20 13:27 2026-05-15 Show GitHub Exploit DB Packet Storm
1434 5.5 警告
Local 		Vim Vim Vimにおける複数の脆弱性 CWE-122
CWE-190
CVE-2026-45130 2026-05-20 13:27 2026-05-8 Show GitHub Exploit DB Packet Storm
1435 5.4 警告
Network 		openwebui open webui openwebuiのopen webuiにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-45299 2026-05-20 13:27 2026-05-15 Show GitHub Exploit DB Packet Storm
1436 8.1 重要
Network 		openwebui open webui openwebuiのopen webuiにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-45301 2026-05-20 13:27 2026-05-15 Show GitHub Exploit DB Packet Storm
1437 7.7 重要
Network 		openwebui open webui openwebuiのopen webuiにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-45303 2026-05-20 13:27 2026-05-15 Show GitHub Exploit DB Packet Storm
1438 6.1 警告
Network 		openwebui open webui openwebuiのopen webuiにおける代替 XSS 構文の不適切な無効化に関する脆弱性 CWE-87
代替 XSS 構文の不適切な無効化 		CVE-2026-45314 2026-05-20 13:26 2026-05-15 Show GitHub Exploit DB Packet Storm
1439 8.7 重要
Network 		openwebui open webui openwebuiのopen webuiにおける複数の脆弱性 CWE-434
CWE-646
CWE-79
CVE-2026-45315 2026-05-20 13:26 2026-05-15 Show GitHub Exploit DB Packet Storm
1440 3.5 低
Network 		openwebui open webui openwebuiのopen webuiにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-45316 2026-05-20 13:26 2026-05-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
319281 5.5 MEDIUM
Local 		- - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. - CVE-2022-48936 2024-08-31 15:15 2024-08-22 Show GitHub Exploit DB Packet Storm
319282 6.6 MEDIUM
Local 		intel oneapi_base_toolkit
distribution_for_gdb 		Improper buffer restrictions in some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an authenticated user to potentially enable denial of service via local access. NVD-CWE-noinfo
CVE-2024-25562 2024-08-31 12:40 2024-08-14 Show GitHub Exploit DB Packet Storm
319283 3.3 LOW
Local 		intel oneapi_base_toolkit
distribution_for_gdb 		Improper input validation for some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an authenticated user to potentially enable denial of service via local access. NVD-CWE-noinfo
CVE-2024-24973 2024-08-31 12:39 2024-08-14 Show GitHub Exploit DB Packet Storm
319284 7.8 HIGH
Local 		intel oneapi_base_toolkit
distribution_for_gdb 		Incorrect default permissions in some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access. CWE-276
Incorrect Default Permissions  		CVE-2024-23495 2024-08-31 12:38 2024-08-14 Show GitHub Exploit DB Packet Storm
319285 7.3 HIGH
Local 		intel oneapi_base_toolkit
distribution_for_gdb 		Uncontrolled search path in some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access. CWE-427
 Uncontrolled Search Path Element 		CVE-2024-23491 2024-08-31 12:37 2024-08-14 Show GitHub Exploit DB Packet Storm
319286 5.4 MEDIUM
Network 		yzncms yzncms A cross-site scripting (XSS) vulnerability in the component /index/index.html of YZNCMS v1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the config… CWE-79
Cross-site Scripting 		CVE-2024-42939 2024-08-31 11:58 2024-08-21 Show GitHub Exploit DB Packet Storm
319287 - - - Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error and is not a valid vulnerability. Notes: All references and descriptions in this candidate h… - CVE-2022-4538 2024-08-31 06:15 2024-08-31 Show GitHub Exploit DB Packet Storm
319288 - - - Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error and is not a valid vulnerability. Notes: All references and descriptions in this candidate h… - CVE-2022-4528 2024-08-31 06:15 2024-08-31 Show GitHub Exploit DB Packet Storm
319289 - - - Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error and is not a valid vulnerability. Notes: All references and descriptions in this candidate h… - CVE-2022-4412 2024-08-31 06:15 2024-08-31 Show GitHub Exploit DB Packet Storm
319290 - - - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. - CVE-2024-42379 2024-08-31 05:15 2024-08-31 Show GitHub Exploit DB Packet Storm