Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 16, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
224731 2.9 注意 Wireshark - Wireshark の解析エンジンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2013-1589 2013-04-9 16:38 2013-01-29 Show GitHub Exploit DB Packet Storm
224732 2.9 注意 Wireshark - Wireshark の NTLMSSP 解析機能におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-1590 2013-04-9 16:33 2013-01-29 Show GitHub Exploit DB Packet Storm
224733 2.9 注意 Wireshark - Wireshark の R3 解析機能におけるサービス運用妨害 (無限ループ) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-1575 2013-04-9 16:18 2013-01-29 Show GitHub Exploit DB Packet Storm
224734 5.8 警告 Novell - Mac OS X 上で稼働する Novell OES 用 Novell Kanaka コンポーネントにおけるサーバになりすまされる脆弱性 CWE-20
不適切な入力確認 		CVE-2013-2770 2013-04-9 16:09 2013-03-15 Show GitHub Exploit DB Packet Storm
224735 2.9 注意 Wireshark - Wireshark の Bluetooth HCI 解析機能におけるサービス運用妨害 (無限ループ) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-1574 2013-04-9 16:09 2013-01-29 Show GitHub Exploit DB Packet Storm
224736 3.5 注意 IBM - IBM Scale Out Network Attached Storage における重要なサーバ情報を取得される脆弱性 CWE-255
CWE-264
CVE-2012-0706 2013-04-9 16:08 2013-03-28 Show GitHub Exploit DB Packet Storm
224737 7.2 危険 Linux - Linux Kernel の clone システムコールの実装における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-1858 2013-04-9 16:07 2013-03-14 Show GitHub Exploit DB Packet Storm
224738 7.1 危険 Cogent Real-Time Systems Inc. - 複数の Cogent Real-Time Systems 製品におけるサービス運用妨害 (DoS) の脆弱性 CWE-16
環境設定 		CVE-2013-0683 2013-04-9 16:05 2013-04-5 Show GitHub Exploit DB Packet Storm
224739 7.5 危険 Cogent Real-Time Systems Inc. - 複数の Cogent Real-Time Systems 製品におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2013-0682 2013-04-9 16:03 2013-04-5 Show GitHub Exploit DB Packet Storm
224740 5 警告 Cogent Real-Time Systems Inc. - 複数の Cogent DataHub 製品におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-0681 2013-04-9 16:02 2013-04-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
111 7.7 HIGH
Network 		- - Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, a Server-Side Request Forgery (SSRF) vulnerability exists in _process_picture_url() … New CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-45338 2026-05-16 08:16 2026-05-16 Show GitHub Exploit DB Packet Storm
112 8.5 HIGH
Network 		- - Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, validate_url() in backend/open_webui/retrieval/web/utils.py calls validators.ipv6(ip… New CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-45331 2026-05-16 08:16 2026-05-16 Show GitHub Exploit DB Packet Storm
113 9.1 CRITICAL
Network 		- - phpMyFAQ before 4.1.2 contains an improper restriction of excessive authentication attempts vulnerability in the /admin/check endpoint, which accepts arbitrary user-id parameters without session bind… New CWE-307
mproper Restriction of Excessive Authentication Attempts 		CVE-2026-45010 2026-05-16 08:16 2026-05-16 Show GitHub Exploit DB Packet Storm
114 6.5 MEDIUM
Network 		- - Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.6, in standard channels (i.e., channels whose channel.type is neither group nor dm), th… New CWE-862
 Missing Authorization 		CVE-2026-44571 2026-05-16 08:16 2026-05-16 Show GitHub Exploit DB Packet Storm
115 6.5 MEDIUM
Network 		- - Imager versions through 1.030 for Perl allow a heap out of bounds (OOB) write on crafted multi-frame GIF files. Imager::File::GIF's i_readgif_multi_low allocates a single per-row buffer GifRow sized… New CWE-787
 Out-of-bounds Write 		CVE-2026-8669 2026-05-16 07:16 2026-05-16 Show GitHub Exploit DB Packet Storm
116 5.3 MEDIUM
Local 		- - Imager::File::GIF versions through 1.002 for Perl allow a heap out of bounds (OOB) write on crafted multi-frame GIF files. Imager::File::GIF's i_readgif_multi_low allocates a single per-row buffer G… New CWE-787
 Out-of-bounds Write 		CVE-2026-8454 2026-05-16 07:16 2026-05-15 Show GitHub Exploit DB Packet Storm
117 - - - Trog::TOTP versions before 1.006 for Perl generate secrets using rand. Secrets were generated using Perl's built-in rand function, which is predictable and unsuitable for security usage. New CWE-331
 Insufficient Entropy 		CVE-2026-46474 2026-05-16 07:16 2026-05-16 Show GitHub Exploit DB Packet Storm
118 5.4 MEDIUM
Network 		- - phpMyFAQ before 4.1.2 contains a missing authorization vulnerability in the DELETE /admin/api/content/tags/{tagId} endpoint that allows any authenticated user to delete tags. Any logged-in user, incl… New CWE-862
 Missing Authorization 		CVE-2026-46365 2026-05-16 07:16 2026-05-16 Show GitHub Exploit DB Packet Storm
119 7.5 HIGH
Network 		- - phpMyFAQ before 4.1.2 contains a sql injection vulnerability in CurrentUser::setTokenData that allows authenticated attackers to execute arbitrary SQL by injecting malicious OAuth token claims. Attac… New CWE-89
SQL Injection 		CVE-2026-46359 2026-05-16 07:16 2026-05-16 Show GitHub Exploit DB Packet Storm
120 8.0 HIGH
Network 		- - Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, any authenticated user can permanently delete files owned by other users via DELETE … New CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2026-45671 2026-05-16 07:16 2026-05-16 Show GitHub Exploit DB Packet Storm