Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 16, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
244701 7.5 危険 battlefront - Battlefront Dropteam におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2007-5263 2012-06-26 15:54 2007-10-8 Show GitHub Exploit DB Packet Storm
244702 7.5 危険 ActivePDF, Inc. - activePDF Server の activePDF Server サービスにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2007-5397 2012-06-26 15:54 2008-02-28 Show GitHub Exploit DB Packet Storm
244703 6.8 警告 cplinks - cpDynaLinks の category.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-5408 2012-06-26 15:54 2007-10-12 Show GitHub Exploit DB Packet Storm
244704 10 危険 AbiWord
link grammar
- AbiWord Link Grammar で使用される Link Grammar の separate_word 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2007-5395 2012-06-26 15:54 2007-11-7 Show GitHub Exploit DB Packet Storm
244705 4.3 警告 日本アルカテル・ルーセント
bt
- BT Home Hub などで使用される Thomson/Alcatel SpeedTouch 7G ルータにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-5385 2012-06-26 15:54 2007-10-11 Show GitHub Exploit DB Packet Storm
244706 4.3 警告 日本アルカテル・ルーセント
bt
- BT Home Hub で使用される Thomson/Alcatel SpeedTouch 7G ルータにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2007-5384 2012-06-26 15:54 2007-10-11 Show GitHub Exploit DB Packet Storm
244707 10 危険 日本アルカテル・ルーセント
bt
- BT Home Hub で使用される Thomson/Alcatel SpeedTouch 7G ルータにおける管理者アクセス権を取得される脆弱性 CWE-287
不適切な認証
CVE-2007-5383 2012-06-26 15:54 2007-10-11 Show GitHub Exploit DB Packet Storm
244708 10 危険 シスコシステムズ - CiscoWorks WLSE を変換する変換ユーティリティにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2007-5382 2012-06-26 15:54 2007-10-10 Show GitHub Exploit DB Packet Storm
244709 6.9 警告 GNU Project - Emacs の Tramp 拡張における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題
CVE-2007-5377 2012-06-26 15:54 2007-10-4 Show GitHub Exploit DB Packet Storm
244710 10 危険 LedgerSMB
dws systems inc.
- LedgerSMB における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-5372 2012-06-26 15:54 2007-09-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
111 7.7 HIGH
Network
- - Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, a Server-Side Request Forgery (SSRF) vulnerability exists in _process_picture_url() … New CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-45338 2026-05-16 08:16 2026-05-16 Show GitHub Exploit DB Packet Storm
112 8.5 HIGH
Network
- - Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, validate_url() in backend/open_webui/retrieval/web/utils.py calls validators.ipv6(ip… New CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-45331 2026-05-16 08:16 2026-05-16 Show GitHub Exploit DB Packet Storm
113 9.1 CRITICAL
Network
- - phpMyFAQ before 4.1.2 contains an improper restriction of excessive authentication attempts vulnerability in the /admin/check endpoint, which accepts arbitrary user-id parameters without session bind… New CWE-307
mproper Restriction of Excessive Authentication Attempts
CVE-2026-45010 2026-05-16 08:16 2026-05-16 Show GitHub Exploit DB Packet Storm
114 6.5 MEDIUM
Network
- - Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.6, in standard channels (i.e., channels whose channel.type is neither group nor dm), th… New CWE-862
 Missing Authorization
CVE-2026-44571 2026-05-16 08:16 2026-05-16 Show GitHub Exploit DB Packet Storm
115 6.5 MEDIUM
Network
- - Imager versions through 1.030 for Perl allow a heap out of bounds (OOB) write on crafted multi-frame GIF files. Imager::File::GIF's i_readgif_multi_low allocates a single per-row buffer GifRow sized… New CWE-787
 Out-of-bounds Write
CVE-2026-8669 2026-05-16 07:16 2026-05-16 Show GitHub Exploit DB Packet Storm
116 5.3 MEDIUM
Local
- - Imager::File::GIF versions through 1.002 for Perl allow a heap out of bounds (OOB) write on crafted multi-frame GIF files. Imager::File::GIF's i_readgif_multi_low allocates a single per-row buffer G… New CWE-787
 Out-of-bounds Write
CVE-2026-8454 2026-05-16 07:16 2026-05-15 Show GitHub Exploit DB Packet Storm
117 - - - Trog::TOTP versions before 1.006 for Perl generate secrets using rand. Secrets were generated using Perl's built-in rand function, which is predictable and unsuitable for security usage. New CWE-331
 Insufficient Entropy
CVE-2026-46474 2026-05-16 07:16 2026-05-16 Show GitHub Exploit DB Packet Storm
118 5.4 MEDIUM
Network
- - phpMyFAQ before 4.1.2 contains a missing authorization vulnerability in the DELETE /admin/api/content/tags/{tagId} endpoint that allows any authenticated user to delete tags. Any logged-in user, incl… New CWE-862
 Missing Authorization
CVE-2026-46365 2026-05-16 07:16 2026-05-16 Show GitHub Exploit DB Packet Storm
119 7.5 HIGH
Network
- - phpMyFAQ before 4.1.2 contains a sql injection vulnerability in CurrentUser::setTokenData that allows authenticated attackers to execute arbitrary SQL by injecting malicious OAuth token claims. Attac… New CWE-89
SQL Injection
CVE-2026-46359 2026-05-16 07:16 2026-05-16 Show GitHub Exploit DB Packet Storm
120 8.0 HIGH
Network
- - Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, any authenticated user can permanently delete files owned by other users via DELETE … New CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2026-45671 2026-05-16 07:16 2026-05-16 Show GitHub Exploit DB Packet Storm