Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
245821 7.8 危険 dvbbs - Dvbbs におけるデータベースをダウンロードされる脆弱性 - CVE-2007-3774 2012-06-26 15:54 2007-07-15 Show GitHub Exploit DB Packet Storm
245822 9.3 危険 generic youtube clone script - Generic YouTube Clone Script の Email-Template モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-3773 2012-06-26 15:54 2007-07-15 Show GitHub Exploit DB Packet Storm
245823 5 警告 Digium - Asterisk の STUN 実装におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-3765 2012-06-26 15:54 2007-07-18 Show GitHub Exploit DB Packet Storm
245824 5 警告 Digium - Asterisk の Skinny チャネルドライバにおけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-3764 2012-06-26 15:54 2007-07-18 Show GitHub Exploit DB Packet Storm
245825 5 警告 Digium - Asterisk の IAX2 チャネルドライバにおけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-3763 2012-06-26 15:54 2007-07-18 Show GitHub Exploit DB Packet Storm
245826 9.3 危険 Digium - Asterisk の IAX2 チャネルドライバにおけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-3762 2012-06-26 15:54 2007-07-18 Show GitHub Exploit DB Packet Storm
245827 5.4 警告 アップル - iChat の UPnP IGD 実装におけるバッファオーバーフローの脆弱性 - CVE-2007-3748 2012-06-26 15:54 2007-07-31 Show GitHub Exploit DB Packet Storm
245828 6.8 警告 アップル - CoreAudio への Java インターフェースにおける任意のコードを実行される脆弱性 - CVE-2007-3747 2012-06-26 15:46 2007-07-31 Show GitHub Exploit DB Packet Storm
245829 6.8 警告 アップル - CoreAudio への Java インターフェースにおける任意のコードを実行される脆弱性 - CVE-2007-3746 2012-06-26 15:46 2007-07-31 Show GitHub Exploit DB Packet Storm
245830 6.8 警告 アップル - CoreAudio への Java インターフェースにおける任意のメモリを解放される脆弱性 - CVE-2007-3745 2012-06-26 15:46 2007-07-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
721 5.4 MEDIUM
Network 		- - Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.3, his advisory tracks a regression of the original Excel-preview XSS (CVE-2026-44549).… Update CWE-79
Cross-site Scripting 		CVE-2026-45318 2026-05-19 02:36 2026-05-16 Show GitHub Exploit DB Packet Storm
722 7.7 HIGH
Network 		- - Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, a Server-Side Request Forgery (SSRF) vulnerability exists in _process_picture_url() … Update CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-45338 2026-05-19 02:36 2026-05-16 Show GitHub Exploit DB Packet Storm
723 6.5 MEDIUM
Network 		- - Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.5.7, a user can modify another user's model even if its visibility is set to Private. By … Update CWE-285
Improper Authorization 		CVE-2026-45345 2026-05-19 02:36 2026-05-16 Show GitHub Exploit DB Packet Storm
724 - - - Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.6.31, there is a Cross-Site Scripting vulnerability in Open WebUI SVG renderer implementa… Update CWE-80
Basic XSS 		CVE-2026-45346 2026-05-19 02:36 2026-05-16 Show GitHub Exploit DB Packet Storm
725 4.3 MEDIUM
Network 		- - Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.5.11, there is a blind server side request forgery (SSRF) via the PDF generate function. … Update CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-45347 2026-05-19 02:36 2026-05-16 Show GitHub Exploit DB Packet Storm
726 6.5 MEDIUM
Network 		- - Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.9, when a regular user [non-admin] logs into the application, a http://IP:8080/api/mode… Update CWE-200
Information Exposure 		CVE-2026-45351 2026-05-19 02:36 2026-05-16 Show GitHub Exploit DB Packet Storm
727 7.1 HIGH
Network 		- - Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.6, there is a vulnerability in chat completion API, which allows attackers to bypass to… Update CWE-862
 Missing Authorization 		CVE-2026-45350 2026-05-19 02:36 2026-05-16 Show GitHub Exploit DB Packet Storm
728 4.3 MEDIUM
Network 		dovecot
open-xchange 		dovecot Attacker can use the IMAP SETACL command to inject the anyone permission to user's dovecot-acl file even if imap_acl_allow_anyone=no. This causes folders to be spammed to all users. The impact is lim… Update CWE-284
NVD-CWE-noinfo
Improper Access Control 		CVE-2026-40020 2026-05-19 02:36 2026-05-12 Show GitHub Exploit DB Packet Storm
729 5.3 MEDIUM
Adjacent 		dovecot
open-xchange 		dovecot Attacker can use a specially crafted base64 exchange between Dovecot and Client to fake SCRAM TLS channel binding. This requires that the attacker is able to position itself between Dovecot and the c… Update CWE-99
Resource Injection 		CVE-2026-33603 2026-05-19 02:35 2026-05-12 Show GitHub Exploit DB Packet Storm
730 6.5 MEDIUM
Network 		dovecot
open-xchange 		dovecot Attacker can upload a malicious Sieve script over ManageSieve service (or locally) to bypass configured CPU time limits for Sieve up to 130 times of the configured limit. Attacker can use this to deg… Update CWE-400
 Uncontrolled Resource Consumption 		CVE-2026-40016 2026-05-19 02:34 2026-05-12 Show GitHub Exploit DB Packet Storm