Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2811 7.2 重要
Network 		openwebui open webui openwebuiのopen webuiにおける複数の脆弱性 CWE-269
CWE-862
CVE-2026-45395 2026-05-20 13:26 2026-05-15 Show GitHub Exploit DB Packet Storm
2812 7.1 重要
Network 		openwebui open webui openwebuiのopen webuiにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-45399 2026-05-20 13:26 2026-05-15 Show GitHub Exploit DB Packet Storm
2813 8.1 重要
Network 		openwebui open webui openwebuiのopen webuiにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-45402 2026-05-20 13:25 2026-05-15 Show GitHub Exploit DB Packet Storm
2814 8.1 重要
Network 		openwebui open webui openwebuiのopen webuiにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-45665 2026-05-20 13:25 2026-05-15 Show GitHub Exploit DB Packet Storm
2815 6.5 警告
Network 		openwebui open webui openwebuiのopen webuiにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-45666 2026-05-20 13:25 2026-05-15 Show GitHub Exploit DB Packet Storm
2816 6.5 警告
Network 		openwebui open webui openwebuiのopen webuiにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-45667 2026-05-20 13:25 2026-05-15 Show GitHub Exploit DB Packet Storm
2817 8 重要
Network 		openwebui open webui openwebuiのopen webuiにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-45671 2026-05-20 13:25 2026-05-15 Show GitHub Exploit DB Packet Storm
2818 8.1 重要
Network 		openwebui open webui openwebuiのopen webuiにおける複数の脆弱性 CWE-269
CWE-362
CVE-2026-45675 2026-05-20 13:25 2026-05-15 Show GitHub Exploit DB Packet Storm
2819 7.5 重要
Network 		Fleet Device Management fleet Fleet Device Managementのfleetにおけるスプーフィングによる認証回避に関する脆弱性 CWE-290
スプーフィングによる認証回避 		CVE-2026-46356 2026-05-20 13:25 2026-05-14 Show GitHub Exploit DB Packet Storm
2820 6.5 警告
Network 		Mattermost, Inc. Mattermost Server Mattermost, Inc.のMattermost Serverにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-5163 2026-05-20 13:25 2026-05-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345591 - gnome
redhat 		gdm
kdebase 		GDM before 2.4.1.6, when using the "examine session errors" feature, allows local users to read arbitrary files via a symlink attack on the ~/.xsession-errors file. NVD-CWE-Other
CVE-2003-0547 2017-10-11 10:29 2003-08-27 Show GitHub Exploit DB Packet Storm
345592 - gnome
redhat 		gdm
kdebase
enterprise_linux
linux_advanced_workstation 		The X Display Manager Control Protocol (XDMCP) support for GDM before 2.4.1.6 allows attackers to cause a denial of service (daemon crash) when a chosen host expires, a different issue than CVE-2003-… NVD-CWE-Other
CVE-2003-0548 2017-10-11 10:29 2003-08-27 Show GitHub Exploit DB Packet Storm
345593 - gnome
redhat 		gdm
kdebase
enterprise_linux
linux_advanced_workstation 		The X Display Manager Control Protocol (XDMCP) support for GDM before 2.4.1.6 allows attackers to cause a denial of service (daemon crash) via a short authorization key name. NVD-CWE-Other
CVE-2003-0549 2017-10-11 10:29 2003-08-27 Show GitHub Exploit DB Packet Storm
345594 - redhat linux The STP protocol, as enabled in Linux 2.4.x, does not provide sufficient security by design, which allows attackers to modify the bridge topology. NVD-CWE-Other
CVE-2003-0550 2017-10-11 10:29 2003-08-27 Show GitHub Exploit DB Packet Storm
345595 - redhat linux The STP protocol implementation in Linux 2.4.x does not properly verify certain lengths, which could allow attackers to cause a denial of service. NVD-CWE-Other
CVE-2003-0551 2017-10-11 10:29 2003-08-27 Show GitHub Exploit DB Packet Storm
345596 - redhat linux Linux 2.4.x allows remote attackers to spoof the bridge Forwarding table via forged packets whose source addresses are the same as the target. NVD-CWE-Other
CVE-2003-0552 2017-10-11 10:29 2003-08-27 Show GitHub Exploit DB Packet Storm
345597 - hitachi groupmax_mail_-_security_option
pki_runtime_library 		Multiple vulnerabilities in multiple vendor implementations of the Secure/Multipurpose Internet Mail Extensions (S/MIME) protocol allow remote attackers to cause a denial of service and possibly exec… NVD-CWE-Other
CVE-2003-0564 2017-10-11 10:29 2003-12-1 Show GitHub Exploit DB Packet Storm
345598 - kde konqueror
konqueror_embedded 		Konqueror in KDE 3.1.3 and earlier (kdelibs) allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory traversal sequences in… NVD-CWE-Other
CVE-2003-0592 2017-10-11 10:29 2004-04-15 Show GitHub Exploit DB Packet Storm
345599 - mozilla mozilla Mozilla allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory traversal sequences in a URL, which causes Mozilla to send … NVD-CWE-Other
CVE-2003-0594 2017-10-11 10:29 2004-04-15 Show GitHub Exploit DB Packet Storm
345600 - linux linux_kernel Integer signedness error in the decode_fh function of nfs3xdr.c in Linux kernel before 2.4.21 allows remote attackers to cause a denial of service (kernel panic) via a negative size value within XDR … NVD-CWE-Other
CVE-2003-0619 2017-10-11 10:29 2003-08-27 Show GitHub Exploit DB Packet Storm