Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3251 7.5 重要
Network 		monetr monetr monetrにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-40481 2026-04-27 11:29 2026-04-17 Show GitHub Exploit DB Packet Storm
3252 5.5 警告
Local 		HKUDS OpenHarness HKUDSのOpenHarnessにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-40515 2026-04-27 11:29 2026-04-17 Show GitHub Exploit DB Packet Storm
3253 6.3 警告
Local 		HKUDS OpenHarness HKUDSのOpenHarnessにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-40516 2026-04-27 11:29 2026-04-17 Show GitHub Exploit DB Packet Storm
3254 7.6 重要
Network 		HKUDS OpenHarness HKUDSのOpenHarnessにおける認証に関する脆弱性 CWE-287
不適切な認証 		CVE-2026-6729 2026-04-27 11:29 2026-04-20 Show GitHub Exploit DB Packet Storm
3255 9.8 緊急
Network 		Topsec Technologies Group Inc. Tianxin Internet Behavior Management System Topsec Technologies Group Inc.のTianxin Internet Behavior Management SystemにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2021-4473 2026-04-27 11:29 2026-04-7 Show GitHub Exploit DB Packet Storm
3256 7.2 重要
Network 		Dolibarr ERP & CRM dolibarr erp/crm Dolibarr ERP & CRMのdolibarr erp/crmにおける複数の脆弱性 CWE-94
CWE-95
CVE-2026-22666 2026-04-27 11:29 2026-04-7 Show GitHub Exploit DB Packet Storm
3257 9.8 緊急
Network 		Weaver Software Weaver e cology Weaver SoftwareのWeaver e cologyにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2026-22679 2026-04-27 11:29 2026-04-7 Show GitHub Exploit DB Packet Storm
3258 8.8 重要
Local 		PackageKit Project PackageKit PackageKit ProjectのPackageKitにおけるTime-of-check Time-of-use (TOCTOU) 競合状態の脆弱性 CWE-367
Time-of-check Time-of-use (TOCTOU) 競合状態 		CVE-2026-41651 2026-04-27 11:29 2026-04-22 Show GitHub Exploit DB Packet Storm
3259 4.4 警告
Local 		libjxl project libjxl libjxl projectのlibjxlにおける初期化されていないリソースの使用に関する脆弱性 CWE-908
初期化されていないリソースの使用 		CVE-2025-12474 2026-04-27 11:28 2026-02-11 Show GitHub Exploit DB Packet Storm
3260 7.5 重要
Network 		FirebirdSQL Firebird FirebirdSQLのFirebirdにおける情報漏えいに関する脆弱性 CWE-200
CWE-noinfo
CVE-2025-65104 2026-04-27 11:28 2026-04-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
191 8.7 HIGH
Network 		- - Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.3, the audio transcription upload endpoint takes the file extension from the user-suppl… New CWE-79
CWE-434
CWE-646
Cross-site Scripting
 Unrestricted Upload of File with Dangerous Type 
 Reliance on File Name or Extension of Externally-Supplied File 		CVE-2026-45315 2026-05-16 07:16 2026-05-16 Show GitHub Exploit DB Packet Storm
192 - - - Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.3, the channel webhook create/update flow accepts arbitrary profile_image_url values, i… New CWE-87
 Improper Neutralization of Alternate XSS Syntax 		CVE-2026-45314 2026-05-16 07:16 2026-05-16 Show GitHub Exploit DB Packet Storm
193 7.7 HIGH
Network 		- - Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.6.5, through the HTML rendering view, scripts can be injected and executed. The frontend … New CWE-79
Cross-site Scripting 		CVE-2026-45303 2026-05-16 07:16 2026-05-16 Show GitHub Exploit DB Packet Storm
194 8.1 HIGH
Network 		- - Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.3.16, a missing permission check in all files related API endpoints allows any authentica… New CWE-284
Improper Access Control 		CVE-2026-45301 2026-05-16 07:16 2026-05-16 Show GitHub Exploit DB Packet Storm
195 5.4 MEDIUM
Network 		- - Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.0, the profile_image_url field on the user profile update form accepted arbitrary data:… New CWE-79
Cross-site Scripting 		CVE-2026-45299 2026-05-16 07:16 2026-05-16 Show GitHub Exploit DB Packet Storm
196 7.5 HIGH
Network 		- - Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.2, Vvveb CMS does not validate the sign of the quantity parameter on the cart-ad… New CWE-1284
 Improper Validation of Specified Quantity in Input 		CVE-2026-44826 2026-05-16 07:16 2026-05-16 Show GitHub Exploit DB Packet Storm
197 8.3 HIGH
Network 		- - Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.6.19, authorization controls surrounding the memories API were inconsistent, resulting in… New CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2026-44570 2026-05-16 07:16 2026-05-16 Show GitHub Exploit DB Packet Storm
198 7.1 HIGH
Network 		- - Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.6.19, there's an IDOR in the channels message management system that allows authenticated… New CWE-862
 Missing Authorization 		CVE-2026-44569 2026-05-16 07:16 2026-05-16 Show GitHub Exploit DB Packet Storm
199 7.3 HIGH
Network 		- - Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.1.124, the API does not properly validate that the user has an authorized user role of us… New CWE-602
CWE-863
 Client-Side Enforcement of Server-Side Security
 Incorrect Authorization 		CVE-2026-44567 2026-05-16 07:16 2026-05-16 Show GitHub Exploit DB Packet Storm
200 7.3 HIGH
Network 		- - Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.1.124, when attaching files to a promp, the name of the file is derived from the original… New CWE-22
CWE-434
Path Traversal
 Unrestricted Upload of File with Dangerous Type  		CVE-2026-44566 2026-05-16 07:16 2026-05-16 Show GitHub Exploit DB Packet Storm