Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 17, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3331 7.1 重要
Network 		openwebui open webui openwebuiのopen webuiにおける複数の脆弱性 CWE-284
CWE-862
CVE-2026-44556 2026-05-20 13:27 2026-05-15 Show GitHub Exploit DB Packet Storm
3332 4.3 警告
Network 		openwebui open webui openwebuiのopen webuiにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-44557 2026-05-20 13:27 2026-05-15 Show GitHub Exploit DB Packet Storm
3333 5.4 警告
Network 		openwebui open webui openwebuiのopen webuiにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-44558 2026-05-20 13:27 2026-05-15 Show GitHub Exploit DB Packet Storm
3334 4.3 警告
Network 		openwebui open webui openwebuiのopen webuiにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-44559 2026-05-20 13:27 2026-05-15 Show GitHub Exploit DB Packet Storm
3335 6.5 警告
Network 		openwebui open webui openwebuiのopen webuiにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-44560 2026-05-20 13:27 2026-05-15 Show GitHub Exploit DB Packet Storm
3336 5.4 警告
Network 		openwebui open webui openwebuiのopen webuiにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-44561 2026-05-20 13:27 2026-05-15 Show GitHub Exploit DB Packet Storm
3337 6.5 警告
Network 		openwebui open webui openwebuiのopen webuiにおける複数の脆弱性 CWE-283
CWE-862
CVE-2026-44562 2026-05-20 13:27 2026-05-15 Show GitHub Exploit DB Packet Storm
3338 5.4 警告
Network 		openwebui open webui openwebuiのopen webuiにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-44563 2026-05-20 13:27 2026-05-15 Show GitHub Exploit DB Packet Storm
3339 5.4 警告
Network 		openwebui open webui openwebuiのopen webuiにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-44564 2026-05-20 13:27 2026-05-15 Show GitHub Exploit DB Packet Storm
3340 4.8 警告
Network 		openwebui open webui openwebuiのopen webuiにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-44568 2026-05-20 13:27 2026-05-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345621 - fusionphp fusion_news Directory traversal vulnerability in sources/post.php in Fusion News 1.0, when register_globals is enabled, allows remote attackers to include arbitrary files via a .. (dot dot) sequence in the fil_c… NVD-CWE-Other
CVE-2006-3387 2017-10-19 10:29 2006-07-7 Show GitHub Exploit DB Packet Storm
345622 - bxcp bxcp SQL injection vulnerability in the files mod in index.php in BXCP 0.3.0.4 allows remote attackers to execute arbitrary SQL commands via the where parameter in a view action. NVD-CWE-Other
CVE-2006-3394 2017-10-19 10:29 2006-07-7 Show GitHub Exploit DB Packet Storm
345623 - id_software
raven_software 		quake_3_engine
soldier_of_fortune_2 		Stack-based buffer overflow in the CG_ServerCommand function in Quake 3 Engine as used by Soldier of Fortune 2 (SOF2MP) GOLD 1.03 allows remote attackers to cause a denial of service and possibly exe… NVD-CWE-Other
CVE-2006-3400 2017-10-19 10:29 2006-07-7 Show GitHub Exploit DB Packet Storm
345624 - id_software quake_3_engine Stack-based buffer overflow in Quake 3 Engine as used by Quake 3: Arena 1.32b and 1.32c allows remote attackers to cause a denial of service and possibly execute code via long CS_ITEMS values. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2006-3401 2017-10-19 10:29 2006-07-7 Show GitHub Exploit DB Packet Storm
345625 - wonderedit wonderedit_pro_cms PHP remote file inclusion vulnerability in WonderEdit Pro CMS allows remote attackers to execute arbitrary PHP code via the config[template_path] parameter in user_bottom.php, as used by multiple tem… NVD-CWE-Other
CVE-2006-3422 2017-10-19 10:29 2006-07-7 Show GitHub Exploit DB Packet Storm
345626 - myphp_cms myphp_cms PHP remote file inclusion vulnerability in styles/default/global_header.php in MyPHP CMS 0.3 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a… NVD-CWE-Other
CVE-2006-3478 2017-10-19 10:29 2006-07-11 Show GitHub Exploit DB Packet Storm
345627 - sabdrimer_cms sabdrimer_cms PHP remote file inclusion vulnerability in skins/advanced/advanced1.php in Sabdrimer Pro 2.2.4, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in th… NVD-CWE-Other
CVE-2006-3520 2017-10-19 10:29 2006-07-12 Show GitHub Exploit DB Packet Storm
345628 - asp_stats_generator asp_stats_generator SQL injection vulnerability in pages.asp in ASP Stats Generator before 2.1.2 allows remote attackers to execute arbitrary SQL commands via the order parameter. NVD-CWE-Other
CVE-2006-3580 2017-10-19 10:29 2006-07-13 Show GitHub Exploit DB Packet Storm
345629 - asp_stats_generator asp_stats_generator Upgrade to version 2.1.2 NVD-CWE-Other
CVE-2006-3580 2017-10-19 10:29 2006-07-13 Show GitHub Exploit DB Packet Storm
345630 - czaries_network czarnews PHP remote file inclusion vulnerability in CzarNews 1.12 through 1.14 allows remote attackers to execute arbitrary PHP code via a URL in the tpath parameter to cn_config.php. NOTE: the news.php vect… NVD-CWE-Other
CVE-2006-3685 2017-10-19 10:29 2006-07-21 Show GitHub Exploit DB Packet Storm