Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 23, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
4181 8.7 重要
Network
openwebui open webui openwebuiのopen webuiにおける複数の脆弱性 CWE-434
CWE-646
CWE-79
CVE-2026-45315 2026-05-20 13:26 2026-05-15 Show GitHub Exploit DB Packet Storm
4182 3.5
Network
openwebui open webui openwebuiのopen webuiにおける不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2026-45316 2026-05-20 13:26 2026-05-15 Show GitHub Exploit DB Packet Storm
4183 4.6 警告
Network
openwebui open webui openwebuiのopen webuiにおける複数の脆弱性 CWE-20
CWE-352
CVE-2026-45317 2026-05-20 13:26 2026-05-15 Show GitHub Exploit DB Packet Storm
4184 5.4 警告
Network
openwebui open webui openwebuiのopen webuiにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-45318 2026-05-20 13:26 2026-05-15 Show GitHub Exploit DB Packet Storm
4185 8.5 重要
Network
openwebui open webui openwebuiのopen webuiにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ
CVE-2026-45331 2026-05-20 13:26 2026-05-15 Show GitHub Exploit DB Packet Storm
4186 7.7 重要
Network
openwebui open webui openwebuiのopen webuiにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ
CVE-2026-45338 2026-05-20 13:26 2026-05-15 Show GitHub Exploit DB Packet Storm
4187 6.5 警告
Network
openwebui open webui openwebuiのopen webuiにおける不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2026-45339 2026-05-20 13:26 2026-05-15 Show GitHub Exploit DB Packet Storm
4188 6.5 警告
Network
openwebui open webui openwebuiのopen webuiにおける認可に関する脆弱性 CWE-285
不適切な認可
CVE-2026-45345 2026-05-20 13:26 2026-05-15 Show GitHub Exploit DB Packet Storm
4189 5.4 警告
Network
openwebui open webui openwebuiのopen webuiにおけるクロスサイトスクリプティングの脆弱性 CWE-80
クロスサイトスクリプティング (Basic XSS)
CVE-2026-45346 2026-05-20 13:26 2026-05-15 Show GitHub Exploit DB Packet Storm
4190 5.4 警告
Network
openwebui open webui openwebuiのopen webuiにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ
CVE-2026-45347 2026-05-20 13:26 2026-05-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 24, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312541 7.8 HIGH
Local
apple mac_os_x_server
mac_os_x
Apple Mac OS X 10.6 through 10.6.3 and Mac OS X Server 10.6 through 10.6.3 allows local users to obtain system privileges. CWE-20
 Improper Input Validation 
CVE-2010-1821 2024-11-21 10:15 2017-04-14 Show GitHub Exploit DB Packet Storm
312542 7.8 HIGH
Local
apple mac_os_x_server
mac_os_x
Buffer overflow in ImageIO in Apple Mac OS X 10.6 through 10.6.3 and Mac OS X Server 10.6 through 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a c… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2010-1816 2024-11-21 10:15 2017-04-14 Show GitHub Exploit DB Packet Storm
312543 - videolan vlc_media_player Integer underflow in the real_get_rdt_chunk function in real.c, as used in modules/access/rtsp/real.c in VideoLAN VLC media player before 1.0.1 and stream/realrtsp/real.c in MPlayer before r29447, al… CWE-189
Numeric Errors
CVE-2010-2062 2024-11-21 10:15 2014-12-27 Show GitHub Exploit DB Packet Storm
312544 - apple quicktime Untrusted search path vulnerability in the Picture Viewer in Apple QuickTime before 7.6.8 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attack… NVD-CWE-Other
CVE-2010-1819 2024-11-21 10:15 2013-12-27 Show GitHub Exploit DB Packet Storm
312545 - nicholasthompson global_redirect Open redirect vulnerability in the Global Redirect module 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.4 for Drupal, when non-clean to clean is enabled, allows remote attackers to redirect users t… CWE-20
 Improper Input Validation 
CVE-2010-2021 2024-11-21 10:15 2012-06-26 Show GitHub Exploit DB Packet Storm
312546 - apple airport_express_base_station_firmware
airport_extreme_base_station_firmware
airport_express
airport_extreme
time_capsule
Unspecified vulnerability in the network bridge functionality on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware before 7.5.2 allows remote attack… NVD-CWE-noinfo
CVE-2010-1804 2024-11-21 10:15 2010-12-22 Show GitHub Exploit DB Packet Storm
312547 - apple mac_os_x
mac_os_x_server
The kernel in Apple Mac OS X 10.6.x before 10.6.5 does not properly perform memory management associated with terminal devices, which allows local users to cause a denial of service (system crash) vi… CWE-399
 Resource Management Errors
CVE-2010-1847 2024-11-21 10:15 2010-11-17 Show GitHub Exploit DB Packet Storm
312548 - apple mac_os_x
mac_os_x_server
Heap-based buffer overflow in Image RAW in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a craf… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2010-1846 2024-11-21 10:15 2010-11-17 Show GitHub Exploit DB Packet Storm
312549 - apple mac_os_x
mac_os_x_server
ImageIO in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted PSD im… CWE-20
 Improper Input Validation 
CVE-2010-1845 2024-11-21 10:15 2010-11-17 Show GitHub Exploit DB Packet Storm
312550 - apple mac_os_x
mac_os_x_server
Unspecified vulnerability in Image Capture in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to cause a denial of service (memory consumption and system crash) via a crafted image. CWE-20
 Improper Input Validation 
CVE-2010-1844 2024-11-21 10:15 2010-11-17 Show GitHub Exploit DB Packet Storm