Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
441	5.4	警告 Network	openwebui	open webui	openwebuiのopen webuiにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-44564	2026-05-20 13:27	2026-05-15	Show	GitHub Exploit DB Packet Storm

442	4.8	警告 Network	openwebui	open webui	openwebuiのopen webuiにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-44568	2026-05-20 13:27	2026-05-15	Show	GitHub Exploit DB Packet Storm

443	8.3	重要 Network	openwebui	open webui	openwebuiのopen webuiにおけるユーザ制御の鍵による認証回避に関する脆弱性	CWE-639 ユーザ制御の鍵による認証回避	CVE-2026-44570	2026-05-20 13:27	2026-05-15	Show	GitHub Exploit DB Packet Storm

444	6.5	警告 Network	openwebui	open webui	openwebuiのopen webuiにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-44571	2026-05-20 13:27	2026-05-15	Show	GitHub Exploit DB Packet Storm

445	7.3	重要 Network	openwebui	open webui	openwebuiのopen webuiにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-44721	2026-05-20 13:27	2026-05-15	Show	GitHub Exploit DB Packet Storm

446	5.5	警告 Local	Vim	Vim	Vimにおける複数の脆弱性	CWE-122 CWE-190	CVE-2026-45130	2026-05-20 13:27	2026-05-8	Show	GitHub Exploit DB Packet Storm

447	5.4	警告 Network	openwebui	open webui	openwebuiのopen webuiにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-45299	2026-05-20 13:27	2026-05-15	Show	GitHub Exploit DB Packet Storm

448	8.1	重要 Network	openwebui	open webui	openwebuiのopen webuiにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-45301	2026-05-20 13:27	2026-05-15	Show	GitHub Exploit DB Packet Storm

449	7.7	重要 Network	openwebui	open webui	openwebuiのopen webuiにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-45303	2026-05-20 13:27	2026-05-15	Show	GitHub Exploit DB Packet Storm

450	6.1	警告 Network	openwebui	open webui	openwebuiのopen webuiにおける代替 XSS 構文の不適切な無効化に関する脆弱性	CWE-87 代替 XSS 構文の不適切な無効化	CVE-2026-45314	2026-05-20 13:26	2026-05-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
311521	8.0	HIGH Network	splunk	splunk	In Splunk Enterprise for Windows versions below 9.3.1, 9.2.3, and 9.1.6, a low-privileged user that does not hold the "admin" or "power" Splunk roles could write a file to the Windows system root dir…	CWE-22 Path Traversal	CVE-2024-45731	2024-10-17 22:09	2024-10-15	Show	GitHub Exploit DB Packet Storm

311522	6.5	MEDIUM Network	splunk	splunk splunk_cloud_platform	In Splunk Enterprise versions below 9.3.1, and 9.2.0 versions below 9.2.3, and Splunk Cloud Platform versions below 9.2.2403.103, 9.1.2312.200, 9.1.2312.110 and 9.1.2308.208, a low-privileged user th…	CWE-862 Missing Authorization	CVE-2024-45732	2024-10-17 22:03	2024-10-15	Show	GitHub Exploit DB Packet Storm

311523	6.5	MEDIUM Network	paloaltonetworks	expedition	A cleartext storage of sensitive information vulnerability in Palo Alto Networks Expedition allows an authenticated attacker to reveal firewall usernames, passwords, and API keys generated using thos…	CWE-312 Cleartext Storage of Sensitive Information	CVE-2024-9466	2024-10-17 15:15	2024-10-10	Show	GitHub Exploit DB Packet Storm

311524	6.5	MEDIUM Network	paloaltonetworks	expedition	An OS command injection vulnerability in Palo Alto Networks Expedition allows an authenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, clear…	CWE-78 OS Command	CVE-2024-9464	2024-10-17 15:15	2024-10-10	Show	GitHub Exploit DB Packet Storm

311525	-		-	-	Multiple Home GateWay/Hikari Denwa routers provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION are vulnerable to insufficient access restrictions for Device Setting pages. If this vulnerabili…	-	CVE-2024-47044	2024-10-17 11:15	2024-09-26	Show	GitHub Exploit DB Packet Storm

311526	8.8	HIGH Network	splunk	splunk	In Splunk Enterprise for Windows versions below 9.2.3 and 9.1.6, a low-privileged user that does not hold the "admin" or "power" Splunk roles could perform a Remote Code Execution (RCE) due to an ins…	CWE-502 Deserialization of Untrusted Data	CVE-2024-45733	2024-10-17 07:26	2024-10-15	Show	GitHub Exploit DB Packet Storm

311527	4.3	MEDIUM Network	splunk	splunk splunk_cloud_platform	In Splunk Enterprise versions below 9.2.3 and 9.1.6, and Splunk Secure Gateway versions on Splunk Cloud Platform versions below 3.4.259, 3.6.17, and 3.7.0, a low-privileged user that does not hold th…	NVD-CWE-noinfo	CVE-2024-45735	2024-10-17 07:20	2024-10-15	Show	GitHub Exploit DB Packet Storm

311528	4.3	MEDIUM Network	splunk	splunk	In Splunk Enterprise versions 9.3.0, 9.2.3, and 9.1.6, a low-privileged user that does not hold the "admin" or "power" Splunk roles could view images on the machine that runs Splunk Enterprise by usi…	NVD-CWE-noinfo	CVE-2024-45734	2024-10-17 07:20	2024-10-15	Show	GitHub Exploit DB Packet Storm

311529	6.5	MEDIUM Network	splunk	splunk splunk_cloud_platform	In Splunk Enterprise versions below 9.3.1, 9.2.3, and 9.1.6 and Splunk Cloud Platform versions below 9.2.2403.107, 9.1.2312.204, and 9.1.2312.111, a low-privileged user that does not hold the "admin"…	NVD-CWE-noinfo	CVE-2024-45736	2024-10-17 07:19	2024-10-15	Show	GitHub Exploit DB Packet Storm

311530	3.5	LOW Network	splunk	splunk splunk_cloud_platform	In Splunk Enterprise versions below 9.3.1, 9.2.3, and 9.1.6 and Splunk Cloud Platform versions below 9.2.2403.108, and 9.1.2312.204, a low-privileged user that does not hold the "admin" or "power" Sp…	CWE-352 Origin Validation Error	CVE-2024-45737	2024-10-17 07:18	2024-10-15	Show	GitHub Exploit DB Packet Storm