Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
451 8.7 重要
Network 		openwebui open webui openwebuiのopen webuiにおける複数の脆弱性 CWE-434
CWE-646
CWE-79
CVE-2026-45315 2026-05-20 13:26 2026-05-15 Show GitHub Exploit DB Packet Storm
452 3.5 低
Network 		openwebui open webui openwebuiのopen webuiにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-45316 2026-05-20 13:26 2026-05-15 Show GitHub Exploit DB Packet Storm
453 4.6 警告
Network 		openwebui open webui openwebuiのopen webuiにおける複数の脆弱性 CWE-20
CWE-352
CVE-2026-45317 2026-05-20 13:26 2026-05-15 Show GitHub Exploit DB Packet Storm
454 5.4 警告
Network 		openwebui open webui openwebuiのopen webuiにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-45318 2026-05-20 13:26 2026-05-15 Show GitHub Exploit DB Packet Storm
455 8.5 重要
Network 		openwebui open webui openwebuiのopen webuiにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-45331 2026-05-20 13:26 2026-05-15 Show GitHub Exploit DB Packet Storm
456 7.7 重要
Network 		openwebui open webui openwebuiのopen webuiにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-45338 2026-05-20 13:26 2026-05-15 Show GitHub Exploit DB Packet Storm
457 6.5 警告
Network 		openwebui open webui openwebuiのopen webuiにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-45339 2026-05-20 13:26 2026-05-15 Show GitHub Exploit DB Packet Storm
458 6.5 警告
Network 		openwebui open webui openwebuiのopen webuiにおける認可に関する脆弱性 CWE-285
不適切な認可 		CVE-2026-45345 2026-05-20 13:26 2026-05-15 Show GitHub Exploit DB Packet Storm
459 5.4 警告
Network 		openwebui open webui openwebuiのopen webuiにおけるクロスサイトスクリプティングの脆弱性 CWE-80
クロスサイトスクリプティング (Basic XSS) 		CVE-2026-45346 2026-05-20 13:26 2026-05-15 Show GitHub Exploit DB Packet Storm
460 5.4 警告
Network 		openwebui open webui openwebuiのopen webuiにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-45347 2026-05-20 13:26 2026-05-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
311591 7.3 HIGH
Local 		siemens modelsim
questa 		A vulnerability has been identified in ModelSim (All versions < V2024.3), Questa (All versions < V2024.3). gdb.exe in affected applications allows a specific executable file to be loaded from the cur… CWE-427
 Uncontrolled Search Path Element 		CVE-2024-47195 2024-10-17 03:11 2024-10-8 Show GitHub Exploit DB Packet Storm
311592 7.3 HIGH
Local 		siemens modelsim
questa 		A vulnerability has been identified in ModelSim (All versions < V2024.3), Questa (All versions < V2024.3). vsimk.exe in affected applications allows a specific tcl file to be loaded from the current … CWE-427
 Uncontrolled Search Path Element 		CVE-2024-47196 2024-10-17 03:07 2024-10-8 Show GitHub Exploit DB Packet Storm
311593 7.8 HIGH
Local 		schneider-electric zelio_soft_2 CWE-416: Use After Free vulnerability exists that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when application user opens a malicious Zelio Soft 2 … CWE-416
 Use After Free 		CVE-2024-8422 2024-10-17 03:00 2024-10-8 Show GitHub Exploit DB Packet Storm
311594 8.4 HIGH
Network 		payara payara Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Payara Platform Payara Server (Admin Console modules) allows Remote Code Inclusion.This is… CWE-79
Cross-site Scripting 		CVE-2024-8215 2024-10-17 02:58 2024-10-9 Show GitHub Exploit DB Packet Storm
311595 6.7 MEDIUM
Local 		microsoft windows_server_2012
windows_10_1507
windows_server_2016
windows_server_2022_23h2
windows_server_2022
windows_11_24h2
windows_10_1607
windows_10_1809
windows_11_21h2
windows… 		Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability NVD-CWE-noinfo
CVE-2024-37976 2024-10-17 02:56 2024-10-9 Show GitHub Exploit DB Packet Storm
311596 8.8 HIGH
Network 		xerox freeflow_core Authenticated RCE via Path Traversal CWE-22
Path Traversal 		CVE-2024-47559 2024-10-17 02:53 2024-10-8 Show GitHub Exploit DB Packet Storm
311597 8.8 HIGH
Network 		xerox freeflow_core Authenticated RCE via Path Traversal CWE-22
Path Traversal 		CVE-2024-47558 2024-10-17 02:45 2024-10-8 Show GitHub Exploit DB Packet Storm
311598 7.8 HIGH
Local 		microsoft windows_server_2012
windows_10_1507
windows_server_2016
windows_server_2022_23h2
windows_server_2022
windows_11_24h2
windows_10_1607
windows_10_1809
windows_11_21h2
windows… 		Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability NVD-CWE-noinfo
CVE-2024-37982 2024-10-17 02:43 2024-10-9 Show GitHub Exploit DB Packet Storm
311599 5.5 MEDIUM
Local 		openatom openharmony in OpenHarmony v4.1.0 and prior versions allow a local attacker cause DOS through out-of-bounds write. CWE-787
 Out-of-bounds Write 		CVE-2024-45382 2024-10-17 02:43 2024-10-8 Show GitHub Exploit DB Packet Storm
311600 5.5 MEDIUM
Local 		openatom openharmony in OpenHarmony v4.1.0 and prior versions allow a local attacker cause DOS through improper input. NVD-CWE-noinfo
CVE-2024-43697 2024-10-17 02:42 2024-10-8 Show GitHub Exploit DB Packet Storm