Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
641 5.4 警告
Network
openwebui open webui openwebuiのopen webuiにおけるクロスサイトスクリプティングの脆弱性 CWE-80
クロスサイトスクリプティング (Basic XSS)
CVE-2026-45346 2026-05-20 13:26 2026-05-15 Show GitHub Exploit DB Packet Storm
642 5.4 警告
Network
openwebui open webui openwebuiのopen webuiにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ
CVE-2026-45347 2026-05-20 13:26 2026-05-15 Show GitHub Exploit DB Packet Storm
643 7.1 重要
Network
openwebui open webui openwebuiのopen webuiにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避
CVE-2026-45349 2026-05-20 13:26 2026-05-15 Show GitHub Exploit DB Packet Storm
644 7.1 重要
Network
openwebui open webui openwebuiのopen webuiにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如
CVE-2026-45350 2026-05-20 13:26 2026-05-15 Show GitHub Exploit DB Packet Storm
645 6.5 警告
Network
openwebui open webui openwebuiのopen webuiにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい
CVE-2026-45351 2026-05-20 13:26 2026-05-15 Show GitHub Exploit DB Packet Storm
646 5.4 警告
Network
openwebui open webui openwebuiのopen webuiにおける認可に関する脆弱性 CWE-285
不適切な認可
CVE-2026-45365 2026-05-20 13:26 2026-05-15 Show GitHub Exploit DB Packet Storm
647 4.3 警告
Network
openwebui open webui openwebuiのopen webuiにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避
CVE-2026-45385 2026-05-20 13:26 2026-05-15 Show GitHub Exploit DB Packet Storm
648 4.3 警告
Network
openwebui open webui openwebuiのopen webuiにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避
CVE-2026-45386 2026-05-20 13:26 2026-05-15 Show GitHub Exploit DB Packet Storm
649 4.3 警告
Network
openwebui open webui openwebuiのopen webuiにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい
CVE-2026-45387 2026-05-20 13:26 2026-05-15 Show GitHub Exploit DB Packet Storm
650 7.2 重要
Network
openwebui open webui openwebuiのopen webuiにおける複数の脆弱性 CWE-269
CWE-862
CVE-2026-45395 2026-05-20 13:26 2026-05-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
311381 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix error path in multi-packet WQE transmit Remove the erroneous unmap in case no DMA mapping was established The mult… CWE-755
 Improper Handling of Exceptional Conditions
CVE-2024-50001 2024-10-31 06:59 2024-10-22 Show GitHub Exploit DB Packet Storm
311382 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: static_call: Handle module init failure correctly in static_call_del_module() Module insertion invokes static_call_add_module() t… CWE-755
 Improper Handling of Exceptional Conditions
CVE-2024-50002 2024-10-31 06:57 2024-10-22 Show GitHub Exploit DB Packet Storm
311383 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit() Syzkaller reported BUG as follows: BUG: sleeping f… NVD-CWE-noinfo
CVE-2022-49033 2024-10-31 06:50 2024-10-22 Show GitHub Exploit DB Packet Storm
311384 7.8 HIGH
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: bna: adjust 'name' buf size of bna_tcb and bna_ccb structures To have enough space to write all possible sprintf() args. Currentl… CWE-787
 Out-of-bounds Write
CVE-2024-43839 2024-10-31 06:49 2024-08-17 Show GitHub Exploit DB Packet Storm
311385 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: virtio_net: Fix napi_skb_cache_put warning After the commit bdacf3e34945 ("net: Use nested-BH locking for napi_alloc_cache.") was… NVD-CWE-noinfo
CVE-2024-43835 2024-10-31 06:45 2024-08-17 Show GitHub Exploit DB Packet Storm
311386 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: xdp: fix invalid wait context of page_pool_destroy() If the driver uses a page pool, it creates a page pool with page_pool_create… NVD-CWE-noinfo
CVE-2024-43834 2024-10-31 06:44 2024-08-17 Show GitHub Exploit DB Packet Storm
311387 5.5 MEDIUM
Local
apple macos An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. Parsing a file may lead to disclosure of user information. CWE-125
Out-of-bounds Read
CVE-2024-44281 2024-10-31 06:35 2024-10-29 Show GitHub Exploit DB Packet Storm
311388 4.6 MEDIUM
Physics
apple iphone_os
ipados
watchos
The issue was addressed with improved authentication. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, watchOS 11.1, iOS 18.1 and iPadOS 18.1. An attacker with physical access to a locked device … NVD-CWE-noinfo
CVE-2024-44274 2024-10-31 06:35 2024-10-29 Show GitHub Exploit DB Packet Storm
311389 5.5 MEDIUM
Local
apple visionos This issue was addressed with improved redaction of sensitive information. This issue is fixed in visionOS 2.1. A user may be able to view sensitive user information. NVD-CWE-noinfo
CVE-2024-44262 2024-10-31 06:35 2024-10-29 Show GitHub Exploit DB Packet Storm
311390 5.5 MEDIUM
Local
apple macos
ipados
iphone_os
watchos
This issue was addressed with improved redaction of sensitive information. This issue is fixed in watchOS 11.1, macOS Ventura 13.7.1, macOS Sonoma 14.7.1, iOS 18.1 and iPadOS 18.1. An app may be able… NVD-CWE-noinfo
CVE-2024-44254 2024-10-31 06:35 2024-10-29 Show GitHub Exploit DB Packet Storm