Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
204011 4.6 警告
Physics
Linux - Linux Kernel の ext4 の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2015-8324 2016-05-11 16:56 2015-09-29 Show GitHub Exploit DB Packet Storm
204012 7.8 重要
Local
Linux - Linux Kernel の net/core/datagram.c の skb_copy_and_csum_datagram_iovec 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2015-8019 2016-05-11 16:56 2015-10-30 Show GitHub Exploit DB Packet Storm
204013 5.5 警告
Local
Linux - Linux Kernel の fs_pin の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2015-4178 2016-05-11 16:56 2015-06-6 Show GitHub Exploit DB Packet Storm
204014 5.5 警告
Local
Linux - Linux Kernel の fs/namespace.c の collect_mounts 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2015-4177 2016-05-11 16:56 2015-06-6 Show GitHub Exploit DB Packet Storm
204015 4.7 警告
Local
Linux - Linux Kernel の drivers/tty/tty_ldsem.c の ldsem_cmpxchg 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-362
競合状態
CVE-2015-4170 2016-05-11 16:56 2015-05-6 Show GitHub Exploit DB Packet Storm
204016 5.5 警告
Local
Linux - Linux Kernel の arch/x86/include/asm/xsave.h の xsave/xrstor の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2015-2672 2016-05-11 16:56 2015-03-18 Show GitHub Exploit DB Packet Storm
204017 5.5 警告
Local
Linux - Linux Kernel の net/netfilter/nf_tables_api.c の nft_flush_table 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2015-1573 2016-05-11 16:56 2015-01-29 Show GitHub Exploit DB Packet Storm
204018 5.5 警告
Local
Linux - Linux Kernel の VFS サブシステムにおけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2015-1350 2016-05-11 16:56 2015-01-17 Show GitHub Exploit DB Packet Storm
204019 7.8 重要
Local
Linux - Linux Kernel の fs/aio.c における整数オーバーフローの脆弱性 CWE-Other
その他
CVE-2012-6701 2016-05-11 16:56 2012-06-1 Show GitHub Exploit DB Packet Storm
204020 7.8 重要
Local
Linux - Linux Kernel の net/netlink/af_netlink.c の netlink_sendmsg 関数における脆弱性 CWE-Other
その他
CVE-2012-6689 2016-05-11 16:56 2012-10-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
331 6.5 MEDIUM
Network
openwebui open_webui Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the type: "file" (non-full-context), type: "text" with collection_name, and bare col… New CWE-862
 Missing Authorization
CVE-2026-44560 2026-05-19 12:09 2026-05-16 Show GitHub Exploit DB Packet Storm
332 4.3 MEDIUM
Network
openwebui open_webui Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the GET /api/v1/channels/{id}/members endpoint only checks membership for group and … New CWE-862
 Missing Authorization
CVE-2026-44559 2026-05-19 12:09 2026-05-16 Show GitHub Exploit DB Packet Storm
333 8.0 HIGH
Network
openwebui open_webui Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, any authenticated user can permanently delete files owned by other users via DELETE … New CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2026-45671 2026-05-19 12:08 2026-05-16 Show GitHub Exploit DB Packet Storm
334 7.1 HIGH
Network
openwebui open_webui Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, any authenticated user with low privileges can enumerate active background tasks acr… New CWE-862
 Missing Authorization
CVE-2026-45399 2026-05-19 12:08 2026-05-16 Show GitHub Exploit DB Packet Storm
335 6.5 MEDIUM
Network
openwebui open_webui Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, Open WebUI allows admins to restrict which API endpoints an API key can access. When… New CWE-863
 Incorrect Authorization
CVE-2026-45339 2026-05-19 12:07 2026-05-16 Show GitHub Exploit DB Packet Storm
336 8.5 HIGH
Network
openwebui open_webui Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, validate_url() in backend/open_webui/retrieval/web/utils.py calls validators.ipv6(ip… New CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-45331 2026-05-19 12:06 2026-05-16 Show GitHub Exploit DB Packet Storm
337 4.8 MEDIUM
Network
openwebui open_webui Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the AccountPending.svelte component renders the admin-configured "Pending User Overl… New CWE-79
Cross-site Scripting
CVE-2026-44568 2026-05-19 12:06 2026-05-16 Show GitHub Exploit DB Packet Storm
338 4.3 MEDIUM
Network
openwebui open_webui Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.5, when setting model permissions so that a group has read access to it, intending for … New CWE-200
Information Exposure
CVE-2026-45387 2026-05-19 12:05 2026-05-16 Show GitHub Exploit DB Packet Storm
339 7.2 HIGH
Network
openwebui open_webui Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.5, the tool update endpoint (POST /api/v1/tools/id/{id}/update) is missing the workspac… New CWE-269
CWE-862
 Improper Privilege Management
 Missing Authorization
CVE-2026-45395 2026-05-19 12:05 2026-05-16 Show GitHub Exploit DB Packet Storm
340 4.3 MEDIUM
Network
openwebui open_webui Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.5, an IDOR vulnerability exists in the Channels feature of Open WebUI, allowing any cha… New CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2026-45385 2026-05-19 10:45 2026-05-16 Show GitHub Exploit DB Packet Storm