Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
204061 4.3 警告
Network
Mozilla Foundation - Mozilla Firefox の Firefox ヘルスレポート機能における共有設定を変更される脆弱性 CWE-Other
その他
CVE-2016-2820 2016-05-6 18:04 2016-04-26 Show GitHub Exploit DB Packet Storm
204062 5.4 警告
Network
Mozilla Foundation - Mozilla Firefox の browser/components/extensions/ext-tabs.js におけるユニバーサルクロスサイトスクリプティング攻撃を実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-2817 2016-05-6 18:04 2016-04-26 Show GitHub Exploit DB Packet Storm
204063 6.5 警告
Network
Mozilla Foundation - Mozilla Firefox における Content Security Policy 保護メカニズムを回避される脆弱性 CWE-Other
その他
CVE-2016-2816 2016-05-6 18:04 2016-04-26 Show GitHub Exploit DB Packet Storm
204064 8.8 重要
Network
Mozilla Foundation - Mozilla Firefox の libstagefright におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-2814 2016-05-6 18:04 2016-04-26 Show GitHub Exploit DB Packet Storm
204065 6.5 警告
Network
Mozilla Foundation - Android 上で稼動する Mozilla Firefox におけるデバイスの物理環境に関する重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-2813 2016-05-6 18:04 2016-04-26 Show GitHub Exploit DB Packet Storm
204066 7.5 重要
Network
Mozilla Foundation - Mozilla Firefox の Service Worker サブシステムの ServiceWorkerManager クラスにおける任意のコードを実行される脆弱性 CWE-362
競合状態
CVE-2016-2812 2016-05-6 18:04 2016-04-26 Show GitHub Exploit DB Packet Storm
204067 8.8 重要
Network
Mozilla Foundation - Mozilla Firefox の Service Worker サブシステムの ServiceWorkerInfo クラスにおける任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2016-2811 2016-05-6 18:04 2016-04-26 Show GitHub Exploit DB Packet Storm
204068 5 警告
Local
Mozilla Foundation - Android 上で稼動する Mozilla Firefox における署名によるアクセス要求を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-2810 2016-05-6 18:03 2016-04-26 Show GitHub Exploit DB Packet Storm
204069 5.5 警告
Local
Mozilla Foundation - Windows 上で稼動する Mozilla Firefox の Maintenance Service アップデータにおける任意のファイルを削除される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-2809 2016-05-6 18:03 2016-04-26 Show GitHub Exploit DB Packet Storm
204070 7.5 重要
Network
Mozilla Foundation - Mozilla Firefox の JavaScript エンジンの watch の実装における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2016-2808 2016-05-6 18:03 2016-04-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
101 7.1 HIGH
Network
- - Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the /responses endpoint in the OpenAI router accepts any authenticated user and forw… New CWE-284
CWE-862
Improper Access Control
 Missing Authorization
CVE-2026-44556 2026-05-19 02:36 2026-05-16 Show GitHub Exploit DB Packet Storm
102 4.3 MEDIUM
Network
- - Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the _validate_collection_access function uses an incomplete allowlist that only enfo… New CWE-863
 Incorrect Authorization
CVE-2026-44557 2026-05-19 02:36 2026-05-16 Show GitHub Exploit DB Packet Storm
103 6.5 MEDIUM
Network
- - Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the POST /api/v1/models/import endpoint allows users with the workspace.models_impor… New CWE-283
CWE-862
 Unverified Ownership
 Missing Authorization
CVE-2026-44562 2026-05-19 02:36 2026-05-16 Show GitHub Exploit DB Packet Storm
104 5.4 MEDIUM
Network
- - Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the /api/generate, /api/embed, /api/embeddings, and /api/show endpoints accept any m… New CWE-862
 Missing Authorization
CVE-2026-44563 2026-05-19 02:36 2026-05-16 Show GitHub Exploit DB Packet Storm
105 5.4 MEDIUM
Network
- - Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the ydoc:document:update Socket.IO event handler checks whether the sender is a memb… New CWE-863
 Incorrect Authorization
CVE-2026-44564 2026-05-19 02:36 2026-05-16 Show GitHub Exploit DB Packet Storm
106 4.8 MEDIUM
Network
- - Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the AccountPending.svelte component renders the admin-configured "Pending User Overl… New CWE-79
Cross-site Scripting
CVE-2026-44568 2026-05-19 02:36 2026-05-16 Show GitHub Exploit DB Packet Storm
107 6.5 MEDIUM
Network
- - Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, Open WebUI allows admins to restrict which API endpoints an API key can access. When… New CWE-863
 Incorrect Authorization
CVE-2026-45339 2026-05-19 02:36 2026-05-16 Show GitHub Exploit DB Packet Storm
108 7.1 HIGH
Network
- - Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, a user just needs to use the API endpoint: /api/chat/completions with their own API … New CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2026-45349 2026-05-19 02:36 2026-05-16 Show GitHub Exploit DB Packet Storm
109 8.5 HIGH
Network
- - Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, validate_url() in backend/open_webui/retrieval/web/utils.py calls validators.ipv6(ip… New CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-45331 2026-05-19 02:36 2026-05-16 Show GitHub Exploit DB Packet Storm
110 7.1 HIGH
Network
- - Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, any authenticated user with low privileges can enumerate active background tasks acr… New CWE-862
 Missing Authorization
CVE-2026-45399 2026-05-19 02:36 2026-05-16 Show GitHub Exploit DB Packet Storm