Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
206541 4.3 警告 シスコシステムズ - Cisco Unity Connection の管理インターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2015-6390 2015-12-4 11:20 2015-12-2 Show GitHub Exploit DB Packet Storm
206542 7.2 危険 シスコシステムズ - Cisco ASR 1000 デバイス上で稼動する Cisco IOS XE におけるライセンス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2015-6383 2015-12-4 11:19 2015-11-30 Show GitHub Exploit DB Packet Storm
206543 9.3 危険 マカフィー - McAfee SIEM 製品における認証を回避される脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2015-8024 2015-12-4 10:18 2015-10-19 Show GitHub Exploit DB Packet Storm
206544 7.5 危険 pcre.org - PCRE におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2015-8395 2015-12-3 16:35 2015-11-23 Show GitHub Exploit DB Packet Storm
206545 7.5 危険 pcre.org - PCRE におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2015-8394 2015-12-3 16:35 2015-11-23 Show GitHub Exploit DB Packet Storm
206546 5 警告 pcre.org - PCRE の pcregrep における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2015-8393 2015-12-3 16:35 2015-11-23 Show GitHub Exploit DB Packet Storm
206547 7.5 危険 pcre.org - PCRE におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2015-8392 2015-12-3 16:35 2015-11-23 Show GitHub Exploit DB Packet Storm
206548 9 危険 pcre.org - PCRE の pcre_compile.c の pcre_compile 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2015-8391 2015-12-3 16:34 2015-11-23 Show GitHub Exploit DB Packet Storm
206549 7.5 危険 pcre.org - PCRE におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2015-8390 2015-12-3 16:34 2015-11-23 Show GitHub Exploit DB Packet Storm
206550 7.5 危険 pcre.org - PCRE におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2015-8389 2015-12-3 16:34 2015-11-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
241 4.3 MEDIUM
Network 		- - Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the _validate_collection_access function uses an incomplete allowlist that only enfo… New CWE-863
 Incorrect Authorization 		CVE-2026-44557 2026-05-16 05:16 2026-05-16 Show GitHub Exploit DB Packet Storm
242 7.1 HIGH
Network 		- - Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the /responses endpoint in the OpenAI router accepts any authenticated user and forw… New CWE-284
CWE-862
Improper Access Control
 Missing Authorization 		CVE-2026-44556 2026-05-16 05:16 2026-05-16 Show GitHub Exploit DB Packet Storm
243 8.1 HIGH
Network 		- - Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the POST /api/v1/retrieval/process/web endpoint accepts a user-supplied collection_n… New CWE-862
 Missing Authorization 		CVE-2026-44554 2026-05-16 05:16 2026-05-16 Show GitHub Exploit DB Packet Storm
244 8.7 HIGH
Network 		- - Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the tool_servers and terminal_servers keys in utils/tools.py do use a prefix. When t… New CWE-668
 Exposure of Resource to Wrong Sphere 		CVE-2026-44552 2026-05-16 05:16 2026-05-16 Show GitHub Exploit DB Packet Storm
245 9.1 CRITICAL
Network 		- - Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the LDAP authentication endpoint does not validate that the submitted password is no… New CWE-287
Improper Authentication 		CVE-2026-44551 2026-05-16 05:16 2026-05-16 Show GitHub Exploit DB Packet Storm
246 5.0 MEDIUM
Network 		- - Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, FolderForm uses model_config = ConfigDict(extra='allow'), which permits arbitrary fi… New CWE-862
 Missing Authorization 		CVE-2026-44550 2026-05-16 05:16 2026-05-16 Show GitHub Exploit DB Packet Storm
247 6.1 MEDIUM
Network 		- - CubeCart is an ecommerce software solution. Prior to 6.7.0, an unauthenticated Reflected XSS vulnerability exists in the CubeCart v6.x search feature. Due to a logic flaw in classes/catalogue.class.p… Update CWE-79
Cross-site Scripting 		CVE-2026-44376 2026-05-16 05:16 2026-05-14 Show GitHub Exploit DB Packet Storm
248 - - - ORSEE (Online Recruitment System for Economic Experiments) 3.1.0 contains an authenticated Remote Code Execution vulnerability in the participant profile field processing subsystem. Certain field con… New - CVE-2025-67031 2026-05-16 05:16 2026-05-16 Show GitHub Exploit DB Packet Storm
249 5.3 MEDIUM
Network 		fleetdm fleet Fleet is open source device management software. Prior to version 4.80.1, Fleet trusted client-supplied IP address headers when determining the source IP for incoming requests. This allowed authentic… New CWE-290
 Authentication Bypass by Spoofing 		CVE-2026-24000 2026-05-16 05:05 2026-05-15 Show GitHub Exploit DB Packet Storm
250 9.8 CRITICAL
Network 		mozilla firefox Sandbox escape in the Profile Backup component. This vulnerability was fixed in Firefox 150.0.3. Update CWE-693
 Protection Mechanism Failure 		CVE-2026-8401 2026-05-16 05:05 2026-05-13 Show GitHub Exploit DB Packet Storm