Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
206541 4.3 警告 シスコシステムズ - Cisco Unity Connection の管理インターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2015-6390 2015-12-4 11:20 2015-12-2 Show GitHub Exploit DB Packet Storm
206542 7.2 危険 シスコシステムズ - Cisco ASR 1000 デバイス上で稼動する Cisco IOS XE におけるライセンス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2015-6383 2015-12-4 11:19 2015-11-30 Show GitHub Exploit DB Packet Storm
206543 9.3 危険 マカフィー - McAfee SIEM 製品における認証を回避される脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2015-8024 2015-12-4 10:18 2015-10-19 Show GitHub Exploit DB Packet Storm
206544 7.5 危険 pcre.org - PCRE におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2015-8395 2015-12-3 16:35 2015-11-23 Show GitHub Exploit DB Packet Storm
206545 7.5 危険 pcre.org - PCRE におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2015-8394 2015-12-3 16:35 2015-11-23 Show GitHub Exploit DB Packet Storm
206546 5 警告 pcre.org - PCRE の pcregrep における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2015-8393 2015-12-3 16:35 2015-11-23 Show GitHub Exploit DB Packet Storm
206547 7.5 危険 pcre.org - PCRE におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2015-8392 2015-12-3 16:35 2015-11-23 Show GitHub Exploit DB Packet Storm
206548 9 危険 pcre.org - PCRE の pcre_compile.c の pcre_compile 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2015-8391 2015-12-3 16:34 2015-11-23 Show GitHub Exploit DB Packet Storm
206549 7.5 危険 pcre.org - PCRE におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2015-8390 2015-12-3 16:34 2015-11-23 Show GitHub Exploit DB Packet Storm
206550 7.5 危険 pcre.org - PCRE におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2015-8389 2015-12-3 16:34 2015-11-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
501 5.4 MEDIUM
Network 		- - Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.3, his advisory tracks a regression of the original Excel-preview XSS (CVE-2026-44549).… New CWE-79
Cross-site Scripting 		CVE-2026-45318 2026-05-19 02:36 2026-05-16 Show GitHub Exploit DB Packet Storm
502 7.7 HIGH
Network 		- - Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, a Server-Side Request Forgery (SSRF) vulnerability exists in _process_picture_url() … New CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-45338 2026-05-19 02:36 2026-05-16 Show GitHub Exploit DB Packet Storm
503 4.6 MEDIUM
Network 		- - Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.3, an application-wide Cross-Site Request Forgery (CSRF) vulnerability was found Open-W… New CWE-20
CWE-352
 Improper Input Validation 
 Origin Validation Error 		CVE-2026-45317 2026-05-19 02:36 2026-05-16 Show GitHub Exploit DB Packet Storm
504 6.5 MEDIUM
Network 		- - Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.5.7, a user can modify another user's model even if its visibility is set to Private. By … New CWE-285
Improper Authorization 		CVE-2026-45345 2026-05-19 02:36 2026-05-16 Show GitHub Exploit DB Packet Storm
505 - - - Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.6.31, there is a Cross-Site Scripting vulnerability in Open WebUI SVG renderer implementa… New CWE-80
Basic XSS 		CVE-2026-45346 2026-05-19 02:36 2026-05-16 Show GitHub Exploit DB Packet Storm
506 4.3 MEDIUM
Network 		- - Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.5.11, there is a blind server side request forgery (SSRF) via the PDF generate function. … New CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-45347 2026-05-19 02:36 2026-05-16 Show GitHub Exploit DB Packet Storm
507 7.1 HIGH
Network 		- - Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.6, there is a vulnerability in chat completion API, which allows attackers to bypass to… New CWE-862
 Missing Authorization 		CVE-2026-45350 2026-05-19 02:36 2026-05-16 Show GitHub Exploit DB Packet Storm
508 6.5 MEDIUM
Network 		- - Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.9, when a regular user [non-admin] logs into the application, a http://IP:8080/api/mode… New CWE-200
Information Exposure 		CVE-2026-45351 2026-05-19 02:36 2026-05-16 Show GitHub Exploit DB Packet Storm
509 4.3 MEDIUM
Network 		dovecot
open-xchange 		dovecot Attacker can use the IMAP SETACL command to inject the anyone permission to user's dovecot-acl file even if imap_acl_allow_anyone=no. This causes folders to be spammed to all users. The impact is lim… Update CWE-284
NVD-CWE-noinfo
Improper Access Control 		CVE-2026-40020 2026-05-19 02:36 2026-05-12 Show GitHub Exploit DB Packet Storm
510 5.3 MEDIUM
Adjacent 		dovecot
open-xchange 		dovecot Attacker can use a specially crafted base64 exchange between Dovecot and Client to fake SCRAM TLS channel binding. This requires that the attacker is able to position itself between Dovecot and the c… Update CWE-99
Resource Injection 		CVE-2026-33603 2026-05-19 02:35 2026-05-12 Show GitHub Exploit DB Packet Storm