Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
222281 4.3 警告 ジュニパーネットワークス - Juniper IDP の Web 管理コンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-6957 2013-12-17 14:10 2013-12-11 Show GitHub Exploit DB Packet Storm
222282 2.1 注意 ジュニパーネットワークス - IVE OS の Juniper Junos Pulse Secure Access Service におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-6956 2013-12-17 14:09 2013-12-11 Show GitHub Exploit DB Packet Storm
222283 7.5 危険 InstantSoft - InstantSoft InstantCMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2013-6839 2013-12-17 12:26 2013-12-11 Show GitHub Exploit DB Packet Storm
222284 6.8 警告 ネットギア - NETGEAR ReadyNAS RAIDiator の frontview/lib/np_handler.pl におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2013-2752 2013-12-17 10:21 2013-07-12 Show GitHub Exploit DB Packet Storm
222285 10 危険 ネットギア - NETGEAR ReadyNAS RAIDiator の FrontView Web インターフェースにおける任意の Perl コードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2013-2751 2013-12-17 10:19 2013-07-12 Show GitHub Exploit DB Packet Storm
222286 2.1 注意 ZippyYum - ZippyYum Subway Ordering for California における重要な情報を取得される脆弱性 CWE-310
暗号の問題
CVE-2013-6986 2013-12-17 10:03 2013-12-7 Show GitHub Exploit DB Packet Storm
222287 4 警告 Mod Nss Project
レッドハット
- mod_nss におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-4566 2013-12-17 10:02 2013-12-3 Show GitHub Exploit DB Packet Storm
222288 5 警告 GNU Project - GNU C Library の sysdeps/posix/getaddrinfo.c の getaddrinfo 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2013-4458 2013-12-16 19:58 2013-10-22 Show GitHub Exploit DB Packet Storm
222289 9.3 危険 IcoFX - IcoFX におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2013-4988 2013-12-16 19:41 2013-12-10 Show GitHub Exploit DB Packet Storm
222290 7.5 危険 Project Sprouts - Ruby 用 sprout gem の archive_unpacker.rb における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2013-6421 2013-12-16 19:33 2013-12-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
831 7.0 HIGH
Local
vim vim Vim is an open source, command line text editor. Prior to 9.2.0479, a command injection vulnerability exists in tar#Vimuntar() in runtime/autoload/tar.vim when decompressing .tgz archives on Unix-lik… CWE-78
CWE-88
OS Command 
Argument Injection
CVE-2026-46483 2026-05-19 21:27 2026-05-16 Show GitHub Exploit DB Packet Storm
832 5.8 MEDIUM
Network
traefik traefik Traefik is an HTTP reverse proxy and load balancer. Prior to 2.11.44, 3.6.15, and 3.7.0-rc.3, there is an information disclosure vulnerability in Traefik's errors (custom error pages) middleware. Whe… CWE-201
 Insertion of Sensitive Information Into Sent Data
CVE-2026-41181 2026-05-19 21:24 2026-05-16 Show GitHub Exploit DB Packet Storm
833 9.9 CRITICAL
Network
traefik traefik Traefik is an HTTP reverse proxy and load balancer. Prior to 2.11.46, 3.6.17, and 3.7.1, Traefik's Kubernetes Gateway API provider allows a tenant with HTTPRoute creation permissions to expose the RE… CWE-284
Improper Access Control
CVE-2026-44774 2026-05-19 21:22 2026-05-16 Show GitHub Exploit DB Packet Storm
834 5.4 MEDIUM
Network
openwebui open_webui Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.5, the POST /api/v1/evaluations/feedback endpoint in Open WebUI v0.9.2 is vulnerable to… CWE-915
 Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-45396 2026-05-19 21:20 2026-05-16 Show GitHub Exploit DB Packet Storm
835 5.3 MEDIUM
Network
openwebui open_webui Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.5, GET /api/v1/retrieval/ returns live RAG pipeline configuration to any unauthenticate… CWE-306
Missing Authentication for Critical Function
CVE-2026-45397 2026-05-19 21:19 2026-05-16 Show GitHub Exploit DB Packet Storm
836 7.5 HIGH
Network
openwebui open_webui Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.5, _validate_collection_access() checks the user-memory-* and file-* collection name pr… CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2026-45398 2026-05-19 21:18 2026-05-16 Show GitHub Exploit DB Packet Storm
837 - - - In the Linux kernel, the following vulnerability has been resolved: lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() Yiming reports an integer underflow in mpi_read_raw_from_sgl() … - CVE-2026-43492 2026-05-19 21:16 2026-05-19 Show GitHub Exploit DB Packet Storm
838 - - - In the Linux kernel, the following vulnerability has been resolved: net: qrtr: ns: Limit the maximum server registration per node Current code does no bound checking on the number of servers added … - CVE-2026-43491 2026-05-19 21:16 2026-05-19 Show GitHub Exploit DB Packet Storm
839 8.5 HIGH
Network
openwebui open_webui Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.5, a parsing difference between the urlparse and requests libraries led to an SSRF bypa… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-45400 2026-05-19 21:08 2026-05-16 Show GitHub Exploit DB Packet Storm
840 8.5 HIGH
Network
openwebui open_webui Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.5, the validate_url() function in backend/open_webui/retrieval/web/utils.py only valida… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-45401 2026-05-19 21:07 2026-05-16 Show GitHub Exploit DB Packet Storm