Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 17, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3171	8.7	重要 Network	openwebui	open webui	openwebuiのopen webuiにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-44549	2026-05-21 10:51	2026-05-15	Show	GitHub Exploit DB Packet Storm

3172	8.1	重要 Network	openwebui	open webui	openwebuiのopen webuiにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-44565	2026-05-21 10:51	2026-05-15	Show	GitHub Exploit DB Packet Storm

3173	9.8	緊急 Network	openwebui	open webui	openwebuiのopen webuiにおける複数の脆弱性	CWE-22 CWE-434	CVE-2026-44566	2026-05-21 10:51	2026-05-15	Show	GitHub Exploit DB Packet Storm

3174	7.3	重要 Network	openwebui	open webui	openwebuiのopen webuiにおける複数の脆弱性	CWE-602 CWE-863	CVE-2026-44567	2026-05-21 10:51	2026-05-15	Show	GitHub Exploit DB Packet Storm

3175	7.1	重要 Network	openwebui	open webui	openwebuiのopen webuiにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-44569	2026-05-21 10:51	2026-05-15	Show	GitHub Exploit DB Packet Storm

3176	9.9	緊急 Network	traefik	traefik	traefikにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-44774	2026-05-21 10:51	2026-05-15	Show	GitHub Exploit DB Packet Storm

3177	6.5	警告 Network	Apache Software Foundation	Apache OFBiz	Apache Software FoundationのApache OFBizにおける認可に関する脆弱性	CWE-285 不適切な認可	CVE-2026-45187	2026-05-21 10:50	2026-05-19	Show	GitHub Exploit DB Packet Storm

3178	5.4	警告 Network	openwebui	open webui	openwebuiのopen webuiにおける動的に決定されたオブジェクト属性の不適切に制御された変更に関する脆弱性	CWE-915 動的に決定されたオブジェクト属性の不適切に制御された変更	CVE-2026-45396	2026-05-21 10:50	2026-05-15	Show	GitHub Exploit DB Packet Storm

3179	5.3	警告 Network	openwebui	open webui	openwebuiのopen webuiにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-45397	2026-05-21 10:50	2026-05-15	Show	GitHub Exploit DB Packet Storm

3180	7.5	重要 Network	openwebui	open webui	openwebuiのopen webuiにおけるユーザ制御の鍵による認証回避に関する脆弱性	CWE-639 ユーザ制御の鍵による認証回避	CVE-2026-45398	2026-05-21 10:50	2026-05-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
306081	-	google apple	chrome iphone_os itunes safari	Google Chrome before 16.0.912.63 does not properly parse SVG documents, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.	CWE-125 Out-of-bounds Read	CVE-2011-3908	2024-11-21 10:31	2011-12-14	Show	GitHub Exploit DB Packet Storm

306082	-	google	chrome	The view-source feature in Google Chrome before 16.0.912.63 allows remote attackers to spoof the URL bar via unspecified vectors.	CWE-20 Improper Input Validation	CVE-2011-3907	2024-11-21 10:31	2011-12-14	Show	GitHub Exploit DB Packet Storm

306083	-	google	chrome	The PDF parser in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.	CWE-125 Out-of-bounds Read	CVE-2011-3906	2024-11-21 10:31	2011-12-14	Show	GitHub Exploit DB Packet Storm

306084	-	google debian redhat	chrome debian_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation enterprise_linux_server_eus	libxml2, as used in Google Chrome before 16.0.912.63, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.	CWE-125 Out-of-bounds Read	CVE-2011-3905	2024-11-21 10:31	2011-12-14	Show	GitHub Exploit DB Packet Storm

306085	-	google	chrome	Use-after-free vulnerability in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to bidirectional te…	CWE-416 Use After Free	CVE-2011-3904	2024-11-21 10:31	2011-12-14	Show	GitHub Exploit DB Packet Storm

306086	-	google	chrome	Google Chrome before 16.0.912.63 does not properly perform regex matching, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.	CWE-697 Incorrect Comparison	CVE-2011-3903	2024-11-21 10:31	2011-12-14	Show	GitHub Exploit DB Packet Storm

306087	-	gnu	gnutls	Buffer overflow in the gnutls_session_get_data function in lib/gnutls_session.c in GnuTLS 2.12.x before 2.12.14 and 3.x before 3.0.7, when used on a client that performs nonstandard session resumptio…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2011-4128	2024-11-21 10:31	2011-12-9	Show	GitHub Exploit DB Packet Storm

306088	-	ca	siteminder	Cross-site scripting (XSS) vulnerability in login.fcc in CA SiteMinder R6 SP6 before CR7 and R12 SP3 before CR8 allows remote attackers to inject arbitrary web script or HTML via the postpreservation…	CWE-79 Cross-site Scripting	CVE-2011-4054	2024-11-21 10:31	2011-12-8	Show	GitHub Exploit DB Packet Storm

306089	-	proftpd	proftpd	Use-after-free vulnerability in the Response API in ProFTPD before 1.3.3g allows remote authenticated users to execute arbitrary code via vectors involving an error that occurs after an FTP data tran…	CWE-399 Resource Management Errors	CVE-2011-4130	2024-11-21 10:31	2011-12-6	Show	GitHub Exploit DB Packet Storm

306090	-	hp	protecttools_device_access_manager	The (1) AddUser, (2) AddUserEx, (3) RemoveUser, (4) RemoveUserByGuide, (5) RemoveUserEx, and (6) RemoveUserRegardless methods in HP Protect Tools Device Access Manager (PTDAM) before 6.1.0.1 allow re…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2011-4162	2024-11-21 10:31	2011-12-5	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed