Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3341 4.8 警告
Network 		openwebui open webui openwebuiのopen webuiにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-44568 2026-05-20 13:27 2026-05-15 Show GitHub Exploit DB Packet Storm
3342 8.3 重要
Network 		openwebui open webui openwebuiのopen webuiにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-44570 2026-05-20 13:27 2026-05-15 Show GitHub Exploit DB Packet Storm
3343 6.5 警告
Network 		openwebui open webui openwebuiのopen webuiにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-44571 2026-05-20 13:27 2026-05-15 Show GitHub Exploit DB Packet Storm
3344 7.3 重要
Network 		openwebui open webui openwebuiのopen webuiにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-44721 2026-05-20 13:27 2026-05-15 Show GitHub Exploit DB Packet Storm
3345 5.5 警告
Local 		Vim Vim Vimにおける複数の脆弱性 CWE-122
CWE-190
CVE-2026-45130 2026-05-20 13:27 2026-05-8 Show GitHub Exploit DB Packet Storm
3346 5.4 警告
Network 		openwebui open webui openwebuiのopen webuiにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-45299 2026-05-20 13:27 2026-05-15 Show GitHub Exploit DB Packet Storm
3347 8.1 重要
Network 		openwebui open webui openwebuiのopen webuiにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-45301 2026-05-20 13:27 2026-05-15 Show GitHub Exploit DB Packet Storm
3348 7.7 重要
Network 		openwebui open webui openwebuiのopen webuiにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-45303 2026-05-20 13:27 2026-05-15 Show GitHub Exploit DB Packet Storm
3349 6.1 警告
Network 		openwebui open webui openwebuiのopen webuiにおける代替 XSS 構文の不適切な無効化に関する脆弱性 CWE-87
代替 XSS 構文の不適切な無効化 		CVE-2026-45314 2026-05-20 13:26 2026-05-15 Show GitHub Exploit DB Packet Storm
3350 8.7 重要
Network 		openwebui open webui openwebuiのopen webuiにおける複数の脆弱性 CWE-434
CWE-646
CWE-79
CVE-2026-45315 2026-05-20 13:26 2026-05-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 19, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
305791 - opera opera_browser Opera 11.60 and earlier does not prevent capture of data about the times of Same Origin Policy violations during IFRAME loading attempts, which makes it easier for remote attackers to determine wheth… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2011-4690 2024-11-21 10:32 2011-12-8 Show GitHub Exploit DB Packet Storm
305792 - microsoft internet_explorer Microsoft Internet Explorer 6 through 9 does not prevent capture of data about the times of Same Origin Policy violations during IFRAME loading attempts, which makes it easier for remote attackers to… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2011-4689 2024-11-21 10:32 2011-12-8 Show GitHub Exploit DB Packet Storm
305793 - mozilla firefox Mozilla Firefox 8.0.1 and earlier does not prevent capture of data about the times of Same Origin Policy violations during IFRAME loading attempts, which makes it easier for remote attackers to deter… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2011-4688 2024-11-21 10:32 2011-12-8 Show GitHub Exploit DB Packet Storm
305794 - opera opera_browser Opera before 11.60 allows remote attackers to cause a denial of service (CPU and memory consumption) via unspecified content on a web page, as demonstrated by a page under the cisco.com home page. CWE-399
 Resource Management Errors 		CVE-2011-4687 2024-11-21 10:32 2011-12-8 Show GitHub Exploit DB Packet Storm
305795 - opera opera_browser Unspecified vulnerability in the Web Workers implementation in Opera before 11.60 allows remote attackers to cause a denial of service (application crash) via unknown vectors. NVD-CWE-noinfo
CVE-2011-4686 2024-11-21 10:32 2011-12-8 Show GitHub Exploit DB Packet Storm
305796 - opera opera_browser Dragonfly in Opera before 11.60 allows remote attackers to cause a denial of service (application crash) via unspecified content on a web page, as demonstrated by forbes.com. CWE-20
 Improper Input Validation  		CVE-2011-4685 2024-11-21 10:32 2011-12-8 Show GitHub Exploit DB Packet Storm
305797 - opera opera_browser Opera before 11.60 does not properly handle certificate revocation, which has unspecified impact and remote attack vectors related to "corner cases." CWE-310
Cryptographic Issues 		CVE-2011-4684 2024-11-21 10:32 2011-12-8 Show GitHub Exploit DB Packet Storm
305798 - opera opera_browser Unspecified vulnerability in Opera before 11.60 has unknown impact and attack vectors, related to a "moderately severe issue." NVD-CWE-noinfo
CVE-2011-4683 2024-11-21 10:32 2011-12-8 Show GitHub Exploit DB Packet Storm
305799 - opera opera_browser The JavaScript engine in Opera before 11.60 does not properly implement the in operator, which allows remote attackers to bypass the Same Origin Policy via vectors related to variables on different w… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2011-4682 2024-11-21 10:32 2011-12-8 Show GitHub Exploit DB Packet Storm
305800 - opera opera_browser Opera before 11.60 does not properly consider the number of . (dot) characters that conventionally exist in domain names of different top-level domains, which allows remote attackers to bypass the Sa… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2011-4681 2024-11-21 10:32 2011-12-8 Show GitHub Exploit DB Packet Storm