Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 22, 2026, 4:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4251 6.5 警告
Network 		WWBN AVideo WWBNのAVideoにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-41062 2026-04-27 10:47 2026-04-21 Show GitHub Exploit DB Packet Storm
4252 5.4 警告
Network 		WWBN AVideo WWBNのAVideoにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-41063 2026-04-27 10:47 2026-04-21 Show GitHub Exploit DB Packet Storm
4253 9.3 緊急
Network 		WWBN AVideo WWBNのAVideoにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-41064 2026-04-27 10:47 2026-04-22 Show GitHub Exploit DB Packet Storm
4254 5 警告
Network 		OpenFGA OpenFGA
Helm Charts 		OpenFGAのHelm Charts等の複数製品における複数の脆弱性 CWE-706
CWE-863
CVE-2026-41131 2026-04-27 10:47 2026-04-22 Show GitHub Exploit DB Packet Storm
4255 8.8 重要
Network 		flowiseai flowise flowiseaiのflowiseにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2026-41137 2026-04-27 10:47 2026-04-23 Show GitHub Exploit DB Packet Storm
4256 8.8 重要
Network 		flowiseai flowise flowiseaiのflowiseにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2026-41138 2026-04-27 10:47 2026-04-23 Show GitHub Exploit DB Packet Storm
4257 7 重要
Network 		openremote openremote openremoteにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-41166 2026-04-27 10:47 2026-04-22 Show GitHub Exploit DB Packet Storm
4258 5.3 警告
Network 		pypdf project pypdf pypdf projectのpypdfにおける過度な反復の脆弱性 CWE-834
過度なイテレーション 		CVE-2026-41168 2026-04-27 10:46 2026-04-22 Show GitHub Exploit DB Packet Storm
4259 9.8 緊急
Network 		flowiseai flowise flowiseaiのflowiseにおける不完全なブラックリストに関する脆弱性 CWE-184
不完全なブラックリスト 		CVE-2026-41264 2026-04-27 10:46 2026-04-23 Show GitHub Exploit DB Packet Storm
4260 9.8 緊急
Network 		flowiseai flowise flowiseaiのflowiseにおけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション 		CVE-2026-41265 2026-04-27 10:46 2026-04-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
761 5.0 MEDIUM
Network 		openwebui open_webui Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, FolderForm uses model_config = ConfigDict(extra='allow'), which permits arbitrary fi… CWE-862
 Missing Authorization 		CVE-2026-44550 2026-05-19 12:12 2026-05-16 Show GitHub Exploit DB Packet Storm
762 5.4 MEDIUM
Network 		openwebui open_webui Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the ydoc:document:update Socket.IO event handler checks whether the sender is a memb… CWE-863
 Incorrect Authorization 		CVE-2026-44564 2026-05-19 12:11 2026-05-16 Show GitHub Exploit DB Packet Storm
763 5.4 MEDIUM
Network 		openwebui open_webui Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the /api/generate, /api/embed, /api/embeddings, and /api/show endpoints accept any m… CWE-862
 Missing Authorization 		CVE-2026-44563 2026-05-19 12:11 2026-05-16 Show GitHub Exploit DB Packet Storm
764 6.5 MEDIUM
Network 		openwebui open_webui Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the POST /api/v1/models/import endpoint allows users with the workspace.models_impor… CWE-283
CWE-862
 Unverified Ownership
 Missing Authorization 		CVE-2026-44562 2026-05-19 12:10 2026-05-16 Show GitHub Exploit DB Packet Storm
765 5.4 MEDIUM
Network 		openwebui open_webui Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the is_user_channel_member function checks whether a ChannelMember row exists but do… CWE-863
 Incorrect Authorization 		CVE-2026-44561 2026-05-19 12:10 2026-05-16 Show GitHub Exploit DB Packet Storm
766 6.5 MEDIUM
Network 		openwebui open_webui Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the type: "file" (non-full-context), type: "text" with collection_name, and bare col… CWE-862
 Missing Authorization 		CVE-2026-44560 2026-05-19 12:09 2026-05-16 Show GitHub Exploit DB Packet Storm
767 4.3 MEDIUM
Network 		openwebui open_webui Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the GET /api/v1/channels/{id}/members endpoint only checks membership for group and … CWE-862
 Missing Authorization 		CVE-2026-44559 2026-05-19 12:09 2026-05-16 Show GitHub Exploit DB Packet Storm
768 8.0 HIGH
Network 		openwebui open_webui Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, any authenticated user can permanently delete files owned by other users via DELETE … CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2026-45671 2026-05-19 12:08 2026-05-16 Show GitHub Exploit DB Packet Storm
769 7.1 HIGH
Network 		openwebui open_webui Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, any authenticated user with low privileges can enumerate active background tasks acr… CWE-862
 Missing Authorization 		CVE-2026-45399 2026-05-19 12:08 2026-05-16 Show GitHub Exploit DB Packet Storm
770 6.5 MEDIUM
Network 		openwebui open_webui Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, Open WebUI allows admins to restrict which API endpoints an API key can access. When… CWE-863
 Incorrect Authorization 		CVE-2026-45339 2026-05-19 12:07 2026-05-16 Show GitHub Exploit DB Packet Storm