|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
Update Date":May 27, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 631 | 7.7 |
重要
Network |
openwebui | open webui | openwebuiのopen webuiにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング(XSS) |
CVE-2026-45303 | 2026-05-20 13:27 | 2026-05-15 | Show | GitHub Exploit DB Packet Storm |
| 632 | 6.1 |
警告
Network |
openwebui | open webui | openwebuiのopen webuiにおける代替 XSS 構文の不適切な無効化に関する脆弱性 |
CWE-87
代替 XSS 構文の不適切な無効化 |
CVE-2026-45314 | 2026-05-20 13:26 | 2026-05-15 | Show | GitHub Exploit DB Packet Storm |
| 633 | 8.7 |
重要
Network |
openwebui | open webui | openwebuiのopen webuiにおける複数の脆弱性 |
CWE-434 CWE-646 CWE-79 |
CVE-2026-45315 | 2026-05-20 13:26 | 2026-05-15 | Show | GitHub Exploit DB Packet Storm |
| 634 | 3.5 |
低
Network |
openwebui | open webui | openwebuiのopen webuiにおける不正な認証に関する脆弱性 |
CWE-863
不正な認証 |
CVE-2026-45316 | 2026-05-20 13:26 | 2026-05-15 | Show | GitHub Exploit DB Packet Storm |
| 635 | 4.6 |
警告
Network |
openwebui | open webui | openwebuiのopen webuiにおける複数の脆弱性 |
CWE-20 CWE-352 |
CVE-2026-45317 | 2026-05-20 13:26 | 2026-05-15 | Show | GitHub Exploit DB Packet Storm |
| 636 | 5.4 |
警告
Network |
openwebui | open webui | openwebuiのopen webuiにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング(XSS) |
CVE-2026-45318 | 2026-05-20 13:26 | 2026-05-15 | Show | GitHub Exploit DB Packet Storm |
| 637 | 8.5 |
重要
Network |
openwebui | open webui | openwebuiのopen webuiにおけるサーバサイドのリクエストフォージェリの脆弱性 |
CWE-918
サーバサイドリクエストフォージェリ |
CVE-2026-45331 | 2026-05-20 13:26 | 2026-05-15 | Show | GitHub Exploit DB Packet Storm |
| 638 | 7.7 |
重要
Network |
openwebui | open webui | openwebuiのopen webuiにおけるサーバサイドのリクエストフォージェリの脆弱性 |
CWE-918
サーバサイドリクエストフォージェリ |
CVE-2026-45338 | 2026-05-20 13:26 | 2026-05-15 | Show | GitHub Exploit DB Packet Storm |
| 639 | 6.5 |
警告
Network |
openwebui | open webui | openwebuiのopen webuiにおける不正な認証に関する脆弱性 |
CWE-863
不正な認証 |
CVE-2026-45339 | 2026-05-20 13:26 | 2026-05-15 | Show | GitHub Exploit DB Packet Storm |
| 640 | 6.5 |
警告
Network |
openwebui | open webui | openwebuiのopen webuiにおける認可に関する脆弱性 |
CWE-285
不適切な認可 |
CVE-2026-45345 | 2026-05-20 13:26 | 2026-05-15 | Show | GitHub Exploit DB Packet Storm |
Update Date:May 28, 2026, 4:16 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 355361 | - | - | - | Two Sun security certificates have been compromised, which could allow attackers to insert malicious code such as applets and make it appear that it is signed by Sun. |
NVD-CWE-Other
|
CVE-2000-0889 | 2005-10-20 13:00 | 2001-02-12 | Show | GitHub Exploit DB Packet Storm | |
| 355362 | - | - | - | Buffer overflow in post-query sample CGI program allows remote attackers to execute arbitrary commands via an HTTP POST request that contains at least 10001 parameters. |
NVD-CWE-Other
|
CVE-2001-0291 | 2005-10-20 13:00 | 2001-05-3 | Show | GitHub Exploit DB Packet Storm |