NVD Vulnerability Information Top

Show Search Menu

Vendor Name
プロダクト・サービス名
Title
CRITICAL
HIGH
MEDIUM
LOW
CVE
CWE
In descending order of publication date
In descending order of update date
Number of items displayed

NVD Vulnerability Information Top

You can search the list of vulnerabilities managed by the NVD (National Vulnerability Database).
Since vulnerability information is often updated before JVN (Japan Vulnerability Note), vulnerabilities that are not listed in JVN may be updated.

If there is a vulnerability related to JVN (Japan Vulnerability Note), the information will be displayed on the detail page.

To search by CWE, please refer to the CWE Overview and check the CWE number.

CRITICAL
HIGH
MEDIUM
LOW

Update Date:Jan. 4, 2025, 4:07 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
275501	4.3	MEDIUM	phpwebsite	phpwebsite	Cross-site scripting (XSS) vulnerability in article.php module for phpWebSite 0.8.3 allows remote attackers to execute arbitrary Javascript script via the sid parameter, as demonstrated using an IMG …	NVD-CWE-Other	CVE-2002-2178	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

275502	4.3	MEDIUM	phpwebsite	phpwebsite	This vulnerability affects phpWebsite version 0.8.3, and may affect all other versions of phpWebsite.	NVD-CWE-Other	CVE-2002-2178	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

275503	7.8	HIGH	unisys	clearpath_mcp	The dynamic initialization feature of the ClearPath MCP environment allows remote attackers to cause a denial of service (crash) via a TCP port scan using a tool such as nmap.	NVD-CWE-Other	CVE-2002-2179	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

275504	7.8	HIGH	unisys	clearpath_mcp	This vulnarability may affect all versions of Unisys, ClearPath MCP.	NVD-CWE-Other	CVE-2002-2179	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

275505	6.8	MEDIUM	openbsd	openbsd	The setitimer(2) system call in OpenBSD 2.0 through 3.1 does not properly check certain arguments, which allows local users to write to kernel memory and possibly gain root privileges, possibly via a…	NVD-CWE-Other	CVE-2002-2180	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

275506	5.0	MEDIUM	sonicwall	content_filtering	SonicWall Content Filtering allows local users to access prohibited web sites via requests to the web site's IP address instead of the domain name.	NVD-CWE-Other	CVE-2002-2181	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

275507	6.4	MEDIUM	seunghyun_seo	msn666	Buffer overflow in Seunghyun Seo's MSN666 MSN Sniffer 1.0 and 1.0.1 allows remote attackers to execute arbitrary code via a long MSN packet.	NVD-CWE-Other	CVE-2002-2182	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

275508	7.5	HIGH	phpshare	phpshare	phpShare.php in phpShare before 0.6 beta 3 allows remote attackers to include and execute arbitrary PHP scripts from remote servers.	NVD-CWE-Other	CVE-2002-2183	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

275509	5.0	MEDIUM	digi-net_technologies	digichat	Digi-Net Technologies DigiChat 3.5 allows chat users to obtain the IP addresses of other chat users via a "Showip" parameter in the chat applet.	NVD-CWE-Other	CVE-2002-2184	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

275510	5.0	MEDIUM	macromedia	jrun	Macromedia JRun 3.0, 3.1, and 4.0 allow remote attackers to view the source code of .JSP files via Unicode encoded character values in a URL.	NVD-CWE-Other	CVE-2002-2186	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

275511	5.0	MEDIUM	macromedia	jrun	Unknown "file disclosure" vulnerability in Macromedia JRun 3.0, 3.1, and 4.0, related to a log file or jrun.ini, with unknown impact.	NVD-CWE-Other	CVE-2002-2187	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

275512	4.9	MEDIUM	openbsd	openbsd	OpenBSD before 3.2 allows local users to cause a denial of service (kernel crash) via a call to getrlimit(2) with invalid arguments, possibly due to an integer signedness error.	NVD-CWE-Other	CVE-2002-2188	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

275513	5.1	MEDIUM	activxperts_software microsoft	activwebserver windows_2003_server	Cross-site scripting (XSS) vulnerability in ActiveXperts Software ActiveWebserver allows remote attackers to execute arbitrary web script via a link.	NVD-CWE-Other	CVE-2002-2189	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

275514	7.5	HIGH	artscore_studios	cutecast_forum	ArtsCore Studios CuteCast Forum 1.2 stores passwords in plaintext under the web document root, which allows remote attackers to obtain the passwords via an HTTP request to a .user file.	NVD-CWE-Other	CVE-2002-2190	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

275515	5.0	MEDIUM	lotus	domino	Lotus Domino 5.0.9a and earlier, even when configured with the 'DominoNoBanner=1' option, allows remote attackers to obtain potential sensitive information such as the version via a request for a non…	NVD-CWE-Other	CVE-2002-2191	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

275516	5.0	MEDIUM	lotus	domino	This issue is present on Lotus Domino Server with the 'DominoNoBanner' set to a value of '1'.	NVD-CWE-Other	CVE-2002-2191	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

275517	4.3	MEDIUM	perception	liteserve	Cross-site scripting (XSS) vulnerability in Perception LiteServe 2.0.1 allows remote attackers to execute arbitrary web script via (1) a Host: header when DNS wildcards are supported or (2) the query…	NVD-CWE-Other	CVE-2002-2192	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

275518	4.3	MEDIUM	perception	liteserve	This vulnerability is limited to server configurations with Wildcard DNS enabled.	NVD-CWE-Other	CVE-2002-2192	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

275519	4.3	MEDIUM	mojo_mail	mojo_mail	Cross-site scripting (XSS) vulnerability in mojo.cgi for Mojo Mail 2.7 allows remote attackers to inject arbitrary web script via the email parameter.	NVD-CWE-Other	CVE-2002-2193	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

275520	5.0	MEDIUM	nullsoft	winamp	Buffer overflow in the version update check for Winamp 2.80 and earlier allows remote attackers who can spoof www.winamp.com to execute arbitrary code via a long server response.	NVD-CWE-Other	CVE-2002-2195	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

275521	7.5	HIGH	samba	samba	Samba before 2.2.5 does not properly terminate the enum_csc_policy data structure, which may allow remote attackers to execute arbitrary code via a buffer overflow attack.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2002-2196	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

275522	10.0	HIGH	zmailer	zmailer	Buffer overflow in ZMailer before 2.99.51_1 allows remote attackers to execute arbitrary code during HELO processing from an IPv6 address, possibly using an address that resolves to a long hostname.	NVD-CWE-Other	CVE-2002-2198	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

275523	10.0	HIGH	webmin	webmin	The Printer Administration module for Webmin 0.990 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the printer name.	NVD-CWE-Other	CVE-2002-2201	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

275524	3.8	LOW	microsoft	outlook_express	Outlook Express 6.0 does not delete messages from dbx files, even when a user empties the Deleted items folder, which allows local users to read other users email.	NVD-CWE-Other	CVE-2002-2202	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

275525	3.8	LOW	microsoft	outlook_express	This vulnerability affects Outlook Express 6.0 on any version of the Windows OS.	NVD-CWE-Other	CVE-2002-2202	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

275526	7.5	HIGH	redhat	redhat_package_manager	The default --checksig setting in RPM Package Manager 4.0.4 checks that a package's signature is valid without listing who signed it, which can allow remote attackers to make it appear that a malicio…	NVD-CWE-Other	CVE-2002-2204	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

275527	7.5	HIGH	redhat	redhat_package_manager	A large degree of social engineering and user interaction is neccessary to exploit this vulnerbility.	NVD-CWE-Other	CVE-2002-2204	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

275528	5.0	MEDIUM	webresolve	webresolve	Buffer overflow in Webresolve 0.1.0 and earlier allows remote attackers to execute arbitrary code by connecting to the server from an IP address that resolves to a long hostname.	NVD-CWE-Other	CVE-2002-2205	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

275529	7.8	HIGH	symantec	norton_antivirus	The POP3 proxy service (POPROXY.EXE) in Norton AntiVirus 2001 allows local users to cause a denial of service (CPU consumption and crash) via a long username with multiple /localhost entries.	NVD-CWE-Other	CVE-2002-2206	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

275530	10.0	HIGH	eric_rescorla	ssldump	Buffer overflow in ssldump 0.9b2 and earlier, when running in decryption mode, allows remote attackers to execute arbitrary code via a long RSA PreMasterSecret.	NVD-CWE-Other	CVE-2002-2207	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

275531	10.0	HIGH	pablo_software_solutions	baby_ftp_server	Unspecified "security vulnerability" in Baby FTP Server versions before November 7, 2002 has unknown impact and attack vectors.	NVD-CWE-Other	CVE-2002-2209	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

275532	6.2	MEDIUM	openoffice	openoffice	The installation of OpenOffice 1.0.1 allows local users to overwrite files and possibly gain privileges via a symlink attack on the USERNAME_autoresponse.conf temporary file.	NVD-CWE-Other	CVE-2002-2210	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

275533	5.0	MEDIUM	isc fujitsu	bind uxp_v	The DNS resolver in unspecified versions of Fujitsu UXP/V, when resolving recursive DNS queries for arbitrary hosts, allows remote attackers to conduct DNS cache poisoning via a birthday attack that …	NVD-CWE-Other	CVE-2002-2212	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

275534	5.0	MEDIUM	infoblox isc	dns_one bind	The DNS resolver in unspecified versions of Infoblox DNS One, when resolving recursive DNS queries for arbitrary hosts, allows remote attackers to conduct DNS cache poisoning via a birthday attack th…	NVD-CWE-Other	CVE-2002-2213	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

275535	5.0	MEDIUM	php	php	The php_if_imap_mime_header_decode function in the IMAP functionality in PHP before 4.2.2 allows remote attackers to cause a denial of service (crash) via an e-mail header with a long "To" header.	NVD-CWE-Other	CVE-2002-2214	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

275536	5.0	MEDIUM	php	php	The imap_header function in the IMAP functionality for PHP before 4.3.0 allows remote attackers to cause a denial of service via an e-mail message with a large number of "To" addresses, which trigger…	NVD-CWE-Other	CVE-2002-2215	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

275537	5.0	MEDIUM	php	php	This vulnerability is addressed in the following product release: PHP, PHP, 4.3.0	NVD-CWE-Other	CVE-2002-2215	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

275538	5.0	MEDIUM	soft3304	04webserver	Soft3304 04WebServer before 1.20 does not properly process URL strings, which allows remote attackers to obtain unspecified sensitive information.	NVD-CWE-Other	CVE-2002-2216	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

275539	10.0	HIGH	sips	sips	CRLF injection vulnerability in the setUserValue function in sipssys/code/site.inc.php in Haakon Nilsen simple, integrated publishing system (SIPS) before 20020209 has unknown impact, possibly gainin…	NVD-CWE-Other	CVE-2002-2218	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

275540	6.2	MEDIUM	chetcpasswd	chetcpasswd	Buffer overflow in Pedro Lineu Orso chetcpasswd before 1.12, when configured for access from 0.0.0.0, allows local users to gain privileges via unspecified vectors.	NVD-CWE-Other	CVE-2002-2220	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

275541	6.2	MEDIUM	chetcpasswd	chetcpasswd	Untrusted search path vulnerability in Pedro Lineu Orso chetcpasswd 2.4.1 and earlier allows local users to gain privileges via a modified PATH that references a malicious cp binary. NOTE: this issu…	NVD-CWE-Other	CVE-2002-2221	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

275542	5.1	MEDIUM	safenet	softremote_vpn_client	SafeNet VPN client allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted Internet Key Exchange (IKE) response packets, possibly involving buffer overflo…	NVD-CWE-Other	CVE-2002-2225	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

275543	6.4	MEDIUM	mailscanner	mailscanner	MailScanner before 4.0 5-1 and before 3.2 6-1 allows remote attackers to bypass protection via attachments with a filename with (1) extra leading spaces, (2) extra trailing spaces, or (3) alternate c…	CWE-20 Improper Input Validation	CVE-2002-2228	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

275544	5.0	MEDIUM	sapio_design_ltd	webreflex	Directory traversal vulnerability in Sapio Design Ltd. WebReflex 1.53 allows remote attackers to read arbitrary files via a .. in an HTTP request.	CWE-22 Path Traversal	CVE-2002-2229	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

275545	8.5	HIGH	mollensoft_software	enceladus_server_suite	Buffer overflow in Enceladus Server Suite 3.9 allows remote attackers to execute arbitrary code via a long CD (CWD) command.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2002-2232	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

275546	4.3	MEDIUM	netscreen	screenos	NetScreen ScreenOS before 4.0.1 allows remote attackers to bypass the Malicious-URL blocking feature by splitting the URL into fragmented IP requests.	CWE-16 Configuration	CVE-2002-2234	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

275547	5.0	MEDIUM	jelsoft	vbulletin	member2.php in vBulletin 2.2.9 and earlier does not properly restrict the $perpage variable to be an integer, which causes an error message to be reflected back to the user without quoting, which fac…	CWE-189 Numeric Errors	CVE-2002-2235	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

275548	10.0	HIGH	apt-www-proxy	apt-www-proxy	Format string vulnerability in the awp_log function in apt-www-proxy 0.1 allows remote attackers to execute arbitrary code.	CWE-20 Improper Input Validation	CVE-2002-2236	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

275549	5.0	MEDIUM	netbsd	ftpd	ftpd in NetBSD 1.5 through 1.5.3 and 1.6 does not properly quote a digit in response to a STAT command for a filename that contains a carriage return followed by a digit, which can cause firewalls an…	CWE-189 Numeric Errors	CVE-2002-2245	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

275550	10.0	HIGH	hp	secure_web_server_for_tru64	Unspecified vulnerability in Internet Group Management Protocol (IGMP) of HP Tru64 4.0F through 5.1A allows remote attackers to cause a denial of service via unknown attack vectors. NOTE: this might…	NVD-CWE-noinfo	CVE-2002-2264	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm