NVD Vulnerability Information Top

Show Search Menu

Vendor Name
プロダクト・サービス名
Title
CVE
CRITICAL
HIGH
MEDIUM
LOW
CWE
In descending order of publication date
In descending order of update date
Number of items displayed

NVD Vulnerability Information Top

You can search the list of vulnerabilities managed by the NVD (National Vulnerability Database).
Since vulnerability information is often updated before JVN (Japan Vulnerability Note), vulnerabilities that are not listed in JVN may be updated.

If there is a vulnerability related to JVN (Japan Vulnerability Note), the information will be displayed on the detail page.

To search by CWE, please refer to the CWE Overview and check the CWE number.

CRITICAL
HIGH
MEDIUM
LOW

Update Date:May 5, 2026, 4:51 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
313901	9.8	CRITICAL Network	anybus	ipc\@chip_firmware	Beck IPC GmbH IPC@CHIP telnet service does not delay or disconnect users from the service when bad passwords are entered, which makes it easier for remote attackers to conduct brute force password gu…	CWE-307 mproper Restriction of Excessive Authentication Attempts	CVE-2001-1339	2024-02-9 12:15	2001-05-24	Show	GitHub Exploit DB Packet Storm

313902	9.8	CRITICAL Network	cgi	script_center_news_update	CGI Script Center News Update 1.1 does not properly validate the original news administration password during a password change operation, which allows remote attackers to modify the password without…	CWE-522 Insufficiently Protected Credentials	CVE-2000-0944	2024-02-9 12:15	2000-12-19	Show	GitHub Exploit DB Packet Storm

313903	9.8	CRITICAL Network	hp	openvms_vax	VAXstations running Open VMS 5.3 through 5.5-2 with VMS DECwindows or MOTIF do not properly disable access to user accounts that exceed the break-in limit threshold for failed login attempts, which m…	CWE-307 mproper Restriction of Excessive Authentication Attempts	CVE-1999-1324	2024-02-9 12:15	1999-12-31	Show	GitHub Exploit DB Packet Storm

313904	7.5	HIGH Network	compaq	microcom_6000_firmware	Compaq/Microcom 6000 Access Integrator does not disconnect a client after a certain number of failed login attempts, which allows remote attackers to guess usernames or passwords via a brute force at…	CWE-307 mproper Restriction of Excessive Authentication Attempts	CVE-1999-1152	2024-02-9 12:15	1998-06-3	Show	GitHub Exploit DB Packet Storm

313905	7.5	HIGH	pam-pgsql	pam-pgsql	SQL injection vulnerability in the libpam-pgsql library before 0.5.2 allows attackers to execute arbitrary SQL statements.	CWE-89 SQL Injection	CVE-2004-0366	2024-02-9 12:14	2004-05-4	Show	GitHub Exploit DB Packet Storm

313906	7.5	HIGH	washington	pine	Integer signedness error in rfc2231_get_param from strings.c in PINE before 4.58 allows remote attackers to execute arbitrary code via an email that causes an out-of-bounds array access using a negat…	CWE-129 Improper Validation of Array Index	CVE-2003-0721	2024-02-9 12:14	2003-09-17	Show	GitHub Exploit DB Packet Storm

313907	7.5	HIGH Network	polycom	viewstation_512 viewstation_h.323 viewstation_sp_384 viewstation_mp viewstation_128 viewstation_dcp viewstation_v.35 viewstation_fx_vs4000	The Telnet service for Polycom ViewStation before 7.2.4 does not restrict the number of failed login attempts, which makes it easier for remote attackers to guess usernames and passwords via a brute …	CWE-307 mproper Restriction of Excessive Authentication Attempts	CVE-2002-0628	2024-02-9 12:14	2003-01-7	Show	GitHub Exploit DB Packet Storm

313908	9.8	CRITICAL Network	3com	superstack_ii_ps_hub_40_firmware	The telnet server for 3Com hardware such as PS40 SuperStack II does not delay or disconnect remote attackers who provide an incorrect username or password, which makes it easier to break into the ser…	CWE-307 mproper Restriction of Excessive Authentication Attempts	CVE-2001-1291	2024-02-9 12:14	2001-07-12	Show	GitHub Exploit DB Packet Storm

313909	9.8	CRITICAL Network	lightwavemo	consoleserver_3200_firmware	Lightwave ConsoleServer 3200 does not disconnect users after unsuccessful login attempts, which could allow remote attackers to conduct brute force password guessing.	CWE-307 mproper Restriction of Excessive Authentication Attempts	CVE-2001-0395	2024-02-9 12:14	2001-07-2	Show	GitHub Exploit DB Packet Storm

313910	9.8	CRITICAL Network	archilles	newsworld	admin_news.php in Archilles Newsworld up to 1.3.0 allows attackers to bypass authentication by obtaining the password hash for another user, for example through another Newsworld vulnerability, and s…	CWE-522 Insufficiently Protected Credentials	CVE-2005-3435	2024-02-9 12:13	2005-11-2	Show	GitHub Exploit DB Packet Storm

313911	7.5	HIGH Network	openssl canonical	openssl ubuntu_linux	The default configuration on OpenSSL before 0.9.8 uses MD5 for creating message digests instead of a more cryptographically strong algorithm, which makes it easier for remote attackers to forge certi…	CWE-327 Use of a Broken or Risky Cryptographic Algorithm	CVE-2005-2946	2024-02-9 12:13	2005-09-17	Show	GitHub Exploit DB Packet Storm

313912	5.0	MEDIUM	armagetronad	armagetron_advanced armagetron	Armagetron 0.2.6.0 and earlier and Armagetron Advanced 0.2.7.0 earlier allows remote attackers to cause a denial of service (application crash) via a packet with a large (1) descriptor ID or (2) clai…	CWE-129 Improper Validation of Array Index	CVE-2005-0369	2024-02-9 12:13	2005-05-2	Show	GitHub Exploit DB Packet Storm

313913	9.8	CRITICAL Network	citrusdb	citrusdb	CitrusDB 0.3.6 and earlier generates easily predictable MD5 hashes of the user name for the id_hash cookie, which allows remote attackers to bypass authentication and gain privileges by calculating t…	CWE-916 Use of Password Hash With Insufficient Computational Effort	CVE-2005-0408	2024-02-9 12:13	2005-02-14	Show	GitHub Exploit DB Packet Storm

313914	7.5	HIGH Network	teekai	tracking_online	TeeKai Tracking Online 1.0 uses weak encryption of web usage statistics in data/userlog/log.txt, which allows remote attackers to identify IP's visiting the site by dividing each octet by the MD5 has…	CWE-327 Use of a Broken or Risky Cryptographic Algorithm	CVE-2002-2058	2024-02-9 12:13	2002-12-31	Show	GitHub Exploit DB Packet Storm

313915	7.5	HIGH Network	postgresql	postgresql	PostgreSQL uses the username for a salt when generating passwords, which makes it easier for remote attackers to guess passwords via a brute force attack.	CWE-916 Use of Password Hash With Insufficient Computational Effort	CVE-2002-1657	2024-02-9 12:06	2002-12-31	Show	GitHub Exploit DB Packet Storm

313916	5.5	MEDIUM Local	busybox avaya	busybox message_networking aura_sip_enablement_services aura_application_enablement_services messaging_storage_server	BusyBox 1.1.1 does not use a salt when generating passwords, which makes it easier for local users to guess passwords from a stolen password file using techniques such as rainbow tables.	CWE-916 Use of Password Hash With Insufficient Computational Effort	CVE-2006-1058	2024-02-9 12:05	2006-04-4	Show	GitHub Exploit DB Packet Storm

313917	6.1	MEDIUM Network	freescripts	visitorbook_le	FreeScripts VisitorBook LE (visitorbook.pl) logs the reverse DNS name of a visiting host, which allows remote attackers to spoof the origin of their incoming requests and facilitate cross-site script…	CWE-346 Origin Validation Error	CVE-2003-0981	2024-02-9 11:53	2004-01-5	Show	GitHub Exploit DB Packet Storm

313918	7.5	HIGH Network	6tunnel_project	6tunnel	6tunnel 0.08 and earlier does not properly close sockets that were initiated by a client, which allows remote attackers to cause a denial of service (resource exhaustion) by repeatedly connecting to …	CWE-772 Missing Release of Resource after Effective Lifetime	CVE-2001-0830	2024-02-9 11:52	2001-12-6	Show	GitHub Exploit DB Packet Storm

313919	4.3	MEDIUM	apache debian	http_server debian_linux	The Apache HTTP server before 1.3.34, and 2.0.x before 2.0.55, when acting as an HTTP proxy, allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct X…	CWE-444 HTTP Request Smuggling	CVE-2005-2088	2024-02-9 11:40	2005-07-5	Show	GitHub Exploit DB Packet Storm

313920	4.3	MEDIUM	microsoft	internet_information_services	Microsoft IIS 5.0 and 6.0 allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chun…	CWE-444 HTTP Request Smuggling	CVE-2005-2089	2024-02-9 11:29	2005-07-5	Show	GitHub Exploit DB Packet Storm

313921	6.1	MEDIUM Network	blackboard	academic_suite	Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to redirect users to other URLs and conduct phishing attacks…	CWE-601 Open Redirect	CVE-2005-4206	2024-02-9 11:28	2005-12-13	Show	GitHub Exploit DB Packet Storm

313922	5.5	MEDIUM Local	linux debian	linux_kernel debian_linux	Array index overflow in the xfrm_sk_policy_insert function in xfrm_user.c in Linux kernel 2.6 allows local users to cause a denial of service (oops or deadlock) and possibly execute arbitrary code vi…	CWE-667 Improper Locking	CVE-2005-2456	2024-02-9 09:44	2005-08-4	Show	GitHub Exploit DB Packet Storm

313923	7.5	HIGH Network	apache	http_server	mod_cgi in Apache 2.0.39 and 2.0.40 allows local users and possibly remote attackers to cause a denial of service (hang and memory consumption) by causing a CGI script to send a large amount of data …	CWE-667 Improper Locking	CVE-2002-1850	2024-02-9 09:29	2002-12-31	Show	GitHub Exploit DB Packet Storm

313924	5.0	MEDIUM	openpkg libpng redhat trustix	openpkg libpng secure_linux enterprise_linux_desktop enterprise_linux	The Portable Network Graphics library (libpng) 1.0.15 and earlier allows attackers to cause a denial of service (crash) via a malformed PNG image file that triggers an error that causes an out-of-bou…	CWE-125 Out-of-bounds Read	CVE-2004-0421	2024-02-9 09:27	2004-08-18	Show	GitHub Exploit DB Packet Storm

313925	7.8	HIGH Local	freebsd	freebsd	FreeBSD 5.x to 5.4 on AMD64 does not properly initialize the IO permission bitmap used to allow user access to certain hardware, which allows local users to bypass intended access restrictions to cau…	CWE-909 Missing Initialization of Resource	CVE-2005-1036	2024-02-9 08:47	2005-05-2	Show	GitHub Exploit DB Packet Storm

313926	-	-	-	-	Rejected reason: Red Hat Product Security does not consider this to be a vulnerability. Upstream has not acknowledged this issue as a security flaw.	-	CVE-2022-0931	2024-02-9 08:15	2024-02-9	Show	GitHub Exploit DB Packet Storm

313927	6.5	MEDIUM Network	helpcenterlive	help_center_live	Cross-Site Request Forgery (CSRF) vulnerability in Help Center Live allows remote attackers to perform actions as the administrator via a link or IMG tag to view.php.	CWE-352 Origin Validation Error	CVE-2005-1674	2024-02-9 05:47	2005-05-19	Show	GitHub Exploit DB Packet Storm

313928	7.5	HIGH Network	cisco	ios	Cisco IOS software 11.3 through 12.2 running on Cisco uBR7200 and uBR7100 series Universal Broadband Routers allows remote attackers to modify Data Over Cable Service Interface Specification (DOCSIS)…	CWE-347 Improper Verification of Cryptographic Signature	CVE-2002-1706	2024-02-9 05:47	2002-12-31	Show	GitHub Exploit DB Packet Storm

313929	7.8	HIGH Local	hp	chaivm_ezloader	ChaiVM EZloader for HP color LaserJet 4500 and 4550 and HP LaserJet 4100 and 8150 does not properly verify JAR signatures for new services, which allows local users to load unauthorized Chai services.	CWE-347 Improper Verification of Cryptographic Signature	CVE-2002-1796	2024-02-9 05:47	2002-12-31	Show	GitHub Exploit DB Packet Storm

313930	7.5	HIGH Network	microsoft	windows_nt windows_2000	By default, DNS servers on Windows NT 4.0 and Windows 2000 Server cache glue records received from non-delegated name servers, which allows remote attackers to poison the DNS cache via spoofed DNS re…	CWE-346 Origin Validation Error	CVE-2001-1452	2024-02-9 05:47	2001-08-31	Show	GitHub Exploit DB Packet Storm

313931	9.8	CRITICAL Network	microsoft	windows_nt windows_xp windows_2000 windows_98 windows_98se	The default configuration for the domain name resolver for Microsoft Windows 98, NT 4.0, 2000, and XP sets the QueryIpMatching parameter to 0, which causes Windows to accept DNS updates from hosts th…	CWE-346 Origin Validation Error	CVE-2000-1218	2024-02-9 05:47	2000-04-14	Show	GitHub Exploit DB Packet Storm

313932	7.5	HIGH Network	thekelleys	dnsmasq	Dnsmasq before 2.21 allows remote attackers to poison the DNS cache via answers to queries that were not made by Dnsmasq.	CWE-346 Origin Validation Error	CVE-2005-0877	2024-02-9 05:46	2005-05-2	Show	GitHub Exploit DB Packet Storm

313933	8.8	HIGH Network	phpnuke	php-nuke	Cross-site request forgery (CSRF) vulnerability in Php-Nuke 6.x through 7.1.0 allows remote attackers to gain administrative privileges via an img tag with a URL to admin.php.	CWE-352 Origin Validation Error	CVE-2004-1842	2024-02-9 05:46	2004-12-31	Show	GitHub Exploit DB Packet Storm

313934	6.5	MEDIUM Network	fusetalk	fusetalk	Cross-Site Request Forgery (CSRF) vulnerability in FuseTalk 2.0 allows remote attackers to create arbitrary accounts via a link to adduser.cfm.	CWE-352 Origin Validation Error	CVE-2004-1995	2024-02-9 05:46	2004-12-31	Show	GitHub Exploit DB Packet Storm

313935	8.8	HIGH Network	fusionphp	fusion_news	Fusion News 3.6.1 allows remote attackers to add user accounts, if the administrator is logged in, via a comment that contains an img bbcode tag that calls index.php with the signup action, which is …	CWE-352 Origin Validation Error	CVE-2004-1703	2024-02-9 05:46	2004-07-30	Show	GitHub Exploit DB Packet Storm

313936	8.8	HIGH Network	openbb	openbb	Cross-site request forgery (CSRF) vulnerabilities in (1) cp_forums.php, (2) cp_usergroup.php, (3) cp_ipbans.php, (4) myhome.php, (5) post.php, or (6) moderator.php in Open Bulletin Board (OpenBB) 1.0…	CWE-352 Origin Validation Error	CVE-2004-1967	2024-02-9 05:46	2004-04-25	Show	GitHub Exploit DB Packet Storm

313937	7.8	HIGH Local	lynx_project	lynx	Lynx 2.x does not properly distinguish between internal and external HTML, which may allow a local attacker to read a "secure" hidden form value from a temporary file and craft a LYNXOPTIONS: URL tha…	CWE-346 Origin Validation Error	CVE-1999-1549	2024-02-9 05:46	1999-11-16	Show	GitHub Exploit DB Packet Storm

313938	7.5	HIGH Network	cisco	ip_phone_7940_firmware ip_phone_7960_firmware	Cisco 7940/7960 Voice over IP (VoIP) phones do not properly check the Call-ID, branch, and tag values in a NOTIFY message to verify a subscription, which allows remote attackers to spoof messages suc…	CWE-347 Improper Verification of Cryptographic Signature	CVE-2005-2181	2024-02-9 05:45	2005-07-11	Show	GitHub Exploit DB Packet Storm

313939	7.5	HIGH Network	grandstream	bt-100_firmware	Grandstream BudgeTone (BT) 100 Voice over IP (VoIP) phones do not properly check the Call-ID, branch, and tag values in a NOTIFY message to verify a subscription, which allows remote attackers to spo…	CWE-347 Improper Verification of Cryptographic Signature	CVE-2005-2182	2024-02-9 05:45	2005-07-11	Show	GitHub Exploit DB Packet Storm

313940	9.8	CRITICAL Network	sgi	irix	The LDAP name service (nsd) in IRIX 6.5.19 and earlier does not properly verify if the USERPASSWORD attribute has been provided by an LDAP server, which could allow attackers to log in without a pass…	CWE-346 Origin Validation Error	CVE-2003-0174	2024-02-9 05:45	2003-05-12	Show	GitHub Exploit DB Packet Storm

313941	6.5	MEDIUM Network	ubbcentral	ubb.threads	Multiple cross-site request forgery (CSRF) vulnerabilities in (1) addaddress.php, (2) toggleignore.php, (3) removeignore.php, and (4) removeaddress.php in Infopop UBB.Threads before 6.5.2 Beta allow …	CWE-352 Origin Validation Error	CVE-2005-2059	2024-02-9 05:44	2005-06-29	Show	GitHub Exploit DB Packet Storm

313942	4.3	MEDIUM Network	invisioncommunity	gallery	Cross-site request forgery (CSRF) vulnerability in Invision Gallery before 1.3.1 allows remote attackers to delete albums and images as another user via a link or IMG tag to the (1) albums or (2) del…	CWE-352 Origin Validation Error	CVE-2005-1947	2024-02-9 05:44	2005-06-9	Show	GitHub Exploit DB Packet Storm

313943	9.8	CRITICAL Network	bea	weblogic_server	BEA WebLogic Server and WebLogic Express 7.0 through Service Pack 5 does not log out users when an application is redeployed, which allows those users to continue to access the application without ha…	CWE-459 Incomplete Cleanup	CVE-2005-1744	2024-02-9 05:35	2005-05-24	Show	GitHub Exploit DB Packet Storm

313944	7.5	HIGH Network	accessdata	secureclean	SecureClean 3 build 2.0 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be …	CWE-459 Incomplete Cleanup	CVE-2002-2070	2024-02-9 05:35	2002-12-31	Show	GitHub Exploit DB Packet Storm

313945	7.5	HIGH Network	microsoft	windows_nt	Windows NT 4.0 does not properly shut down invalid named pipe RPC connections, which allows remote attackers to cause a denial of service (resource exhaustion) via a series of connections containing …	CWE-772 Missing Release of Resource after Effective Lifetime	CVE-1999-1127	2024-02-9 05:35	1999-12-31	Show	GitHub Exploit DB Packet Storm

313946	7.5	HIGH Network	tolvanen	eraser	Eraser 5.3 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be deleted.	CWE-459 Incomplete Cleanup	CVE-2002-2068	2024-02-9 05:33	2002-12-31	Show	GitHub Exploit DB Packet Storm

313947	7.5	HIGH Network	pgp	personal_privacy	PGP 6.x and 7.x does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be deleted.	CWE-459 Incomplete Cleanup	CVE-2002-2069	2024-02-9 05:33	2002-12-31	Show	GitHub Exploit DB Packet Storm

313948	7.5	HIGH Network	east-tec	eraser	East-Tec Eraser 2002 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be del…	CWE-459 Incomplete Cleanup	CVE-2002-2067	2024-02-9 05:28	2002-12-31	Show	GitHub Exploit DB Packet Storm

313949	5.5	MEDIUM Local	oracle	forms_builder	Oracle Formsbuilder 9.0.4 stores database usernames and passwords in a temporary file, which is not deleted after it is used, which allows local users to obtain sensitive information.	CWE-459 Incomplete Cleanup	CVE-2005-2293	2024-02-9 05:13	2005-07-18	Show	GitHub Exploit DB Packet Storm

313950	7.5	HIGH Network	jetico	bcwipe	BestCrypt BCWipe 1.0.7 and 2.0 through 2.35.1 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information th…	CWE-459 Incomplete Cleanup	CVE-2002-2066	2024-02-9 05:13	2002-12-31	Show	GitHub Exploit DB Packet Storm