NVD Vulnerability Information Top

Show Search Menu

Vendor Name
プロダクト・サービス名
Title
CVE
CRITICAL
HIGH
MEDIUM
LOW
CWE
In descending order of publication date
In descending order of update date
Number of items displayed

NVD Vulnerability Information Top

You can search the list of vulnerabilities managed by the NVD (National Vulnerability Database).
Since vulnerability information is often updated before JVN (Japan Vulnerability Note), vulnerabilities that are not listed in JVN may be updated.

If there is a vulnerability related to JVN (Japan Vulnerability Note), the information will be displayed on the detail page.

To search by CWE, please refer to the CWE Overview and check the CWE number.

CRITICAL
HIGH
MEDIUM
LOW

Update Date:May 5, 2026, 4:51 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
313951	5.5	MEDIUM Local	pgp	freeware corporate_desktop personal_security	An interaction between PGP 7.0.3 with the "wipe deleted files" option, when used on Windows Encrypted File System (EFS), creates a cleartext temporary files that cannot be wiped or deleted due to str…	CWE-459 Incomplete Cleanup	CVE-2002-0788	2024-02-9 05:13	2002-08-12	Show	GitHub Exploit DB Packet Storm

313952	5.5	MEDIUM Local	icq	icq	ICQwebmail client for ICQ 2000A creates a world readable temporary file during login and does not delete it, which allows local users to obtain sensitive information.	CWE-459 Incomplete Cleanup	CVE-2000-0552	2024-02-9 05:12	2000-06-6	Show	GitHub Exploit DB Packet Storm

313953	9.8	CRITICAL Network	risearch	risearch risearch_pro	RiSearch 1.0.01 and RiSearch Pro 3.2.06 allows remote attackers to use the show.pl script as an open proxy, or read arbitrary local files, by setting the url parameter to a (1) http://, (2) ftp://, o…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2004-2061	2024-02-9 04:56	2004-07-27	Show	GitHub Exploit DB Packet Storm

313954	9.8	CRITICAL Network	siemens	db4web	DB4Web server, when configured to use verbose debug messages, allows remote attackers to use DB4Web as a proxy and attempt TCP connections to other systems (port scan) via a request for a URL that sp…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2002-1484	2024-02-9 04:56	2003-04-22	Show	GitHub Exploit DB Packet Storm

313955	7.5	HIGH Network	adobe	acrobat_reader acrobat	The Adobe Reader control in Adobe Reader and Acrobat 7.0 and 7.0.1 allows remote attackers to determine the existence of files via Javascript containing XML script, aka the "XML External Entity vulne…	CWE-611 XXE	CVE-2005-1306	2024-02-9 04:55	2005-06-15	Show	GitHub Exploit DB Packet Storm

313956	5.5	MEDIUM Local	dump_project	dump	dump 0.4 b10 through b29 allows local users to cause a denial of service (execution prevention) by using flock() to lock the /etc/dumpdates file.	CWE-667 Improper Locking	CVE-2002-1914	2024-02-9 04:24	2002-12-31	Show	GitHub Exploit DB Packet Storm

313957	5.5	MEDIUM Local	openbsd netbsd freebsd	openbsd netbsd freebsd	tip on multiple BSD-based operating systems allows local users to cause a denial of service (execution prevention) by using flock() to lock the /var/log/acculog file.	CWE-667 Improper Locking	CVE-2002-1915	2024-02-9 04:24	2002-12-31	Show	GitHub Exploit DB Packet Storm

313958	7.8	HIGH Local	microsoft	windows_2000	Windows 2000 allows local users to prevent the application of new group policy settings by opening Group Policy files with exclusive-read access.	CWE-667 Improper Locking	CVE-2002-0051	2024-02-9 04:24	2002-04-4	Show	GitHub Exploit DB Packet Storm

313959	5.5	MEDIUM Local	concurrent_versions_software_project	concurrent_versions_software	Concurrent Versions Software (CVS) uses predictable temporary file names for locking, which allows local users to cause a denial of service by creating the lock directory before it is created for use…	CWE-667 Improper Locking	CVE-2000-0338	2024-02-9 04:23	2000-04-23	Show	GitHub Exploit DB Packet Storm

313960	5.5	MEDIUM Local	qualcomm	qpopper	qpopper POP server creates lock files with predictable names, which allows local users to cause a denial of service for other users (lack of mail access) by creating lock files for other mail boxes.	CWE-667 Improper Locking	CVE-2000-1198	2024-02-9 04:22	2001-08-31	Show	GitHub Exploit DB Packet Storm

313961	9.8	CRITICAL Network	gnome debian	evolution debian_linux	Integer overflow in camel-lock-helper in Evolution 2.0.2 and earlier allows local users or remote malicious POP3 servers to execute arbitrary code via a length value of -1, which leads to a zero byte…	CWE-190 Integer Overflow or Wraparound	CVE-2005-0102	2024-02-9 03:39	2005-01-24	Show	GitHub Exploit DB Packet Storm

313962	9.8	CRITICAL Network	php opensuse suse	php opensuse linux_enterprise	The dechunk filter in PHP 5.3 through 5.3.2, when decoding an HTTP chunked encoding stream, allows context-dependent attackers to cause a denial of service (crash) and possibly trigger memory corrupt…	CWE-190 Integer Overflow or Wraparound	CVE-2010-1866	2024-02-9 03:38	2010-05-8	Show	GitHub Exploit DB Packet Storm

313963	9.8	CRITICAL Network	qmail_project canonical debian	qmail ubuntu_linux debian_linux	Integer overflow in the stralloc_readyplus function in qmail, when running on 64 bit platforms with a large amount of virtual memory, allows remote attackers to cause a denial of service and possibly…	CWE-190 Integer Overflow or Wraparound	CVE-2005-1513	2024-02-9 03:38	2005-05-11	Show	GitHub Exploit DB Packet Storm

313964	9.8	CRITICAL Network	openbsd sun freebsd microsoft	openbsd sunos solaris freebsd windows_nt windows_xp windows_2000	Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, allows remote attackers to execute arbitrary code b…	CWE-190 Integer Overflow or Wraparound	CVE-2002-0391	2024-02-9 03:38	2002-08-12	Show	GitHub Exploit DB Packet Storm

313965	9.8	CRITICAL Network	optical_character_recognition_project	optical_character_recognition	Integer overflow in the readpgm function in pnm.c for GOCR 0.40, when using the netpbm library, allows remote attackers to execute arbitrary code via a PNM file with large width and height values, wh…	CWE-190 Integer Overflow or Wraparound	CVE-2005-1141	2024-02-9 03:37	2005-04-15	Show	GitHub Exploit DB Packet Storm

313966	9.8	CRITICAL Network	openbsd	openssh	Integer overflow in sshd in OpenSSH 2.9.9 through 3.3 allows remote attackers to execute arbitrary code during challenge response authentication (ChallengeResponseAuthentication) when OpenSSH is usin…	CWE-190 Integer Overflow or Wraparound	CVE-2002-0639	2024-02-9 03:37	2002-07-3	Show	GitHub Exploit DB Packet Storm

313967	7.8	HIGH Local	linux	linux_kernel	Integer overflow in the SCTP_SOCKOPT_DEBUG_NAME SCTP socket option in socket.c in the Linux kernel 2.4.25 and earlier allows local users to execute arbitrary code via an optlen value of -1, which cau…	CWE-190 Integer Overflow or Wraparound	CVE-2004-2013	2024-02-9 02:59	2004-12-31	Show	GitHub Exploit DB Packet Storm

313968	9.8	CRITICAL Network	wuftpd redhat apple sun freebsd netbsd openbsd	wu-ftpd wu_ftpd mac_os_x_server mac_os_x solaris freebsd netbsd openbsd	Off-by-one error in the fb_realpath() function, as derived from the realpath function in BSD, may allow attackers to execute arbitrary code, as demonstrated in wu-ftpd 2.5.0 through 2.6.2 via command…	CWE-193 Off-by-one Error	CVE-2003-0466	2024-02-9 00:50	2003-08-27	Show	GitHub Exploit DB Packet Storm

313969	5.5	MEDIUM Local	mandrakesoft	mandrake_linux	The Standard security setting for Mandrake-Security package (msec) in Mandrake 8.2 installs home directories with world-readable permissions, which could allow local users to read other user's files.	CWE-276 Incorrect Default Permissions	CVE-2002-1713	2024-02-9 00:50	2002-12-31	Show	GitHub Exploit DB Packet Storm

313970	7.8	HIGH Local	microsoft	windows_media_player	Microsoft Windows Media Player (WMP) 6.3, when installed on Solaris, installs executables with world-writable permissions, which allows local users to delete or modify the executables to gain privile…	CWE-276 Incorrect Default Permissions	CVE-2002-1844	2024-02-9 00:50	2002-12-31	Show	GitHub Exploit DB Packet Storm

313971	9.8	CRITICAL Network	suse	suse_linux	The default permissions of /dev/kmem in Linux versions before 2.0.36 allows IP spoofing.	CWE-276 Incorrect Default Permissions	CVE-1999-0426	2024-02-9 00:50	1999-03-1	Show	GitHub Exploit DB Packet Storm

313972	7.8	HIGH Local	isc	bind	dnskeygen in BIND 8.2.4 and earlier, and dnssec-keygen in BIND 9.1.2 and earlier, set insecure permissions for a HMAC-MD5 shared secret key file used for DNS Transactional Signatures (TSIG), which al…	CWE-276 Incorrect Default Permissions	CVE-2001-0497	2024-02-9 00:49	2001-07-21	Show	GitHub Exploit DB Packet Storm

313973	7.5	HIGH Network	aol	aim	The GIF parser in ateimg32.dll in AOL Instant Messenger (AIM) 5.9.3797 and earlier allows remote attackers to cause a denial of service (crash) via a malformed buddy icon that causes an integer under…	CWE-191 Integer Underflow (Wrap or Wraparound)	CVE-2005-1891	2024-02-9 00:44	2005-06-9	Show	GitHub Exploit DB Packet Storm

313974	9.8	CRITICAL Network	barton	ngircd	Integer underflow in the Lists_MakeMask() function in lists.c in ngIRCd before 0.8.2 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a…	CWE-191 Integer Underflow (Wrap or Wraparound)	CVE-2005-0199	2024-02-9 00:43	2005-05-2	Show	GitHub Exploit DB Packet Storm

313975	7.5	HIGH Network	samba canonical	ppp ubuntu_linux	Integer underflow in pppd in cbcp.c for ppp 2.4.1 allows remote attackers to cause a denial of service (daemon crash) via a CBCP packet with an invalid length value that causes pppd to access an inco…	CWE-191 Integer Underflow (Wrap or Wraparound)	CVE-2004-1002	2024-02-9 00:43	2005-03-1	Show	GitHub Exploit DB Packet Storm

313976	7.5	HIGH Network	linux	linux_kernel	Integer underflow in the firewall logging rules for iptables in Linux before 2.6.8 allows remote attackers to cause a denial of service (application crash) via a malformed IP packet.	CWE-191 Integer Underflow (Wrap or Wraparound)	CVE-2004-0816	2024-02-9 00:28	2004-12-23	Show	GitHub Exploit DB Packet Storm

313977	9.8	CRITICAL Network	symantec	liveupdate	Symantec LiveUpdate before 1.6 does not use cryptography to ensure the integrity of download files, which allows remote attackers to execute arbitrary code via DNS spoofing of the update.symantec.com…	CWE-494 Download of Code Without Integrity Check	CVE-2001-1125	2024-02-8 11:28	2001-10-5	Show	GitHub Exploit DB Packet Storm

313978	9.8	CRITICAL Network	phpgedview	phpgedview	PHP remote file inclusion vulnerability in (1) functions.php, (2) authentication_index.php, and (3) config_gedcom.php for PHPGEDVIEW 2.61 allows remote attackers to execute arbitrary PHP code by modi…	CWE-829 Inclusion of Functionality from Untrusted Control Sphere	CVE-2004-0030	2024-02-8 11:27	2004-01-20	Show	GitHub Exploit DB Packet Storm

313979	9.8	CRITICAL Network	acme	thttpd	Off-by-one buffer overflow in Basic Authentication in Acme Labs thttpd 1.95 through 2.20 allows remote attackers to cause a denial of service and possibly execute arbitrary code.	CWE-193 Off-by-one Error	CVE-2001-1496	2024-02-8 11:19	2001-12-31	Show	GitHub Exploit DB Packet Storm

313980	9.8	CRITICAL Network	mbedthis	appweb_http_server	Mbedthis AppWeb HTTP server before 1.1.3 allows remote attackers to bypass access restrictions via a URI with mixed case characters.	CWE-178 Improper Handling of Case Sensitivity	CVE-2004-2214	2024-02-8 11:12	2004-12-31	Show	GitHub Exploit DB Packet Storm

313981	9.8	CRITICAL Network	novell	edirectory	Novell eDirectory 8.6.2 and 8.7 use case insensitive passwords, which makes it easier for remote attackers to conduct brute force password guessing.	CWE-178 Improper Handling of Case Sensitivity	CVE-2002-2119	2024-02-8 11:12	2002-12-31	Show	GitHub Exploit DB Packet Storm

313982	7.5	HIGH Network	apple	quicktime_streaming_server darwin_streaming_server mac_os_x_server mac_os_x	Apache for Apple Mac OS X 10.2.8 and 10.3.6 restricts access to files in a case sensitive manner, but the Apple HFS+ filesystem accesses files in a case insensitive manner, which allows remote attack…	CWE-178 Improper Handling of Case Sensitivity	CVE-2004-1083	2024-02-8 11:09	2004-12-3	Show	GitHub Exploit DB Packet Storm

313983	-	-	-	-	Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.	-	CVE-2024-22984	2024-02-8 05:15	2024-02-8	Show	GitHub Exploit DB Packet Storm

313984	7.5	HIGH	cisco	ios	AAA authentication on Cisco systems allows attackers to execute commands without authorization.	NVD-CWE-Other	CVE-1999-0293	2024-02-8 03:06	1998-01-1	Show	GitHub Exploit DB Packet Storm

313985	-	-	-	-	Rejected reason: We have rejected this CVE as it was determined a non-security issue by the vendor.	-	CVE-2023-5584	2024-02-7 00:15	2024-02-7	Show	GitHub Exploit DB Packet Storm

313986	5.0	MEDIUM	postgresql	postgresql	The intagg contrib module for PostgreSQL 8.0.0 and earlier allows attackers to cause a denial of service (crash) via crafted arrays.	NVD-CWE-Other	CVE-2005-0246	2024-02-6 04:56	2005-05-2	Show	GitHub Exploit DB Packet Storm

313987	-	-	-	-	Rejected reason: This candidate was in a CNA pool that was not assigned to any issues during 2023.	-	CVE-2023-47170	2024-02-5 14:15	2024-02-5	Show	GitHub Exploit DB Packet Storm

313988	9.8	CRITICAL Network	pingtel	xpressa_firmware	Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 downloads phone applications from a web site but can not verify the integrity of the applications, which could allow remote attacke…	CWE-494 Download of Code Without Integrity Check	CVE-2002-0671	2024-02-3 11:32	2002-07-23	Show	GitHub Exploit DB Packet Storm

313989	7.5	HIGH Network	linux	linux_kernel	The Network Address Translation (NAT) capability for Netfilter ("iptables") 1.2.6a and earlier leaks translated IP addresses in ICMP error messages.	CWE-212 Improper Removal of Sensitive Information Before Storage or Transfer	CVE-2002-0704	2024-02-3 11:31	2002-07-26	Show	GitHub Exploit DB Packet Storm

313990	8.8	HIGH Network	apple fedoraproject canonical opensuse	safari iphone_os fedora ubuntu_linux opensuse	Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an HTML document with improp…	CWE-416 Use After Free	CVE-2010-0050	2024-02-3 11:24	2010-03-15	Show	GitHub Exploit DB Packet Storm

313991	7.5	HIGH Network	apple fedoraproject canonical redhat	mac_os_x_server mac_os_x cups fedora ubuntu_linux enterprise_linux_server enterprise_linux_workstation enterprise_linux enterprise_linux_desktop enterprise_linux_eus	Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler in cupsd in CUPS before 1.4.4, when kqueue or epol…	CWE-416 Use After Free	CVE-2010-0302	2024-02-3 11:22	2010-03-6	Show	GitHub Exploit DB Packet Storm

313992	8.8	HIGH Network	adobe	flash_player	Use-after-free vulnerability in Adobe Flash Player 6.0.79, as distributed in Microsoft Windows XP SP2 and SP3, allows remote attackers to execute arbitrary code by unloading a Flash object that is cu…	CWE-416 Use After Free	CVE-2010-0378	2024-02-3 11:21	2010-01-22	Show	GitHub Exploit DB Packet Storm

313993	7.5	HIGH	guillaumegardey	biborb	SQL injection vulnerability in BibORB 1.3.2, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the (1) Username or (2) Password.	CWE-89 SQL Injection	CVE-2005-0252	2024-02-3 01:54	2005-05-2	Show	GitHub Exploit DB Packet Storm

313994	6.5	MEDIUM Network	mit fedoraproject opensuse suse canonical	kerberos_5 fedora opensuse linux_enterprise ubuntu_linux	Use-after-free vulnerability in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3 allows remote authenticated users to cause a denial of service (daemon crash) vi…	CWE-416 Use After Free	CVE-2010-0629	2024-02-3 01:52	2010-04-8	Show	GitHub Exploit DB Packet Storm

313995	4.0	MEDIUM	guillaumegardey	biborb	Directory traversal vulnerability in index.php for BibORB 1.3.2, and possibly earlier versions, allows remote attackers to delete arbitrary files via a Delete action and .. (dot dot) sequences in the…	CWE-22 Path Traversal	CVE-2005-0253	2024-02-3 01:50	2005-05-2	Show	GitHub Exploit DB Packet Storm

313996	4.3	MEDIUM	guillaumegardey	biborb	BibORB 1.3.2, and possibly earlier versions, does not properly enforce a restriction for uploading only PDF and PS files, which allows remote attackers to upload arbitrary files that are presented to…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2005-0254	2024-02-3 01:44	2005-05-2	Show	GitHub Exploit DB Packet Storm

313997	4.3	MEDIUM	guillaumegardey	biborb	Cross-site scripting (XSS) vulnerability in bibindex.php for BibORB 1.3.2, and possibly earlier versions, allows remote attackers to inject arbitrary HTML and web script via the search parameter.	CWE-79 Cross-site Scripting	CVE-2005-0251	2024-02-3 01:42	2005-05-2	Show	GitHub Exploit DB Packet Storm

313998	7.0	HIGH Local	linux opensuse suse debian	linux_kernel opensuse linux_enterprise_server linux_enterprise_desktop linux_enterprise_high_availability_extension debian_linux	Race condition in the find_keyring_by_name function in security/keys/keyring.c in the Linux kernel 2.6.34-rc5 and earlier allows local users to cause a denial of service (memory corruption and system…	CWE-362 CWE-416 Race Condition Use After Free	CVE-2010-1437	2024-02-3 01:38	2010-05-8	Show	GitHub Exploit DB Packet Storm

313999	2.1	LOW	postgresql trustix mandrakesoft redhat	postgresql secure_linux mandrake_linux_corporate_server enterprise_linux_desktop enterprise_linux mandrake_linux	The make_oidjoins_check script in PostgreSQL 7.4.5 and earlier allows local users to overwrite files via a symlink attack on temporary files.	NVD-CWE-Other	CVE-2004-0977	2024-02-3 01:33	2005-02-9	Show	GitHub Exploit DB Packet Storm

314000	9.8	CRITICAL Network	mit openpkg debian	kerberos_5 openpkg debian_linux	Double free vulnerabilities in error handling code in krb524d for MIT Kerberos 5 (krb5) 1.2.8 and earlier may allow remote attackers to execute arbitrary code.	CWE-415 Double Free	CVE-2004-0772	2024-02-3 00:27	2004-10-20	Show	GitHub Exploit DB Packet Storm