NVD Vulnerability Information Top

Show Search Menu

Vendor Name
プロダクト・サービス名
Title
CVE
CRITICAL
HIGH
MEDIUM
LOW
CWE
In descending order of publication date
In descending order of update date
Number of items displayed

NVD Vulnerability Information Top

You can search the list of vulnerabilities managed by the NVD (National Vulnerability Database).
Since vulnerability information is often updated before JVN (Japan Vulnerability Note), vulnerabilities that are not listed in JVN may be updated.

If there is a vulnerability related to JVN (Japan Vulnerability Note), the information will be displayed on the detail page.

To search by CWE, please refer to the CWE Overview and check the CWE number.

CRITICAL
HIGH
MEDIUM
LOW

Update Date:May 4, 2026, 4:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
346101	5.0	MEDIUM	sitebuilder	sitebuilder	Directory traversal vulnerability in sitebuilder.cgi in SiteBuilder 1.4 allows remote attackers to read arbitrary files via .. (dot dot) sequences in the selectedpage parameter.	NVD-CWE-Other	CVE-2003-0756	2008-09-11 04:20	2003-10-20	Show	GitHub Exploit DB Packet Storm

346102	7.5	HIGH	foxweb	foxweb	Buffer overflow in (1) foxweb.dll and (2) foxweb.exe of Foxweb 2.5 allows remote attackers to execute arbitrary code via a long URL (PATH_INFO value).	NVD-CWE-Other	CVE-2003-0762	2008-09-11 04:20	2003-09-17	Show	GitHub Exploit DB Packet Storm

346103	7.5	HIGH	sane	sane sane-backend	saned in sane-backends 1.0.7 and earlier does not quickly handle connection drops, which allows remote attackers to cause a denial of service (segmentation fault) when invalid memory is accessed.	NVD-CWE-Other	CVE-2003-0774	2008-09-11 04:20	2003-09-22	Show	GitHub Exploit DB Packet Storm

346104	5.0	MEDIUM	sane	sane sane-backend	saned in sane-backends 1.0.7 and earlier calls malloc with an arbitrary size value if a connection is dropped before the size value has been sent, which allows remote attackers to cause a denial of s…	NVD-CWE-Other	CVE-2003-0775	2008-09-11 04:20	2003-09-22	Show	GitHub Exploit DB Packet Storm

346105	7.5	HIGH	sane	sane sane-backend	saned in sane-backends 1.0.7 and earlier does not properly "check the validity of the RPC numbers it gets before getting the parameters," with unknown consequences.	NVD-CWE-Other	CVE-2003-0776	2008-09-11 04:20	2003-09-22	Show	GitHub Exploit DB Packet Storm

346106	5.0	MEDIUM	sane	sane sane-backend	saned in sane-backends 1.0.7 and earlier, when debug messages are enabled, does not properly handle dropped connections, which can prevent strings from being null terminated and cause a denial of ser…	NVD-CWE-Other	CVE-2003-0777	2008-09-11 04:20	2003-09-22	Show	GitHub Exploit DB Packet Storm

346107	5.0	MEDIUM	sane	sane sane-backend	saned in sane-backends 1.0.7 and earlier, and possibly later versions, does not properly allocate memory in certain cases, which could allow attackers to cause a denial of service (memory consumption…	NVD-CWE-Other	CVE-2003-0778	2008-09-11 04:20	2003-09-22	Show	GitHub Exploit DB Packet Storm

346108	7.5	HIGH	digium	asterisk	SQL injection vulnerability in the Call Detail Record (CDR) logging functionality for Asterisk allows remote attackers to execute arbitrary SQL via a CallerID string.	NVD-CWE-Other	CVE-2003-0779	2008-09-11 04:20	2003-09-22	Show	GitHub Exploit DB Packet Storm

346109	10.0	HIGH	ibm	aix	Format string vulnerability in tsm for the bos.rte.security fileset on AIX 5.2 allows remote attackers to gain root privileges via login, and local users to gain privileges via login, su, or passwd, …	NVD-CWE-Other	CVE-2003-0784	2008-09-11 04:20	2003-10-6	Show	GitHub Exploit DB Packet Storm

346110	7.5	HIGH	brian_bassett	ipmasq	ipmasq before 3.5.12, in certain configurations, may forward packets to the external interface even if the packets are not associated with an established connection, which could allow remote attacker…	NVD-CWE-Other	CVE-2003-0785	2008-09-11 04:20	2003-10-6	Show	GitHub Exploit DB Packet Storm

346111	10.0	HIGH	openbsd	openssh	The SSH1 PAM challenge response authentication in OpenSSH 3.7.1 and 3.7.1p1, when Privilege Separation is disabled, does not check the result of the authentication attempt, which can allow remote att…	NVD-CWE-Other	CVE-2003-0786	2008-09-11 04:20	2003-11-17	Show	GitHub Exploit DB Packet Storm

346112	7.5	HIGH	openbsd	openssh	The PAM conversation function in OpenSSH 3.7.1 and 3.7.1p1 interprets an array of structures as an array of pointers, which allows attackers to modify the stack and possibly gain privileges.	NVD-CWE-Other	CVE-2003-0787	2008-09-11 04:20	2003-11-17	Show	GitHub Exploit DB Packet Storm

346113	4.3	MEDIUM	nokia	electronic_documentation	Cross-site scripting (XSS) vulnerability in Nokia Electronic Documentation (NED) 5.0 allows remote attackers to execute arbitrary web script and steal cookies via a URL to the docs/ directory that co…	CWE-79 Cross-site Scripting	CVE-2003-0801	2008-09-11 04:20	2003-10-6	Show	GitHub Exploit DB Packet Storm

346114	5.0	MEDIUM	nokia	electronic_documentation	Nokia Electronic Documentation (NED) 5.0 allows remote attackers to obtain a directory listing of the WebLogic web root, and the physical path of the NED server, via a "retrieve" action with a locati…	NVD-CWE-Other	CVE-2003-0802	2008-09-11 04:20	2003-10-6	Show	GitHub Exploit DB Packet Storm

346115	7.5	HIGH	nokia	electronic_documentation	Nokia Electronic Documentation (NED) 5.0 allows remote attackers to use NED as an open HTTP proxy via a URL in the location parameter, which NED accesses and returns to the user.	NVD-CWE-Other	CVE-2003-0803	2008-09-11 04:20	2003-10-6	Show	GitHub Exploit DB Packet Storm

346116	5.0	MEDIUM	apple freebsd openbsd	mac_os_x mac_os_x_server freebsd openbsd	The arplookup function in FreeBSD 5.1 and earlier, Mac OS X before 10.2.8, and possibly other BSD-based systems, allows remote attackers on a local subnet to cause a denial of service (resource starv…	NVD-CWE-Other	CVE-2003-0804	2008-09-11 04:20	2003-11-17	Show	GitHub Exploit DB Packet Storm

346117	4.6	MEDIUM	marbles	marbles	Buffer overflow in marbles 1.0.2 and earlier allows local users to gain privileges via a long HOME environment variable.	NVD-CWE-Other	CVE-2003-0830	2008-09-11 04:20	2003-11-17	Show	GitHub Exploit DB Packet Storm

346118	5.0	MEDIUM	webfs	webfs	Directory traversal vulnerability in webfs before 1.20 allows remote attackers to read arbitrary files via .. (dot dot) sequences in a Hostname header.	NVD-CWE-Other	CVE-2003-0832	2008-09-11 04:20	2003-11-17	Show	GitHub Exploit DB Packet Storm

346119	7.5	HIGH	webfs	webfs	Stack-based buffer overflow in webfs before 1.20 allows attackers to execute arbitrary code by creating directories that result in a long pathname.	NVD-CWE-Other	CVE-2003-0833	2008-09-11 04:20	2003-11-17	Show	GitHub Exploit DB Packet Storm

346120	5.0	MEDIUM	gnu washington_university	fileutils wu-ftpd	An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a denial of service or execute arbitrary code via a large -w value, which could be remotely exploited v…	NVD-CWE-Other	CVE-2003-0853	2008-09-11 04:20	2003-11-17	Show	GitHub Exploit DB Packet Storm

346121	7.5	HIGH	apple	mac_os_x mac_os_x_server	Unknown vulnerability in QuickTime Java in Mac OS X v10.3 and Mac OS X Server 10.3 allows attackers to gain "unauthorized access to a system."	NVD-CWE-Other	CVE-2003-0871	2008-09-11 04:20	2003-11-3	Show	GitHub Exploit DB Packet Storm

346122	7.5	HIGH	minimalist	minimalist	Unknown vulnerability in minimalist mailing list manager 2.4, 2.2, and possibly other versions, allows remote attackers to execute arbitrary commands.	NVD-CWE-Other	CVE-2003-0902	2008-09-11 04:20	2004-02-3	Show	GitHub Exploit DB Packet Storm

346123	4.6	MEDIUM	omega-rpg	omega-rpg	Buffer overflow in omega-rpg 0.90 allows local users to execute arbitrary code via a long (1) command line or (2) environment variable.	NVD-CWE-Other	CVE-2003-0932	2008-09-11 04:20	2003-12-15	Show	GitHub Exploit DB Packet Storm

346124	4.6	MEDIUM	conquest	conquest	Buffer overflow in conquest 7.2 and earlier may allow a local user to execute arbitrary code via a long environment variable.	NVD-CWE-Other	CVE-2003-0933	2008-09-11 04:20	2003-12-1	Show	GitHub Exploit DB Packet Storm

346125	7.5	HIGH	mnogosearch	mnogosearch	Buffer overflow in search.cgi for mnoGoSearch 3.1.20 allows remote attackers to execute arbitrary code via a long ul parameter.	NVD-CWE-Other	CVE-2003-0436	2008-09-11 04:19	2003-07-24	Show	GitHub Exploit DB Packet Storm

346126	7.5	HIGH	mnogosearch	mnogosearch	Buffer overflow in search.cgi for mnoGoSearch 3.2.10 allows remote attackers to execute arbitrary code via a long tmplt parameter.	NVD-CWE-Other	CVE-2003-0437	2008-09-11 04:19	2003-07-24	Show	GitHub Exploit DB Packet Storm

346127	7.5	HIGH	cistron	radius_daemon	Cistron RADIUS daemon (radiusd-cistron) 1.6.6 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large value in an NAS-Port attribute, which is…	NVD-CWE-Other	CVE-2003-0450	2008-09-11 04:19	2003-08-7	Show	GitHub Exploit DB Packet Storm

346128	7.5	HIGH	teapop	teapop	SQL injection vulnerabilities in the (1) PostgreSQL or (2) MySQL authentication modules for teapop 0.3.5 and earlier allow attackers to execute arbitrary SQL and possibly gain privileges.	NVD-CWE-Other	CVE-2003-0515	2008-09-11 04:19	2003-08-18	Show	GitHub Exploit DB Packet Storm

346129	7.5	HIGH	gert_doering	mgetty	cnd.c in mgetty 1.1.28 and earlier does not properly filter non-printable characters and quotes, which may allow remote attackers to execute arbitrary commands via shell metacharacters in (1) caller …	NVD-CWE-Other	CVE-2003-0516	2008-09-11 04:19	2003-08-18	Show	GitHub Exploit DB Packet Storm

346130	4.6	MEDIUM	apple	mac_os_x mac_os_x_server	The screen saver in MacOS X allows users with physical access to cause the screen saver to crash and gain access to the underlying session via a large number of characters in the password field, poss…	NVD-CWE-Other	CVE-2003-0518	2008-09-11 04:19	2003-08-18	Show	GitHub Exploit DB Packet Storm

346131	7.2	HIGH	xblockout	xbl	Buffer overflow in xbl 1.0k and earlier allows local users to gain privileges via a long -display command line option.	NVD-CWE-Other	CVE-2003-0535	2008-09-11 04:19	2003-08-18	Show	GitHub Exploit DB Packet Storm

346132	7.5	HIGH	mozart	mozart	The mailcap file for mozart 1.2.5 and earlier causes Oz applications to be passed to the Oz interpreter, which allows remote attackers to execute arbitrary Oz programs in a MIME-aware client program.	NVD-CWE-Other	CVE-2003-0538	2008-09-11 04:19	2003-08-18	Show	GitHub Exploit DB Packet Storm

346133	7.2	HIGH	sgi	irix	Unknown vulnerability in SGI IRIX 6.5.x through 6.5.20, and possibly earlier versions, allows local users to cause a core dump in scheme and possibly gain privileges via certain environment variables…	NVD-CWE-Other	CVE-2003-0574	2008-09-11 04:19	2003-08-18	Show	GitHub Exploit DB Packet Storm

346134	5.0	MEDIUM	sgi	irix	Unknown vulnerability in the NFS daemon (nfsd) in SGI IRIX 6.5.19f and earlier allows remote attackers to cause a denial of service (kernel panic) via certain packets that cause XDR decoding errors, …	NVD-CWE-Other	CVE-2003-0576	2008-09-11 04:19	2003-08-27	Show	GitHub Exploit DB Packet Storm

346135	7.5	HIGH	mpg123	mpg123	mpg123 0.59r allows remote attackers to cause a denial of service and possibly execute arbitrary code via an MP3 file with a zero bitrate, which creates a negative frame size.	NVD-CWE-Other	CVE-2003-0577	2008-09-11 04:19	2003-08-18	Show	GitHub Exploit DB Packet Storm

346136	4.6	MEDIUM	cvsup sup	cvsup-mirror sup	sup 1.8 and earlier does not properly create temporary files, which allows local users to overwrite arbitrary files.	NVD-CWE-Other	CVE-2003-0606	2008-09-11 04:19	2003-08-27	Show	GitHub Exploit DB Packet Storm

346137	5.0	MEDIUM	mcafee	epolicy_orchestrator	Directory traversal vulnerability in ePO agent for McAfee ePolicy Orchestrator 3.0 allows remote attackers to read arbitrary files via a certain HTTP request.	NVD-CWE-Other	CVE-2003-0610	2008-09-11 04:19	2003-08-27	Show	GitHub Exploit DB Packet Storm

346138	4.6	MEDIUM	zblast	zblast	Buffer overflow in zblast-svgalib of zblast 1.2.1 and earlier allows local users to execute arbitrary code via the high score file.	NVD-CWE-Other	CVE-2003-0613	2008-09-11 04:19	2003-08-27	Show	GitHub Exploit DB Packet Storm

346139	5.0	MEDIUM	nokia	sgsn_dx200	SNMP daemon in the DX200 based network element for Nokia Serving GPRS support node (SGSN) allows remote attackers to read SNMP options via arbitrary community strings.	NVD-CWE-Other	CVE-2003-0137	2008-09-11 04:18	2003-03-18	Show	GitHub Exploit DB Packet Storm

346140	7.2	HIGH	mcafee	epolicy_orchestrator	The default installation of MSDE via McAfee ePolicy Orchestrator 2.0 through 3.0 allows attackers to execute arbitrary code via a series of steps that (1) obtain the database administrator username a…	NVD-CWE-Other	CVE-2003-0148	2008-09-11 04:18	2003-08-27	Show	GitHub Exploit DB Packet Storm

346141	7.5	HIGH	mcafee	epolicy_orchestrator	Heap-based buffer overflow in ePO agent for McAfee ePolicy Orchestrator 2.0, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code via a POST request containing long parameters.	NVD-CWE-Other	CVE-2003-0149	2008-09-11 04:18	2003-08-27	Show	GitHub Exploit DB Packet Storm

346142	7.2	HIGH	apple	mac_os_x mac_os_x_server	DirectoryServices in MacOS X trusts the PATH environment variable to locate and execute the touch command, which allows local users to execute arbitrary commands by modifying the PATH to point to a d…	NVD-CWE-Other	CVE-2003-0171	2008-09-11 04:18	2003-05-5	Show	GitHub Exploit DB Packet Storm

346143	7.2	HIGH	xfsdump sgi	xfsdump irix	xfsdq in xfsdump does not create quota information files securely, which allows local users to gain root privileges.	NVD-CWE-Other	CVE-2003-0173	2008-09-11 04:18	2003-05-5	Show	GitHub Exploit DB Packet Storm

346144	6.4	MEDIUM	apple	mac_os_x mac_os_x_server	Mac OS X before 10.2.5 allows guest users to modify the permissions of the DropBox folder and read unauthorized files.	NVD-CWE-Other	CVE-2003-0198	2008-09-11 04:18	2003-05-5	Show	GitHub Exploit DB Packet Storm

346145	2.1	LOW	gs-common	gs-common	ps2epsi creates insecure temporary files when calling ghostscript, which allows local attackers to overwrite arbitrary files.	NVD-CWE-Other	CVE-2003-0207	2008-09-11 04:18	2003-05-5	Show	GitHub Exploit DB Packet Storm

346146	9.3	HIGH	cisco	catos	Unknown vulnerability in Cisco Catalyst 7.5(1) allows local users to bypass authentication and gain access to the enable mode without a password.	NVD-CWE-noinfo CWE-287 Improper Authentication	CVE-2003-0216	2008-09-11 04:18	2003-05-12	Show	GitHub Exploit DB Packet Storm

346147	7.5	HIGH	happycgi	happymall	Happycgi.com Happymall 4.3 and 4.4 allows remote attackers to execute arbitrary commands via shell metacharacters in the file parameter for the (1) normal_html.cgi or (2) member_html.cgi scripts.	NVD-CWE-Other	CVE-2003-0243	2008-09-11 04:18	2003-05-27	Show	GitHub Exploit DB Packet Storm

346148	7.5	HIGH	kde	kopete	The GnuPG plugin in kopete before 0.6.2 does not properly cleanse the command line when executing gpg, which allows remote attackers to execute arbitrary commands.	NVD-CWE-Other	CVE-2003-0256	2008-09-11 04:18	2003-05-27	Show	GitHub Exploit DB Packet Storm

346149	4.6	MEDIUM	fuzz	fuzz	fuzz 0.6 and earlier creates temporary files insecurely, which could allow local users to gain root privileges.	NVD-CWE-Other	CVE-2003-0261	2008-09-11 04:18	2003-05-27	Show	GitHub Exploit DB Packet Storm

346150	7.5	HIGH	apple kde redhat turbolinux	safari konqueror_embedded kde linux turbolinux_server turbolinux_workstation	Konqueror Embedded and KDE 2.2.2 and earlier does not validate the Common Name (CN) field for X.509 Certificates, which could allow remote attackers to spoof certificates via a man-in-the-middle atta…	NVD-CWE-Other	CVE-2003-0370	2008-09-11 04:18	2003-06-16	Show	GitHub Exploit DB Packet Storm