NVD Vulnerability Information Top

Show Search Menu

Vendor Name
プロダクト・サービス名
Title
CVE
CRITICAL
HIGH
MEDIUM
LOW
CWE
In descending order of publication date
In descending order of update date
Number of items displayed

NVD Vulnerability Information Top

You can search the list of vulnerabilities managed by the NVD (National Vulnerability Database).
Since vulnerability information is often updated before JVN (Japan Vulnerability Note), vulnerabilities that are not listed in JVN may be updated.

If there is a vulnerability related to JVN (Japan Vulnerability Note), the information will be displayed on the detail page.

To search by CWE, please refer to the CWE Overview and check the CWE number.

CRITICAL
HIGH
MEDIUM
LOW

Update Date:May 11, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
350501	7.5	HIGH	mit	pgp_public_key_server	Buffer overflow in pks PGP public key web server before 0.9.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long search argument to the lookup…	NVD-CWE-Other	CVE-2002-0900	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

350502	10.0	HIGH	amanda	amanda	Multiple buffer overflows in Advanced Maryland Automatic Network Disk Archiver (AMANDA) 2.3.0.4 allow (1) remote attackers to execute arbitrary code via long commands to the amindexd daemon, or certa…	NVD-CWE-Other	CVE-2002-0901	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

350503	7.5	HIGH	phpbb_group	phpbb	Cross-site scripting vulnerability in phpBB 2.0.0 (phpBB2) allows remote attackers to execute Javascript as other phpBB users by including a http:// and a double-quote (") in the [IMG] tag, which byp…	NVD-CWE-Other	CVE-2002-0902	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

350504	7.5	HIGH	woltlab	burning_board	register.php for WoltLab Burning Board (wbboard) 1.1.1 uses a small number of random values for the "code" parameter that is provided to action.php to approve a new registration, along with predictab…	NVD-CWE-Other	CVE-2002-0903	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

350505	7.2	HIGH	ibm	informix	Buffer overflow in sqlexec for Informix SE-7.25 allows local users to gain root privileges via a long INFORMIXDIR environment variable.	NVD-CWE-Other	CVE-2002-0905	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

350506	7.5	HIGH	nullsoft	shoutcast_server	Buffer overflow in SHOUTcast 1.8.9 and other versions before 1.8.12 allows a remote authenticated DJ to execute arbitrary code on the server via a long value in a header whose name begins with "icy-".	NVD-CWE-Other	CVE-2002-0907	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

350507	5.0	MEDIUM	cisco	ids_device_manager	Directory traversal vulnerability in the web server for Cisco IDS Device Manager before 3.1.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTPS request.	NVD-CWE-Other	CVE-2002-0908	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

350508	7.5	HIGH	debian	netstd	Buffer overflows in netstd 3.07-17 package allows remote DNS servers to execute arbitrary code via a long FQDN reply, as observed in the utilities (1) linux-ftpd, (2) pcnfsd, (3) tftp, (4) traceroute…	NVD-CWE-Other	CVE-2002-0910	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

350509	7.2	HIGH	caldera	volution_manager	Caldera Volution Manager 1.1 stores the Directory Administrator password in cleartext in the slapd.conf file, which could allow local users to gain privileges.	NVD-CWE-Other	CVE-2002-0911	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

350510	5.0	MEDIUM	debian	debian_linux	in.uucpd UUCP server in Debian GNU/Linux 2.2, and possibly other operating systems, does not properly terminate long strings, which allows remote attackers to cause a denial of service, possibly due …	NVD-CWE-Other	CVE-2002-0912	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

350511	5.0	MEDIUM	double_precision_incorporated	courier_mta	Double Precision Courier e-mail MTA allows remote attackers to cause a denial of service (CPU consumption) via a message with an extremely large or negative value for the year, which causes a tight l…	NVD-CWE-Other	CVE-2002-0914	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

350512	2.1	LOW	harald_hoyer	autorun xandros_desktop_os	autorun in Xandros based Linux distributions allows local users to read the first line of arbitrary files via the -c parameter, which causes autorun to print the first line of the file.	NVD-CWE-Other	CVE-2002-0915	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

350513	7.5	HIGH	stellar-x_software	msntauth	Format string vulnerability in the allowuser code for the Stellar-X msntauth authentication module, as distributed in Squid 2.4.STABLE6 and earlier, allows remote attackers to execute arbitrary code …	NVD-CWE-Other	CVE-2002-0916	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

350514	7.5	HIGH	cgiscript.net	cspassword	CGIScript.net csPassword.cgi stores .htpasswd files under the web document root, which could allow remote authenticated users to download the file and crack the passwords of other users.	NVD-CWE-Other	CVE-2002-0917	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

350515	5.0	MEDIUM	cgiscript.net	cspassword	CGIScript.net csPassword.cgi leaks sensitive information such as the pathname of the server in debug messages that are presented when the script fails, which allows remote attackers to obtain the inf…	NVD-CWE-Other	CVE-2002-0918	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

350516	7.5	HIGH	cgiscript.net	cspassword	CGIScript.net csPassword.cgi allows remote authenticated users to modify the .htaccess file and gain privileges via newlines in the title field of the edit page.	NVD-CWE-Other	CVE-2002-0919	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

350517	5.0	MEDIUM	cgiscript.net	csnews	CGIScript.net csNews.cgi allows remote attackers to obtain potentially sensitive information, such as the full server pathname and other configuration settings, via the viewnews command with an inval…	NVD-CWE-Other	CVE-2002-0921	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

350518	5.0	MEDIUM	cgiscript.net	csnews	CGIScript.net csNews.cgi allows remote attackers to obtain database files via a direct URL-encoded request to (1) default%2edb or (2) default%2edb.style, or remote authenticated users to perform admi…	NVD-CWE-Other	CVE-2002-0922	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

350519	7.5	HIGH	cgiscript.net	csnews	CGIScript.net csNews.cgi allows remote authenticated users to read arbitrary files, and possibly gain privileges, via the (1) pheader or (2) pfooter parameters in the "Advanced Settings" capability.	NVD-CWE-Other	CVE-2002-0923	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

350520	7.5	HIGH	matthew_mondor	mmftpd mmmail	Format string vulnerability in mmsyslog function allows remote attackers to execute arbitrary code via (1) the USER command to mmpop3d for mmmail 0.0.13 and earlier, (2) the HELO command to mmsmtpd f…	NVD-CWE-Other	CVE-2002-0925	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

350521	5.0	MEDIUM	wolfram_research	webmathematica	Directory traversal vulnerability in Wolfram Research webMathematica 1.0.0 and 1.0.0.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the MSPStoreID parameter.	NVD-CWE-Other	CVE-2002-0926	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

350522	7.5	HIGH	pirch	pirch_irc	Buffer overflow in the Pirch 98 IRC client allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long hyperlink in a channel or private message.	NVD-CWE-Other	CVE-2002-0928	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

350523	5.0	MEDIUM	novell	netware	Buffer overflows in the DHCP server for NetWare 6.0 SP1 allow remote attackers to cause a denial of service (reboot) via long DHCP requests.	NVD-CWE-Other	CVE-2002-0929	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

350524	5.0	MEDIUM	novell	netware	Format string vulnerability in the FTP server for Novell Netware 6.0 SP1 (NWFTPD) allows remote attackers to cause a denial of service (ABEND) via format strings in the USER command.	NVD-CWE-Other	CVE-2002-0930	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

350525	7.5	HIGH	luis_bernardo	myhelpdesk	Cross-site scripting vulnerabilities in MyHelpDesk 20020509, and possibly other versions, allows remote attackers to execute script as other users via a (1) Title or (2) Description when a new ticket…	NVD-CWE-Other	CVE-2002-0931	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

350526	6.4	MEDIUM	luis_bernardo	myhelpdesk	SQL injection vulnerability in index.php for MyHelpDesk 20020509, and possibly other versions, allows remote attackers to conduct unauthorized activities via SQL code in the "id" parameter for the op…	NVD-CWE-Other	CVE-2002-0932	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

350527	7.5	HIGH	datalex	bookit_consumer	Datalex PLC BookIt! Consumer before 2.2 stores usernames and passwords in plaintext in a cookie, which could allow remote attackers to gain privileges via Cross-site scripting or sniffing attacks.	NVD-CWE-Other	CVE-2002-0933	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

350528	6.4	MEDIUM	jon_hedley	alienform2	Directory traversal vulnerability in Jon Hedley AlienForm2 (typically installed as af.cgi or alienform.cgi) allows remote attackers to read or modify arbitrary files via an illegal character in the m…	NVD-CWE-Other	CVE-2002-0934	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

350529	5.0	MEDIUM	macromedia	jrun	The Java Server Pages (JSP) engine in JRun allows web page owners to cause a denial of service (engine crash) on the web server via a JSP page that calls WPrinterJob().pageSetup(null,null).	NVD-CWE-Other	CVE-2002-0937	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

350530	7.5	HIGH	cisco	secure_access_control_server	Cross-site scripting vulnerability in CiscoSecure ACS 3.0 allows remote attackers to execute arbitrary script or HTML as other web users via the action argument in a link to setup.exe.	NVD-CWE-Other	CVE-2002-0938	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

350531	4.6	MEDIUM	ncipher	nforce nshield	The ConsoleCallBack class for nCipher running under JRE 1.4.0 and 1.4.0_01, as used by the TrustedCodeTool and possibly other applications, may leak a passphrase when the user aborts an application t…	NVD-CWE-Other	CVE-2002-0941	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

350532	7.5	HIGH	lumigent	log_explorer	Buffer overflows in Lugiment Log Explorer before 3.02 allow attackers with database permissions to execute arbitrary code via long arguments to the extended stored procedures (1) xp_logattach_StartPr…	NVD-CWE-Other	CVE-2002-0942	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

350533	6.4	MEDIUM	metalinks	metacart2.sql	MetaCart2.sql stores the user database under the web document root without access controls, which allows remote attackers to obtain sensitive information such as passwords and credit card numbers via…	NVD-CWE-Other	CVE-2002-0943	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

350534	7.5	HIGH	deepmetrix	livestats	Cross-site scripting vulnerability in DeepMetrix LiveStats 5.03 through 6.2.1 allows remote attackers to execute arbitrary script as the LiveStats user via the (1) user-agent or (2) referrer, which a…	NVD-CWE-Other	CVE-2002-0944	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

350535	7.5	HIGH	seanox	devwex	Buffer overflow in SeaNox Devwex allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request.	NVD-CWE-Other	CVE-2002-0945	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

350536	5.0	MEDIUM	seanox	devwex	Directory traversal vulnerability in SeaNox Devwex before 1.2002.0601 allows remote attackers to read arbitrary files via ..\ (dot dot) sequences in an HTTP request.	NVD-CWE-Other	CVE-2002-0946	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

350537	7.5	HIGH	oracle	application_server reports	Buffer overflow in rwcgi60 CGI program for Oracle Reports Server 6.0.8.18.0 and earlier, as used in Oracle9iAS and other products, allows remote attackers to execute arbitrary code via a long databas…	NVD-CWE-Other	CVE-2002-0947	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

350538	7.5	HIGH	telindus	adsl_router	Telindus 1100 series ADSL router allows remote attackers to gain privileges to the device via a certain packet to UDP port 9833, which generates a reply that includes the router's password and other …	NVD-CWE-Other	CVE-2002-0949	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

350539	7.5	HIGH	transware	active_mail	Cross-site scripting vulnerability in TransWARE Active! mail 1.422 and 2.0 allows remote attackers to execute arbitrary code via a certain e-mail header, which is not properly filtered.	NVD-CWE-Other	CVE-2002-0950	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

350540	10.0	HIGH	ruslan_communications	body_builder	SQL injection vulnerability in Ruslan <Body>Builder allows remote attackers to gain administrative privileges via a "'--" sequence in the username and password.	NVD-CWE-Other	CVE-2002-0951	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

350541	7.5	HIGH	php_address	php_address	globals.php in PHP Address before 0.2f, with the PHP allow_url_fopen and register_globals variables enabled, allows remote attackers to execute arbitrary PHP code via a URL to the code in the LangCoo…	NVD-CWE-Other	CVE-2002-0953	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

350542	7.5	HIGH	yabb	yabb	Cross-site scripting vulnerability in YaBB.cgi for Yet Another Bulletin Board (YaBB) 1 Gold SP1 and earlier allows remote attackers to execute arbitrary script as other web site visitors via script i…	NVD-CWE-Other	CVE-2002-0955	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

350543	7.5	HIGH	iss	blackice_agent	BlackICE Agent 3.1.eal does not always reactivate after a system standby, which could allow remote attackers and local users to bypass intended firewall restrictions.	NVD-CWE-Other	CVE-2002-0956	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

350544	5.0	MEDIUM	iss	blackice_agent	The default configuration of BlackICE Agent 3.1.eal and 3.1.ebh has a high tcp.maxconnections setting, which could allow remote attackers to cause a denial of service (memory consumption) via a large…	NVD-CWE-Other	CVE-2002-0957	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

350545	7.5	HIGH	ekilat_llc	php\(reactor\)	Cross-site scripting vulnerability in browse.php for PHP(Reactor) 1.2.7 allows remote attackers to execute script as other users via the go parameter in the comments section.	NVD-CWE-Other	CVE-2002-0958	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

350546	7.5	HIGH	splatt	splatt_forum	Cross-site scripting vulnerability in Splatt Forum 3.0 allows remote attackers to execute arbitrary script as other users via an [img] tag with a closing quote followed by the script.	NVD-CWE-Other	CVE-2002-0959	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

350547	7.5	HIGH	voxel	cbms	Multiple cross-site scripting vulnerabilities in Voxel Dot Net CBMS 0.7 and earlier allows remote attackers to execute arbitrary script as other CBMS users.	NVD-CWE-Other	CVE-2002-0960	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

350548	7.5	HIGH	voxel	cbms	Vulnerabilities in Voxel Dot Net CBMS 0.7 and earlier allow remote attackers to conduct unauthorized operations as other users, e.g. by deleting clients via dltclnt.php, possibly in a SQL injection a…	NVD-CWE-Other	CVE-2002-0961	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

350549	7.5	HIGH	geeklog	geeklog	Cross-site scripting vulnerabilities in GeekLog 1.3.5 and earlier allow remote attackers to execute arbitrary script via (1) the url variable in the Link field of a calendar event, (2) the topic para…	NVD-CWE-Other	CVE-2002-0962	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

350550	5.0	MEDIUM	geeklog	geeklog	SQL injection vulnerability in comment.php for GeekLog 1.3.5 and earlier allows remote attackers to obtain sensitive user information via the pid parameter.	NVD-CWE-Other	CVE-2002-0963	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm