NVD Vulnerability Information Top

Show Search Menu

Vendor Name
プロダクト・サービス名
Title
CVE
CRITICAL
HIGH
MEDIUM
LOW
CWE
In descending order of publication date
In descending order of update date
Number of items displayed

NVD Vulnerability Information Top

You can search the list of vulnerabilities managed by the NVD (National Vulnerability Database).
Since vulnerability information is often updated before JVN (Japan Vulnerability Note), vulnerabilities that are not listed in JVN may be updated.

If there is a vulnerability related to JVN (Japan Vulnerability Note), the information will be displayed on the detail page.

To search by CWE, please refer to the CWE Overview and check the CWE number.

CRITICAL
HIGH
MEDIUM
LOW

Update Date:May 17, 2026, 4:15 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
352351	5.0	MEDIUM	cgiscript.net	csnews	CGIScript.net csNews.cgi allows remote attackers to obtain potentially sensitive information, such as the full server pathname and other configuration settings, via the viewnews command with an inval…	NVD-CWE-Other	CVE-2002-0921	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

352352	5.0	MEDIUM	cgiscript.net	csnews	CGIScript.net csNews.cgi allows remote attackers to obtain database files via a direct URL-encoded request to (1) default%2edb or (2) default%2edb.style, or remote authenticated users to perform admi…	NVD-CWE-Other	CVE-2002-0922	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

352353	7.5	HIGH	cgiscript.net	csnews	CGIScript.net csNews.cgi allows remote authenticated users to read arbitrary files, and possibly gain privileges, via the (1) pheader or (2) pfooter parameters in the "Advanced Settings" capability.	NVD-CWE-Other	CVE-2002-0923	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

352354	7.5	HIGH	matthew_mondor	mmftpd mmmail	Format string vulnerability in mmsyslog function allows remote attackers to execute arbitrary code via (1) the USER command to mmpop3d for mmmail 0.0.13 and earlier, (2) the HELO command to mmsmtpd f…	NVD-CWE-Other	CVE-2002-0925	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

352355	5.0	MEDIUM	wolfram_research	webmathematica	Directory traversal vulnerability in Wolfram Research webMathematica 1.0.0 and 1.0.0.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the MSPStoreID parameter.	NVD-CWE-Other	CVE-2002-0926	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

352356	7.5	HIGH	pirch	pirch_irc	Buffer overflow in the Pirch 98 IRC client allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long hyperlink in a channel or private message.	NVD-CWE-Other	CVE-2002-0928	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

352357	5.0	MEDIUM	novell	netware	Buffer overflows in the DHCP server for NetWare 6.0 SP1 allow remote attackers to cause a denial of service (reboot) via long DHCP requests.	NVD-CWE-Other	CVE-2002-0929	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

352358	5.0	MEDIUM	novell	netware	Format string vulnerability in the FTP server for Novell Netware 6.0 SP1 (NWFTPD) allows remote attackers to cause a denial of service (ABEND) via format strings in the USER command.	NVD-CWE-Other	CVE-2002-0930	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

352359	7.5	HIGH	luis_bernardo	myhelpdesk	Cross-site scripting vulnerabilities in MyHelpDesk 20020509, and possibly other versions, allows remote attackers to execute script as other users via a (1) Title or (2) Description when a new ticket…	NVD-CWE-Other	CVE-2002-0931	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

352360	6.4	MEDIUM	luis_bernardo	myhelpdesk	SQL injection vulnerability in index.php for MyHelpDesk 20020509, and possibly other versions, allows remote attackers to conduct unauthorized activities via SQL code in the "id" parameter for the op…	NVD-CWE-Other	CVE-2002-0932	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

352361	7.5	HIGH	datalex	bookit_consumer	Datalex PLC BookIt! Consumer before 2.2 stores usernames and passwords in plaintext in a cookie, which could allow remote attackers to gain privileges via Cross-site scripting or sniffing attacks.	NVD-CWE-Other	CVE-2002-0933	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

352362	6.4	MEDIUM	jon_hedley	alienform2	Directory traversal vulnerability in Jon Hedley AlienForm2 (typically installed as af.cgi or alienform.cgi) allows remote attackers to read or modify arbitrary files via an illegal character in the m…	NVD-CWE-Other	CVE-2002-0934	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

352363	5.0	MEDIUM	macromedia	jrun	The Java Server Pages (JSP) engine in JRun allows web page owners to cause a denial of service (engine crash) on the web server via a JSP page that calls WPrinterJob().pageSetup(null,null).	NVD-CWE-Other	CVE-2002-0937	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

352364	7.5	HIGH	cisco	secure_access_control_server	Cross-site scripting vulnerability in CiscoSecure ACS 3.0 allows remote attackers to execute arbitrary script or HTML as other web users via the action argument in a link to setup.exe.	NVD-CWE-Other	CVE-2002-0938	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

352365	4.6	MEDIUM	ncipher	nforce nshield	The ConsoleCallBack class for nCipher running under JRE 1.4.0 and 1.4.0_01, as used by the TrustedCodeTool and possibly other applications, may leak a passphrase when the user aborts an application t…	NVD-CWE-Other	CVE-2002-0941	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

352366	7.5	HIGH	lumigent	log_explorer	Buffer overflows in Lugiment Log Explorer before 3.02 allow attackers with database permissions to execute arbitrary code via long arguments to the extended stored procedures (1) xp_logattach_StartPr…	NVD-CWE-Other	CVE-2002-0942	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

352367	6.4	MEDIUM	metalinks	metacart2.sql	MetaCart2.sql stores the user database under the web document root without access controls, which allows remote attackers to obtain sensitive information such as passwords and credit card numbers via…	NVD-CWE-Other	CVE-2002-0943	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

352368	7.5	HIGH	deepmetrix	livestats	Cross-site scripting vulnerability in DeepMetrix LiveStats 5.03 through 6.2.1 allows remote attackers to execute arbitrary script as the LiveStats user via the (1) user-agent or (2) referrer, which a…	NVD-CWE-Other	CVE-2002-0944	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

352369	7.5	HIGH	seanox	devwex	Buffer overflow in SeaNox Devwex allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request.	NVD-CWE-Other	CVE-2002-0945	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

352370	5.0	MEDIUM	seanox	devwex	Directory traversal vulnerability in SeaNox Devwex before 1.2002.0601 allows remote attackers to read arbitrary files via ..\ (dot dot) sequences in an HTTP request.	NVD-CWE-Other	CVE-2002-0946	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

352371	7.5	HIGH	oracle	application_server reports	Buffer overflow in rwcgi60 CGI program for Oracle Reports Server 6.0.8.18.0 and earlier, as used in Oracle9iAS and other products, allows remote attackers to execute arbitrary code via a long databas…	NVD-CWE-Other	CVE-2002-0947	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

352372	7.5	HIGH	telindus	adsl_router	Telindus 1100 series ADSL router allows remote attackers to gain privileges to the device via a certain packet to UDP port 9833, which generates a reply that includes the router's password and other …	NVD-CWE-Other	CVE-2002-0949	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

352373	7.5	HIGH	transware	active_mail	Cross-site scripting vulnerability in TransWARE Active! mail 1.422 and 2.0 allows remote attackers to execute arbitrary code via a certain e-mail header, which is not properly filtered.	NVD-CWE-Other	CVE-2002-0950	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

352374	10.0	HIGH	ruslan_communications	body_builder	SQL injection vulnerability in Ruslan <Body>Builder allows remote attackers to gain administrative privileges via a "'--" sequence in the username and password.	NVD-CWE-Other	CVE-2002-0951	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

352375	7.5	HIGH	php_address	php_address	globals.php in PHP Address before 0.2f, with the PHP allow_url_fopen and register_globals variables enabled, allows remote attackers to execute arbitrary PHP code via a URL to the code in the LangCoo…	NVD-CWE-Other	CVE-2002-0953	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

352376	7.5	HIGH	yabb	yabb	Cross-site scripting vulnerability in YaBB.cgi for Yet Another Bulletin Board (YaBB) 1 Gold SP1 and earlier allows remote attackers to execute arbitrary script as other web site visitors via script i…	NVD-CWE-Other	CVE-2002-0955	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

352377	7.5	HIGH	iss	blackice_agent	BlackICE Agent 3.1.eal does not always reactivate after a system standby, which could allow remote attackers and local users to bypass intended firewall restrictions.	NVD-CWE-Other	CVE-2002-0956	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

352378	5.0	MEDIUM	iss	blackice_agent	The default configuration of BlackICE Agent 3.1.eal and 3.1.ebh has a high tcp.maxconnections setting, which could allow remote attackers to cause a denial of service (memory consumption) via a large…	NVD-CWE-Other	CVE-2002-0957	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

352379	7.5	HIGH	ekilat_llc	php\(reactor\)	Cross-site scripting vulnerability in browse.php for PHP(Reactor) 1.2.7 allows remote attackers to execute script as other users via the go parameter in the comments section.	NVD-CWE-Other	CVE-2002-0958	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

352380	7.5	HIGH	splatt	splatt_forum	Cross-site scripting vulnerability in Splatt Forum 3.0 allows remote attackers to execute arbitrary script as other users via an [img] tag with a closing quote followed by the script.	NVD-CWE-Other	CVE-2002-0959	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

352381	7.5	HIGH	voxel	cbms	Multiple cross-site scripting vulnerabilities in Voxel Dot Net CBMS 0.7 and earlier allows remote attackers to execute arbitrary script as other CBMS users.	NVD-CWE-Other	CVE-2002-0960	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

352382	7.5	HIGH	voxel	cbms	Vulnerabilities in Voxel Dot Net CBMS 0.7 and earlier allow remote attackers to conduct unauthorized operations as other users, e.g. by deleting clients via dltclnt.php, possibly in a SQL injection a…	NVD-CWE-Other	CVE-2002-0961	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

352383	7.5	HIGH	geeklog	geeklog	Cross-site scripting vulnerabilities in GeekLog 1.3.5 and earlier allow remote attackers to execute arbitrary script via (1) the url variable in the Link field of a calendar event, (2) the topic para…	NVD-CWE-Other	CVE-2002-0962	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

352384	5.0	MEDIUM	geeklog	geeklog	SQL injection vulnerability in comment.php for GeekLog 1.3.5 and earlier allows remote attackers to obtain sensitive user information via the pid parameter.	NVD-CWE-Other	CVE-2002-0963	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

352385	5.0	MEDIUM	valve_software	half-life half-life_dedicated_server	Half-Life Server 1.1.1.0 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via multiple responses to the initial challenge with different cd_key values, which rea…	NVD-CWE-Other	CVE-2002-0964	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

352386	7.5	HIGH	oracle	oracle9i	Buffer overflow in TNS Listener for Oracle 9i Database Server on Windows systems, and Oracle 8 on VM, allows local users to execute arbitrary code via a long SERVICE_NAME parameter, which is not prop…	NVD-CWE-Other	CVE-2002-0965	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

352387	7.5	HIGH	aci	4d_webserver	Buffer overflow in 4D web server 6.7.3 allow remote attackers to cause a denial of service and possibly execute arbitrary code via a long HTTP request.	NVD-CWE-Other	CVE-2002-0966	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

352388	7.5	HIGH	edonkey2000	edonkey_2000_client	Buffer overflow in eDonkey 2000 35.16.60 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long "ed2k:" URL.	NVD-CWE-Other	CVE-2002-0967	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

352389	7.2	HIGH	hp	cifs-9000_server	Buffer overflows in the cifslogin command for HP CIFS/9000 Client A.01.06 and earlier, based on the Sharity package, allows local users to gain root privileges via long (1) -U, (2) -D, (3) -P, (4) -S…	NVD-CWE-Other	CVE-2002-0991	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

352390	2.1	LOW	hp	hp-ux	Unknown vulnerability in IPV6 functionality for DCE daemons (1) dced or (2) rpcd on HP-UX 11.11 allows attackers to cause a denial of service (crash) via an attack that modifies internal data.	NVD-CWE-Other	CVE-2002-0992	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

352391	7.5	HIGH	sun	sun_pci_ii_driver	SunPCi II VNC uses a weak authentication scheme, which allows remote attackers to obtain the VNC password by sniffing the random byte challenge, which is used as the key for encrypted communications.	NVD-CWE-Other	CVE-2002-0994	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

352392	7.5	HIGH	gianluca_baldo	phpauction	login.php for PHPAuction allows remote attackers to gain privileges via a direct call to login.php with the action parameter set to "insert," which adds the provided username to the adminUsers table.	NVD-CWE-Other	CVE-2002-0995	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

352393	7.5	HIGH	novell	netmail netmail_xe	Multiple buffer overflows in Novell NetMail (NIMS) 3.0.3 before 3.0.3C allows remote attackers to cause a denial of service and possibly execute arbitrary code via (1) WebAdmin or (2) ModWeb.	NVD-CWE-Other	CVE-2002-0996	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

352394	5.0	MEDIUM	novell	netmail netmail_xe	Buffer overflows in IMAP Agent (imapd) for Novell NetMail (NIMS) 3.0.3 before 3.0.3A allows remote attackers to cause a denial of service.	NVD-CWE-Other	CVE-2002-0997	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

352395	7.5	HIGH	analogx	simpleserver_shout	Buffer overflow in AnalogX SimpleServer:Shout 1.0 allows remote attackers to cause a denial of service and execute arbitrary code via a long request to TCP port 8001.	NVD-CWE-Other	CVE-2002-1000	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

352396	7.5	HIGH	analogx	proxy	Buffer overflows in AnalogX Proxy before 4.12 allows remote attackers to cause a denial of service and possibly execute arbitrary code via (1) a long HTTP request to TCP port 6588 or (2) a SOCKS 4A r…	NVD-CWE-Other	CVE-2002-1001	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

352397	5.0	MEDIUM	novell	emframe	Buffer overflow in Novell iManager (eMFrame 1.2.1) allows remote attackers to cause a denial of service (crash) via a long user name.	NVD-CWE-Other	CVE-2002-1002	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

352398	7.5	HIGH	mywebserver	mywebserver	Buffer overflow in MyWebServer 1.02 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.	NVD-CWE-Other	CVE-2002-1003	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

352399	5.0	MEDIUM	argosoft	argosoft_mail_server	Directory traversal vulnerability in webmail feature of ArGoSoft Mail Server Plus or Pro 1.8.1.5 and earlier allows remote attackers to read arbitrary files via .. (dot dot) sequences in a URL.	NVD-CWE-Other	CVE-2002-1004	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

352400	6.8	MEDIUM	bbc_education	betsie	Cross-site scripting (XSS) vulnerability in BBC Education Text to Speech Internet Enhancer (Betsie) 1.5.11 and earlier allows remote attackers to execute arbitrary web script via parserl.pl.	NVD-CWE-Other	CVE-2002-1006	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm