NVD Vulnerability Information Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
CRITICAL
HIGH
MEDIUM
LOW
CWE
In descending order of publication date
In descending order of update date
Number of items displayed

You can search the list of vulnerabilities managed by the NVD (National Vulnerability Database).
Since vulnerability information is often updated before JVN (Japan Vulnerability Note), vulnerabilities that are not listed in JVN may be updated.

If there is a vulnerability related to JVN (Japan Vulnerability Note), the information will be displayed on the detail page.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • CRITICAL
  • HIGH
  • MEDIUM
  • LOW

Update Date:June 16, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
357901 7.5 HIGH
lgames ltris Buffer overflow in LTris before 1.0.10 allows local users to execute arbitrary code via a crafted highscores file. NVD-CWE-Other
CVE-2005-0825 2008-09-6 05:47 2005-05-2 Show GitHub Exploit DB Packet Storm
357902 7.5 HIGH
xzabite dyndnsupdate Multiple buffer overflows in Xzabite DYNDNSUpdate 0.6.15 and earlier, including the ipcheck function in dyndnsupdate.c, allow remote attackers who spoof a dyndns.org server to execute arbitrary code … NVD-CWE-Other
CVE-2005-0830 2008-09-6 05:47 2005-05-2 Show GitHub Exploit DB Packet Storm
357903 5.0 MEDIUM
php-post php-post_web_forum PHP-Post allows remote attackers to spoof the names of other users by registering with a username containing hex-encoded characters. NVD-CWE-Other
CVE-2005-0831 2008-09-6 05:47 2005-05-2 Show GitHub Exploit DB Packet Storm
357904 7.5 HIGH
belkin belkin_54g_wireless_router Belkin 54G (F5D7130) wireless router allows remote attackers to access restricted resources by sniffing URIs from UPNP datagrams, then accessing those URIs, which do not require authentication. NVD-CWE-Other
CVE-2005-0833 2008-09-6 05:47 2005-05-2 Show GitHub Exploit DB Packet Storm
357905 5.0 MEDIUM
- - Belkin 54G (F5D7130) wireless router enables SNMP by default in a manner that allows remote attackers to obtain sensitive information. NVD-CWE-Other
CVE-2005-0834 2008-09-6 05:47 2005-05-2 Show GitHub Exploit DB Packet Storm
357906 5.0 MEDIUM
belkin 54g_wireless_router The SNMP service in the Belkin 54G (F5D7130) wireless router allows remote attackers to cause a denial of service via unknown vectors. NVD-CWE-Other
CVE-2005-0835 2008-09-6 05:47 2005-05-2 Show GitHub Exploit DB Packet Storm
357907 5.0 MEDIUM
funlabs 4x4_off-road_adventure_iii
cabelas_big_game_hunter_2004_season
cabelas_big_game_hunter_2005
cabelas_dangerous_hunts
cabelas_deer_hunt_2005_season
revolution
secret_service_in_harms_… 		Multiple games developed by FUN labs, including 4X4 Off-road Adventure III, Big Game Hunter, Dangerous Hunts, Deer Hunt, Revolution, Secret Service, Shadow Force, and US Most Wanted, allow remote att… NVD-CWE-Other
CVE-2005-0849 2008-09-6 05:47 2005-05-2 Show GitHub Exploit DB Packet Storm
357908 2.1 LOW
- - Microsoft Windows XP SP1 allows local users to cause a denial of service (system crash) via an empty datagram to a raw IP over IP socket (IP protocol 4), as originally demonstrated using code in Pyth… NVD-CWE-Other
CVE-2005-0852 2008-09-6 05:47 2005-05-2 Show GitHub Exploit DB Packet Storm
357909 10.0 HIGH
coolforum coolforum CoolForum 0.8.1 beta and earlier allows remote attackers to obtain sensitive path information via direct requests to (1) entete.php, (2) profile_accueil.php, (3) profile_mdp.php, (4) profile_notify.p… NVD-CWE-Other
CVE-2005-0855 2008-09-6 05:47 2005-05-2 Show GitHub Exploit DB Packet Storm
357910 7.5 HIGH
coolforum coolforum CoolForum 0.8.1 beta and earlier allows remote attackers to manipulate SQL commands via certain requests to (1) alert.php or (2) viewip.php, possibly due to a SQL injection vulnerability. NVD-CWE-Other
CVE-2005-0856 2008-09-6 05:47 2005-05-2 Show GitHub Exploit DB Packet Storm
357911 7.5 HIGH
the_rusted_gate trg_news PHP remote file inclusion vulnerability in TRG News Script 3.0 allows remote attackers to execute arbitrary PHP code via the dir parameter to (1) article.php, (2) authorall.php, (3) comment.php, (4) … NVD-CWE-Other
CVE-2005-0860 2008-09-6 05:47 2005-05-2 Show GitHub Exploit DB Packet Storm
357912 5.0 MEDIUM
securecomputing samsung_adsl_modem The Boa web server, as used in Samsung ADSL Modem SMDK8947v1.2 and possibly other products, allows remote attackers to read arbitrary files via a full pathname in the HTTP request. NVD-CWE-Other
CVE-2005-0864 2008-09-6 05:47 2005-05-2 Show GitHub Exploit DB Packet Storm
357913 7.5 HIGH
securecomputing samsung_adsl_modem Samsung ADSL Modem SMDK8947v1.2 uses default passwords for the (1) root, (2) admin, or (3) user users, which allows remote attackers to gain privileges via Telnet or an HTTP request to adsl.cgi. NVD-CWE-Other
CVE-2005-0865 2008-09-6 05:47 2005-05-2 Show GitHub Exploit DB Packet Storm
357914 4.3 MEDIUM
invision_power_services invision_board Cross-site scripting (XSS) vulnerability in Invision Power Board 2.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via an HTTP POST request. NVD-CWE-Other
CVE-2005-0886 2008-09-6 05:47 2005-05-2 Show GitHub Exploit DB Packet Storm
357915 4.3 MEDIUM
dream4 koobi_cms Cross-site scripting (XSS) vulnerability in index.php for Dream4 Koobi CMS 4.2.3 allows remote attackers to inject arbitrary web script or HTML via the area parameter. NVD-CWE-Other
CVE-2005-0889 2008-09-6 05:47 2005-03-24 Show GitHub Exploit DB Packet Storm
357916 7.5 HIGH
dream4 koobi_cms SQL injection vulnerability in Dream4 Koobi CMS 4.2.3 allows remote attackers to execute arbitrary SQL commands via the area parameter. NVD-CWE-Other
CVE-2005-0890 2008-09-6 05:47 2005-05-2 Show GitHub Exploit DB Packet Storm
357917 7.5 HIGH
instance_four
sacred
ubi_soft 		tincat
sacred
the_settlersheritage_of_kings 		Buffer overflow in a player logging function in the Tincat network library 2.x before 2.0.28, as used in games such as Sacred and The Settlers: Heritage of Kings, allows remote attackers to execute a… NVD-CWE-Other
CVE-2005-0906 2008-09-6 05:47 2005-05-2 Show GitHub Exploit DB Packet Storm
357918 7.5 HIGH
valdersoft shopping_cart Multiple SQL injection vulnerabilities in Valdersoft Shopping Cart 3.0 allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to category.php, (2) the id parameter to item.… NVD-CWE-Other
CVE-2005-0907 2008-09-6 05:47 2005-05-2 Show GitHub Exploit DB Packet Storm
357919 4.3 MEDIUM
valdersoft valdersoft_shopping_cart Multiple cross-site scripting (XSS) vulnerabilities in Valdersoft Shopping Cart 3.0 allow remote attackers to inject arbitrary web script or HTML via (1) the lang parameter to index.php or (2) the se… NVD-CWE-Other
CVE-2005-0908 2008-09-6 05:47 2005-03-28 Show GitHub Exploit DB Packet Storm
357920 4.3 MEDIUM
e-xoops e-xoops Multiple cross-site scripting (XSS) vulnerabilities in exoops allow remote attackers to inject arbitrary web script or HTML via (1) the sortdays parameter to viewforum.php or (2) the viewcat paramete… NVD-CWE-Other
CVE-2005-0910 2008-09-6 05:47 2005-05-2 Show GitHub Exploit DB Packet Storm
357921 7.5 HIGH
e-xoops e-xoops Multiple SQL injection vulnerabilities in exoops may allow remote attackers to execute arbitrary SQL commands via (1) the viewcat parameter to index.php or (2) the artid parameter in the viewarticle … NVD-CWE-Other
CVE-2005-0911 2008-09-6 05:47 2005-03-28 Show GitHub Exploit DB Packet Storm
357922 7.5 HIGH
deplate deplate Unknown vulnerabilities in deplate before 0.7.2 have unknown impact, possibly involving elements.rb. NVD-CWE-Other
CVE-2005-0912 2008-09-6 05:47 2005-03-24 Show GitHub Exploit DB Packet Storm
357923 4.3 MEDIUM
cpg-nuke cpg_dragonfly_cms Multiple cross-site scripting (XSS) vulnerabilities in CPG Dragonfly 9.0.2.0 allow remote attackers to inject arbitrary web script or HTML via (1) the profile parameter to index.php or (2) the cat pa… NVD-CWE-Other
CVE-2005-0914 2008-09-6 05:47 2005-03-26 Show GitHub Exploit DB Packet Storm
357924 7.5 HIGH
webmasters-debutants wd_guestbook Webmasters-Debutants WD Guestbook 2.8 allows remote attackers to bypass authentication and perform certain administrator actions via a direct HTTP POST request to (1) ajout_admin2.php or (2) suppr.ph… NVD-CWE-Other
CVE-2005-0915 2008-09-6 05:47 2005-05-2 Show GitHub Exploit DB Packet Storm
357925 2.1 LOW
linux linux_kernel AIO in the Linux kernel 2.6.11 on the PPC64 or IA64 architectures with CONFIG_HUGETLB_PAGE enabled allows local users to cause a denial of service (system panic) via a process that executes the io_qu… NVD-CWE-Other
CVE-2005-0916 2008-09-6 05:47 2005-05-2 Show GitHub Exploit DB Packet Storm
357926 7.5 HIGH
powerdev encapsbb PHP remote file inclusion vulnerability in index_header.php for EncapsBB 0.3.2_fixed, and possibly other versions, allows remote attackers to execute arbitrary PHP code via the root parameter. NVD-CWE-Other
CVE-2005-0917 2008-09-6 05:47 2005-05-2 Show GitHub Exploit DB Packet Storm
357927 7.5 HIGH
- - Multiple SQL injection vulnerabilities in Bugtracker.NET 2.0.1 allow remote attackers to execute arbitrary SQL commands via unknown vectors. NVD-CWE-Other
CVE-2005-0920 2008-09-6 05:47 2005-05-2 Show GitHub Exploit DB Packet Storm
357928 4.6 MEDIUM
microsoft outlook_connector Microsoft Outlook 2002 Connector for IBM Lotus Domino 2.0 allows local users to save passwords and login credentials locally, even when password caching is disabled by a group policy. NVD-CWE-Other
CVE-2005-0921 2008-09-6 05:47 2005-05-2 Show GitHub Exploit DB Packet Storm
357929 5.0 MEDIUM
symantec norton_antivirus
norton_internet_security
norton_system_works 		Unknown vulnerability in the Auto-Protect module in Symantec Norton AntiVirus 2004 and 2005, as also used in Internet Security 2004/2005 and System Works 2004/2005, allows attackers to cause a denial… NVD-CWE-Other
CVE-2005-0922 2008-09-6 05:47 2005-05-2 Show GitHub Exploit DB Packet Storm
357930 2.1 LOW
symantec norton_antivirus
norton_internet_security
norton_system_works 		The SmartScan feature in the Auto-Protect module for Symantec Norton AntiVirus 2004 and 2005, as also used in Internet Security 2004/2005 and System Works 2004/2005, allows attackers to cause a denia… NVD-CWE-Other
CVE-2005-0923 2008-09-6 05:47 2005-05-2 Show GitHub Exploit DB Packet Storm
357931 10.0 HIGH
web-app.org webapp Unknown vulnerability in subs.pl for WebAPP 0.9.9 through 0.9.9.2 has unknown impact and attack vectors, probably involving shell metacharacters or .. sequences. NVD-CWE-Other
CVE-2005-0927 2008-09-6 05:47 2005-05-2 Show GitHub Exploit DB Packet Storm
357932 4.3 MEDIUM
chatness chatness Cross-site scripting (XSS) vulnerability in message.php in Chatness 2.5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via (1) the user field or (2) the message paramete… NVD-CWE-Other
CVE-2005-0930 2008-09-6 05:47 2005-05-2 Show GitHub Exploit DB Packet Storm
357933 7.5 HIGH
jimmy the_includer PHP remote file inclusion vulnerability in The Includer 1.0 and 1.1 allows remote attackers to execute arbitrary PHP code. NVD-CWE-Other
CVE-2005-0931 2008-09-6 05:47 2005-03-29 Show GitHub Exploit DB Packet Storm
357934 4.3 MEDIUM
wackowiki wackowiki Multiple cross-site scripting (XSS) vulnerabilities in WackoWiki R4 allow remote attackers to inject arbitrary web script or HTML via unknown vectors. NVD-CWE-Other
CVE-2005-0934 2008-09-6 05:47 2005-05-2 Show GitHub Exploit DB Packet Storm
357935 7.5 HIGH
yepyep mtftpd Buffer overflow in the mt_do_dir function in YepYep mtftpd 0.0.3 may allow attackers to execute arbitrary code via a long path. NVD-CWE-Other
CVE-2005-0959 2008-09-6 05:47 2005-05-2 Show GitHub Exploit DB Packet Storm
357936 5.0 MEDIUM
openbsd openbsd Multiple vulnerabilities in the SACK functionality in (1) tcp_input.c and (2) tcp_usrreq.c OpenBSD 3.5 and 3.6 allow remote attackers to cause a denial of service (memory exhaustion or system crash). NVD-CWE-Other
CVE-2005-0960 2008-09-6 05:47 2005-05-2 Show GitHub Exploit DB Packet Storm
357937 4.3 MEDIUM
horde application_framework Cross-site scripting (XSS) vulnerability in Horde 3.0.4 before 3.0.4-RC2 allows remote attackers to inject arbitrary web script or HTML via the parent frame title. NVD-CWE-Other
CVE-2005-0961 2008-09-6 05:47 2005-05-2 Show GitHub Exploit DB Packet Storm
357938 4.6 MEDIUM
apple mac_os_x Heap-based buffer overflow in the syscall emulation functionality in Mac OS X before 10.3.9 allows local users to cause a denial of service (kernel panic) and possibly execute arbitrary code via craf… NVD-CWE-Other
CVE-2005-0969 2008-09-6 05:47 2005-05-12 Show GitHub Exploit DB Packet Storm
357939 4.6 MEDIUM
apple mac_os_x Stack-based buffer overflow in the semop system call in Mac OS X 10.3.9 and earlier allows local users to gain privileges via crafted arguments. NVD-CWE-Other
CVE-2005-0971 2008-09-6 05:47 2005-05-12 Show GitHub Exploit DB Packet Storm
357940 7.2 HIGH
apple mac_os_x
mac_os_x_server 		Integer overflow in the searchfs system call in Mac OS X 10.3.9 and earlier allows local users to execute arbitrary code via crafted parameters. NVD-CWE-Other
CVE-2005-0972 2008-09-6 05:47 2005-05-12 Show GitHub Exploit DB Packet Storm
357941 2.1 LOW
apple mac_os_x Unknown vulnerability in the setsockopt system call in Mac OS X 10.3.9 and earlier allows local users to cause a denial of service (memory exhaustion) via crafted arguments. NVD-CWE-Other
CVE-2005-0973 2008-09-6 05:47 2005-05-12 Show GitHub Exploit DB Packet Storm
357942 7.2 HIGH
apple mac_os_x Unknown vulnerability in the nfs_mount call in Mac OS X 10.3.9 and earlier allows local users to gain privileges via crafted arguments. NVD-CWE-Other
CVE-2005-0974 2008-09-6 05:47 2005-05-12 Show GitHub Exploit DB Packet Storm
357943 5.0 MEDIUM
apple
hmdt
omnigroup 		safari
shiira
omniweb 		AppleWebKit (WebCore and WebKit), as used in multiple products such as Safari 1.2 and OmniGroup OmniWeb 5.1, allows remote attackers to read arbitrary files via the XMLHttpRequest Javascript componen… NVD-CWE-Other
CVE-2005-0976 2008-09-6 05:47 2005-05-2 Show GitHub Exploit DB Packet Storm
357944 2.1 LOW
- - Unspecified vulnerability in the Mac OS X kernel before 10.3.8 allows local users to cause a denial of service (temporary hang) via unspecified attack vectors related to the fan control unit (FCU) dr… NVD-CWE-Other
CVE-2005-0985 2008-09-6 05:47 2005-12-31 Show GitHub Exploit DB Packet Storm
357945 5.0 MEDIUM
irc_services nickserv_listlinks Unknown vulnerability in IRC Services NickServ LISTLINKS before 5.0.50 allows remote attackers to obtain the links of a nick. NVD-CWE-Other
CVE-2005-0987 2008-09-6 05:47 2005-05-2 Show GitHub Exploit DB Packet Storm
357946 2.1 LOW
- - RC.BOOT in IBM AIX 5.1, 5.2, and 5.3 does not "use a secure location for temporary files," which allows local users to have an unknown impact, probably by overwriting files. NVD-CWE-Other
CVE-2005-0991 2008-09-6 05:47 2005-05-2 Show GitHub Exploit DB Packet Storm
357947 4.3 MEDIUM
early_impact productcart Multiple cross-site scripting (XSS) vulnerabilities in ProductCart 2.7 allow remote attackers to inject arbitrary web script or HTML via (1) the keyword parameter to advSearch_h.asp, (2) the redirect… NVD-CWE-Other
CVE-2005-0995 2008-09-6 05:47 2005-05-2 Show GitHub Exploit DB Packet Storm
357948 4.3 MEDIUM
asp-dev xm_forum Cross-site scripting (XSS) vulnerability in posts.asp for ASP-DEv XM Forum RC3 allows remote attackers to inject arbitrary web script or HTML via a "javascript:" URL in an IMG tag. NVD-CWE-Other
CVE-2005-1008 2008-09-6 05:47 2005-05-2 Show GitHub Exploit DB Packet Storm
357949 7.5 HIGH
iatek siteenable SQL injection vulnerability in content.asp in SiteEnable allows remote attackers to execute arbitrary SQL commands via the sortby parameter. NVD-CWE-Other
CVE-2005-1011 2008-09-6 05:47 2005-05-2 Show GitHub Exploit DB Packet Storm
357950 10.0 HIGH
mailenable imapd Buffer overflow in MailEnable Imapd (MEIMAP.exe) allows remote attackers to execute arbitrary code via a long LOGIN command. NVD-CWE-Other
CVE-2005-1015 2008-09-6 05:47 2005-05-2 Show GitHub Exploit DB Packet Storm