NVD Vulnerability Information Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
CRITICAL
HIGH
MEDIUM
LOW
CWE
In descending order of publication date
In descending order of update date
Number of items displayed

You can search the list of vulnerabilities managed by the NVD (National Vulnerability Database).
Since vulnerability information is often updated before JVN (Japan Vulnerability Note), vulnerabilities that are not listed in JVN may be updated.

If there is a vulnerability related to JVN (Japan Vulnerability Note), the information will be displayed on the detail page.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • CRITICAL
  • HIGH
  • MEDIUM
  • LOW

Update Date:June 20, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
360001 4.6 MEDIUM
gnu mailman Vulnerability in Mailman 2.0.1 and earlier allows list administrators to obtain user passwords. NVD-CWE-Other
CVE-2001-0290 2008-09-6 05:23 2001-05-3 Show GitHub Exploit DB Packet Storm
360002 7.5 HIGH
francisco_burzi php-nuke PHP-Nuke 4.4.1a allows remote attackers to modify a user's email address and obtain the password by guessing the user id (UID) and calling user.php with the saveuser operator. NVD-CWE-Other
CVE-2001-0292 2008-09-6 05:23 2001-05-3 Show GitHub Exploit DB Packet Storm
360003 5.0 MEDIUM
datawizard ftpxq Directory traversal vulnerability in FtpXQ FTP server 2.0.93 allows remote attackers to read arbitrary files via a .. (dot dot) in the GET command. NVD-CWE-Other
CVE-2001-0293 2008-09-6 05:23 2001-05-3 Show GitHub Exploit DB Packet Storm
360004 5.0 MEDIUM
typsoft typsoft_ftp_server Directory traversal vulnerability in TYPSoft FTP Server 0.85 allows remote attackers to read arbitrary files via (1) a .. (dot dot) in a GET command, or (2) a ... in a CWD command. NVD-CWE-Other
CVE-2001-0294 2008-09-6 05:23 2001-05-3 Show GitHub Exploit DB Packet Storm
360005 10.0 HIGH
texas_imperial_software wftpd_pro Buffer overflow in WFTPD Pro 3.00 allows remote attackers to execute arbitrary commands via a long CWD command. NVD-CWE-Other
CVE-2001-0296 2008-09-6 05:23 2001-05-3 Show GitHub Exploit DB Packet Storm
360006 5.0 MEDIUM
dattaraj_rao simple_server Directory traversal vulnerability in Simple Server HTTPd 1.0 (originally Free Java Server) allows remote attackers to read arbitrary files via a .. (dot dot) in the URL. NVD-CWE-Other
CVE-2001-0297 2008-09-6 05:23 2001-05-3 Show GitHub Exploit DB Packet Storm
360007 5.0 MEDIUM
sapio_design_ltd webreflex Buffer overflow in WebReflex 1.55 HTTPd allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP GET request. NVD-CWE-Other
CVE-2001-0298 2008-09-6 05:23 2001-05-3 Show GitHub Exploit DB Packet Storm
360008 5.0 MEDIUM
pi3 pi3web Buffer overflow in tstisapi.dll in Pi3Web 1.0.1 web server allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long URL. NVD-CWE-Other
CVE-2001-0302 2008-09-6 05:23 2001-05-3 Show GitHub Exploit DB Packet Storm
360009 5.0 MEDIUM
pi3 pi3web tstisapi.dll in Pi3Web 1.0.1 web server allows remote attackers to determine the physical path of the server via a URL that requests a non-existent file. NVD-CWE-Other
CVE-2001-0303 2008-09-6 05:23 2001-05-3 Show GitHub Exploit DB Packet Storm
360010 5.0 MEDIUM
thinking_arts es.one Directory traversal vulnerability in store.cgi in Thinking Arts ES.One package allows remote attackers to read arbitrary files via a .. (dot dot) in the StartID parameter. NVD-CWE-Other
CVE-2001-0305 2008-09-6 05:23 2001-05-3 Show GitHub Exploit DB Packet Storm
360011 5.0 MEDIUM
itafrica webactive Directory traversal vulnerability in ITAfrica WEBactive HTTP Server 1.00 allows remote attackers to read arbitrary files via a .. (dot dot) in a URL. NVD-CWE-Other
CVE-2001-0306 2008-09-6 05:23 2001-05-3 Show GitHub Exploit DB Packet Storm
360012 7.5 HIGH
bajie java_http_server Bajie HTTP JServer 0.78, and other versions before 0.80, allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP request for a CGI program that does not exist. CWE-94
Code Injection 		CVE-2001-0307 2008-09-6 05:23 2001-05-3 Show GitHub Exploit DB Packet Storm
360013 7.5 HIGH
bajie java_http_server UploadServlet in Bajie HTTP JServer 0.78, and possibly other versions before 0.80, allows remote attackers to execute arbitrary commands by calling the servlet to upload a program, then using a ... (… CWE-94
Code Injection 		CVE-2001-0308 2008-09-6 05:23 2001-05-3 Show GitHub Exploit DB Packet Storm
360014 5.0 MEDIUM
ibm websphere_plugin IBM WebSphere plugin for Netscape Enterprise server allows remote attackers to read source code for JSP files via an HTTP request that contains a host header that references a host that is not in Web… NVD-CWE-Other
CVE-2001-0312 2008-09-6 05:23 2001-06-2 Show GitHub Exploit DB Packet Storm
360015 10.0 HIGH
francisco_burzi php-nuke bb_smilies.php and bbcode_ref.php in PHP-Nuke 4.4 allows remote attackers to read arbitrary files and gain PHP administrator privileges by inserting a null character and .. (dot dot) sequences into a… NVD-CWE-Other
CVE-2001-0320 2008-09-6 05:23 2001-05-3 Show GitHub Exploit DB Packet Storm
360016 2.6 LOW
microsoft windows_2000
windows_98 		Windows 98 and Windows 2000 Java clients allow remote attackers to cause a denial of service via a Java applet that opens a large number of UDP sockets, which prevents the host from establishing any … NVD-CWE-Other
CVE-2001-0324 2008-09-6 05:23 2001-05-3 Show GitHub Exploit DB Packet Storm
360017 7.5 HIGH
qnx rtp Buffer overflow in QNX RTP 5.60 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a large number of arguments to the stat command. NVD-CWE-Other
CVE-2001-0325 2008-09-6 05:23 2001-05-3 Show GitHub Exploit DB Packet Storm
360018 5.0 MEDIUM
iplanet iplanet_web_server iPlanet Web Server Enterprise Edition 4.1 and earlier allows remote attackers to retrieve sensitive data from memory allocation pools, or cause a denial of service, via a URL-encoded Host: header in … NVD-CWE-Other
CVE-2001-0327 2008-09-6 05:23 2001-07-2 Show GitHub Exploit DB Packet Storm
360019 5.0 MEDIUM
thenet checkbo TheNet CheckBO 1.56 allows remote attackers to cause a denial of service via a flood of characters to the TCP ports which it is listening on. NVD-CWE-Other
CVE-2001-0354 2008-09-6 05:23 2001-07-2 Show GitHub Exploit DB Packet Storm
360020 2.1 LOW
siemens reliant_unix ppd in Reliant Sinix allows local users to corrupt arbitrary files via a symlink attack in the /tmp/ppd.trace file. NVD-CWE-Other
CVE-2001-0384 2008-09-6 05:23 2001-07-2 Show GitHub Exploit DB Packet Storm
360021 5.0 MEDIUM
ibm net.commerce
websphere_application_server 		IBM Websphere/NetCommerce3 3.1.2 allows remote attackers to determine the real path of the server by directly calling the macro.d2w macro with a NOEXISTINGHTMLBLOCK argument. NVD-CWE-Other
CVE-2001-0389 2008-09-6 05:23 2001-07-2 Show GitHub Exploit DB Packet Storm
360022 5.0 MEDIUM
ibm net.commerce
net.commerce_hosting_server
websphere_application_server 		IBM Websphere/NetCommerce3 3.1.2 allows remote attackers to cause a denial of service by directly calling the macro.d2w macro with a long string of %0a characters. NVD-CWE-Other
CVE-2001-0390 2008-09-6 05:23 2001-07-2 Show GitHub Exploit DB Packet Storm
360023 5.0 MEDIUM
sco unixware The search97cgi/vtopic" in the UnixWare 7 scohelphttp webserver allows remote attackers to read arbitrary files via a .. (dot dot) attack. NVD-CWE-Other
CVE-2000-0842 2008-09-6 05:22 2000-11-14 Show GitHub Exploit DB Packet Storm
360024 10.0 HIGH
dave_airlie
luke_kenneth_casson_leighton 		pam_smb
pam_ntdom 		Buffer overflow in pam_smb and pam_ntdom pluggable authentication modules (PAM) allow remote attackers to execute arbitrary commands via a login with a long user name. NVD-CWE-Other
CVE-2000-0843 2008-09-6 05:22 2000-11-14 Show GitHub Exploit DB Packet Storm
360025 6.4 MEDIUM
digital unix kdebug daemon (kdebugd) in Digital Unix 4.0F allows remote attackers to read arbitrary files by specifying the full file name in the initialization packet. NVD-CWE-Other
CVE-2000-0845 2008-09-6 05:22 2000-11-14 Show GitHub Exploit DB Packet Storm
360026 5.0 MEDIUM
xs4all_data xs4all_data_sunftp SunFTP build 9(1) allows remote attackers to cause a denial of service by connecting to the server and disconnecting before sending a newline. NVD-CWE-Other
CVE-2000-0855 2008-09-6 05:22 2000-11-14 Show GitHub Exploit DB Packet Storm
360027 7.5 HIGH
xs4all_data xs4all_data_sunftp Buffer overflow in SunFTP build 9(1) allows remote attackers to cause a denial of service or possibly execute arbitrary commands via a long GET request. NVD-CWE-Other
CVE-2000-0856 2008-09-6 05:22 2000-11-14 Show GitHub Exploit DB Packet Storm
360028 5.0 MEDIUM
intel express_510t
express_520t
express_550f
express_550t 		Intel Express 500 series switches allow a remote attacker to cause a denial of service via a malformed ICMP packet, which causes the CPU to crash. NVD-CWE-Other
CVE-2000-0882 2008-09-6 05:22 2000-11-14 Show GitHub Exploit DB Packet Storm
360029 5.0 MEDIUM
sgi irix The presence of the Distributed GL Daemon (dgld) service on port 5232 on SGI IRIX systems allows remote attackers to identify the target host as an SGI system. NVD-CWE-Other
CVE-2000-0893 2008-09-6 05:22 2001-02-16 Show GitHub Exploit DB Packet Storm
360030 5.0 MEDIUM
qnx voyager Directory traversal vulnerability in Voyager web server 2.01B in the demo disks for QNX 405 allows remote attackers to read arbitrary files via a .. (dot dot) attack. NVD-CWE-Other
CVE-2000-0903 2008-09-6 05:22 2000-12-19 Show GitHub Exploit DB Packet Storm
360031 5.0 MEDIUM
qnx voyager Voyager web server 2.01B in the demo disks for QNX 405 stores sensitive web client information in the .photon directory in the web document root, which allows remote attackers to obtain that informat… NVD-CWE-Other
CVE-2000-0904 2008-09-6 05:22 2000-12-19 Show GitHub Exploit DB Packet Storm
360032 5.0 MEDIUM
qnx voyager QNX Embedded Resource Manager in Voyager web server 2.01B in the demo disks for QNX 405 allows remote attackers to read sensitive system statistics information via the embedded.html web page. NVD-CWE-Other
CVE-2000-0905 2008-09-6 05:22 2000-12-19 Show GitHub Exploit DB Packet Storm
360033 7.5 HIGH
etype eserv EServ 2.92 Build 2982 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via long HELO and MAIL FROM commands. NVD-CWE-Other
CVE-2000-0907 2008-09-6 05:22 2000-12-19 Show GitHub Exploit DB Packet Storm
360034 7.5 HIGH
freebsd freebsd FreeBSD 4.1.1 and earlier, and possibly other BSD-based OSes, uses an insufficient random number generator to generate initial TCP sequence numbers (ISN), which allows remote attackers to spoof TCP c… NVD-CWE-Other
CVE-2000-0916 2008-09-6 05:22 2000-12-19 Show GitHub Exploit DB Packet Storm
360035 7.2 HIGH
kde kvt Format string vulnerability in kvt in KDE 1.1.2 may allow local users to execute arbitrary commands via a DISPLAY environmental variable that contains formatting characters. NVD-CWE-Other
CVE-2000-0918 2008-09-6 05:22 2000-12-19 Show GitHub Exploit DB Packet Storm
360036 7.5 HIGH
david_harris pegasus_mail Buffer overflow in Pegasus Mail 3.11 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long email message containing binary data. NVD-CWE-Other
CVE-2000-0931 2008-09-6 05:22 2000-12-19 Show GitHub Exploit DB Packet Storm
360037 4.6 MEDIUM
xfree86_project xlib Buffer overflow in xlib in XFree 3.3.x possibly allows local users to execute arbitrary commands via a long DISPLAY environment variable or a -display command line parameter. NVD-CWE-Other
CVE-2000-0976 2008-09-6 05:22 2000-12-19 Show GitHub Exploit DB Packet Storm
360038 10.0 HIGH
nevis_systems all-mail Buffer overflow in All-Mail 1.1 allows remote attackers to execute arbitrary commands via a long "MAIL FROM" or "RCPT TO" command. NVD-CWE-Other
CVE-2000-0985 2008-09-6 05:22 2000-12-19 Show GitHub Exploit DB Packet Storm
360039 7.2 HIGH
freebsd freebsd Format string vulnerability in top program allows local attackers to gain root privileges via the "kill" or "renice" function. NVD-CWE-Other
CVE-2000-0998 2008-09-6 05:22 2000-12-11 Show GitHub Exploit DB Packet Storm
360040 10.0 HIGH
openbsd openssh Format string vulnerabilities in OpenBSD ssh program (and possibly other BSD-based operating systems) allow attackers to gain root privileges. NVD-CWE-Other
CVE-2000-0999 2008-09-6 05:22 2000-12-11 Show GitHub Exploit DB Packet Storm
360041 4.6 MEDIUM
palm palm_os PalmOS 3.5.2 and earlier uses weak encryption to store the user password, which allows attackers with physical access to the Palm device to decrypt the password and gain access to the device. NVD-CWE-Other
CVE-2000-1008 2008-09-6 05:22 2000-12-11 Show GitHub Exploit DB Packet Storm
360042 7.2 HIGH
freebsd freebsd The catopen function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to read arbitrary files via the LANG environmental variable. NVD-CWE-Other
CVE-2000-1012 2008-09-6 05:22 2000-12-11 Show GitHub Exploit DB Packet Storm
360043 7.2 HIGH
freebsd freebsd The setlocale function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to read arbitrary files via the LANG environmental variable. NVD-CWE-Other
CVE-2000-1013 2008-09-6 05:22 2000-12-11 Show GitHub Exploit DB Packet Storm
360044 5.0 MEDIUM
webteacher webdata Webteachers Webdata allows remote attackers with valid Webdata accounts to read arbitrary files by posting a request to import the file into the WebData database. NVD-CWE-Other
CVE-2000-1017 2008-09-6 05:22 2000-12-11 Show GitHub Exploit DB Packet Storm
360045 7.5 HIGH
checkpoint firewall-1 Check Point Firewall-1 session agent 3.0 through 4.1 generates different error messages for invalid user names versus invalid passwords, which allows remote attackers to determine valid usernames and… NVD-CWE-Other
CVE-2000-1037 2008-09-6 05:22 2000-12-11 Show GitHub Exploit DB Packet Storm
360046 10.0 HIGH
lotus domino Multiple buffer overflows in the ESMTP service of Lotus Domino 5.0.2c and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via long (1) "RCPT TO," (2) "… NVD-CWE-Other
CVE-2000-1046 2008-09-6 05:22 2000-12-11 Show GitHub Exploit DB Packet Storm
360047 5.0 MEDIUM
sonicwall soho_firewall The web server for the SonicWALL SOHO firewall allows remote attackers to cause a denial of service via an empty GET or POST request. NVD-CWE-Other
CVE-2000-1098 2008-09-6 05:22 2001-01-9 Show GitHub Exploit DB Packet Storm
360048 7.5 HIGH
trlinux postaci_webmail The default configuration for PostACI webmail system installs the /includes/global.inc configuration file within the web root, which allows remote attackers to read sensitive information such as data… NVD-CWE-Other
CVE-2000-1100 2008-09-6 05:22 2001-01-9 Show GitHub Exploit DB Packet Storm
360049 5.0 MEDIUM
texas_imperial_software wftpd Directory traversal vulnerability in Winsock FTPd (WFTPD) 3.00 and 2.41 with the "Restrict to home directory" option enabled allows local users to escape the home directory via a "/../" string, a var… NVD-CWE-Other
CVE-2000-1101 2008-09-6 05:22 2001-01-9 Show GitHub Exploit DB Packet Storm
360050 5.0 MEDIUM
ptlink ptlink_irc_services
ptlink_ircd 		PTlink IRCD 3.5.3 and PTlink Services 1.8.1 allow remote attackers to cause a denial of service (server crash) via "mode +owgscfxeb" and "oper" commands. NVD-CWE-Other
CVE-2000-1102 2008-09-6 05:22 2001-01-9 Show GitHub Exploit DB Packet Storm