NVD脆弱性情報トップ

検索メニュー表示

ベンダー名
プロダクト・サービス名
タイトル
CRITICAL
HIGH
MEDIUM
LOW
CVE
CWE
公表日降順
更新日降順
表示数

NVD（National Vulnerability Database）で管理されている脆弱性の一覧を検索することが出来ます。
JVN（Japan Vulnerability Note）より先に脆弱性情報が更新される事が多いため、JVNに未記載の脆弱性が更新されている場合があります。

JVN（Japan Vulnerability Note）に関連した脆弱性がある場合は詳細画面で情報を表示します。

CWEで検索する場合は、CWE概要を参照して、CWE番号を確認してください。

CRITICAL
HIGH
MEDIUM
LOW

更新日:2024年11月7日12:22

No	CVSS	レベル攻撃区分	ベンダー名	プロダクト名	タイトル	CWE	CVE	更新日	公表日	影響表示	Exploit PoC 検索
270051	7.5	HIGH	xqus	x-news	x_news.php in X-News (x_news) 1.1 and earlier allows remote attackers to gain administrative privileges by stealing and replaying the md5_password cookie.	NVD-CWE-Other	CVE-2002-2046	2008-09-6 05:32	2002-12-31	表示	GitHub Exploit DB Packet Storm

270052	10.0	HIGH	sketch	sketch	The file preview functionality in Sketch 0.6.12 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of an encapsulated Postscript (EPS) file.	NVD-CWE-Other	CVE-2002-2047	2008-09-6 05:32	2002-12-31	表示	GitHub Exploit DB Packet Storm

270053	7.5	HIGH	dug_song	dsniff fragroute fragrouter	configure for Dsniff 2.3, fragroute 1.2, and fragrouter 1.6, when downloaded from monkey.org on May 17, 2002, has been modified to contain a backdoor, which allows remote attackers to access the syst…	NVD-CWE-Other	CVE-2002-2049	2008-09-6 05:32	2002-12-31	表示	GitHub Exploit DB Packet Storm

270054	2.1	LOW	modlogan	modlogan	Directory traversal vulnerability in processor_web plugin for ModLogAn 0.5.0 through 0.7.11, when used with the splitby option, allows local users to overwrite arbitrary files via a .. (dot dot) in t…	NVD-CWE-Other	CVE-2002-2050	2008-09-6 05:32	2002-12-31	表示	GitHub Exploit DB Packet Storm

270055	2.1	LOW	modlogan	modlogan	The processor_web plugin for ModLogAn 0.5.0 through 0.7.11, when used with the splitby option, allows local users to overwrite arbitrary files via a symlink attack on files specified as hostnames in …	NVD-CWE-Other	CVE-2002-2051	2008-09-6 05:32	2002-12-31	表示	GitHub Exploit DB Packet Storm

270056	5.0	MEDIUM	cisco	ios	Cisco 2611 router running IOS 12.1(6.5), possibly an interim release, allows remote attackers to cause a denial of service via port scans such as (1) scanning all ports on a single host and (2) scann…	NVD-CWE-Other	CVE-2002-2052	2008-09-6 05:32	2002-12-31	表示	GitHub Exploit DB Packet Storm

270057	5.0	MEDIUM	cisco	ios	The design of the Hot Standby Routing Protocol (HSRP), as implemented on Cisco IOS 12.1, when using IRPAS, allows remote attackers to cause a denial of service (CPU consumption) via a router with the…	NVD-CWE-Other	CVE-2002-2053	2008-09-6 05:32	2002-12-31	表示	GitHub Exploit DB Packet Storm

270058	4.6	MEDIUM	intel	d845bg_motherboard d845hv_motherboard d845pt_motherboard d845wn_motherboard	BIOS D845BG, D845HV, D845PT and D845WN on Intel motherboards does not properly restrict access to configuration information when BIOS passwords are enabled, which could allow local users to change th…	NVD-CWE-Other	CVE-2002-2059	2008-09-6 05:32	2002-12-31	表示	GitHub Exploit DB Packet Storm

270059	7.5	HIGH	twibright_labs	links	Buffer overflow in Links 2.0 pre4 allows remote attackers to crash client browsers and possibly execute arbitrary code via gamma tables in large 16-bit PNG images.	NVD-CWE-Other	CVE-2002-2060	2008-09-6 05:32	2002-12-31	表示	GitHub Exploit DB Packet Storm

270060	7.5	HIGH	atguard	atguard_personal_firewall	AtGuard 3.2 allows remote attackers to bypass firwall filters and execute prohibited programs by changing the filenames to permitted filenames.	NVD-CWE-Other	CVE-2002-2063	2008-09-6 05:32	2002-12-31	表示	GitHub Exploit DB Packet Storm

270061	7.5	HIGH	phpwebgallery	phpwebgallery	isadmin.php in PhpWebGallery 1.0 allows remote attackers to gain administrative access via by setting the photo_login cookie to pseudo.	NVD-CWE-Other	CVE-2002-2064	2008-09-6 05:32	2002-12-31	表示	GitHub Exploit DB Packet Storm

270062	5.0	MEDIUM	webcalendar	webcalendar	WebCalendar 0.9.34 and earlier with 'browsing in includes directory' enabled allows remote attackers to read arbitrary include files with .inc extensions from the web root.	NVD-CWE-Other	CVE-2002-2065	2008-09-6 05:32	2002-12-31	表示	GitHub Exploit DB Packet Storm

270063	5.0	MEDIUM	compaq	tru64	Compaq Tru64 4.0 d allows remote attackers to cause a denial of service in (1) telnet, (2) FTP, (3) ypbind, (4) rpc.lockd, (5) snmp, (6) ttdbserverd, and possibly other services via a TCP SYN scan, a…	NVD-CWE-Other	CVE-2002-2071	2008-09-6 05:32	2002-12-31	表示	GitHub Exploit DB Packet Storm

270064	5.0	MEDIUM	sun	jre	java.security.AccessController in Sun Java Virtual Machine (JVM) in JRE 1.2.2 and 1.3.1 allows remote attackers to cause a denial of service (JVM crash) via a Java program that calls the doPrivileged…	NVD-CWE-Other	CVE-2002-2072	2008-09-6 05:32	2002-12-31	表示	GitHub Exploit DB Packet Storm

270065	7.5	HIGH	erwin_lansing	mailidx	SQL injection vulnerability in Mailidx before 20020105 allows remote attackers to execute arbitrary SQL commands via the search web page.	NVD-CWE-Other	CVE-2002-2074	2008-09-6 05:32	2002-12-31	表示	GitHub Exploit DB Packet Storm

270066	5.0	MEDIUM	mirabilis	icq	ICQ 2001a and 2002b allows remote attackers to cause a denial of service (memory consumption and hang) via a contact message with a large contacts number.	NVD-CWE-Other	CVE-2002-2075	2008-09-6 05:32	2002-12-31	表示	GitHub Exploit DB Packet Storm

270067	5.0	MEDIUM	summit_computer_networks	lil_http	Directory traversal vulnerability in Lil' HTTP server 2.1 and 2.2 allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP GET request.	NVD-CWE-Other	CVE-2002-2076	2008-09-6 05:32	2002-12-31	表示	GitHub Exploit DB Packet Storm

270068	7.5	HIGH	floosietek	ftgateoffice ftgatepro	Heap-based buffer overflow in Floositek (1) FTGate Pro 1.05 and (2) FTGate Office 1.05 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long POP3 APOP US…	NVD-CWE-Other	CVE-2002-2078	2008-09-6 05:32	2002-12-31	表示	GitHub Exploit DB Packet Storm

270069	5.0	MEDIUM	mosix_project openmosix_project	mosix openmosix	mosix-protocol-stack in Multicomputer Operating System for UnIX (MOSIX) 1.5.7 allows remote attackers to cause a denial of service via malformed packets.	NVD-CWE-Other	CVE-2002-2079	2008-09-6 05:32	2002-12-31	表示	GitHub Exploit DB Packet Storm

270070	5.0	MEDIUM	floosietek	ftgatepro	Floositek FTGate PRO 1.05 allows remote attackers to cause a denial of service (memory and CPU consumption) via a large number of RCPT TO: messages during an SMTP session.	NVD-CWE-Other	CVE-2002-2080	2008-09-6 05:32	2002-12-31	表示	GitHub Exploit DB Packet Storm

270071	5.0	MEDIUM	microsoft	site_server site_server_commerce	cphost.dll in Microsoft Site Server 3.0 allows remote attackers to cause a denial of service (disk consumption) via an HTTP POST of a file with a long TargetURL parameter, which causes Site Server to…	NVD-CWE-Other	CVE-2002-2081	2008-09-6 05:32	2002-12-31	表示	GitHub Exploit DB Packet Storm

270072	7.5	HIGH	floosietek	ftgateoffice ftgatepro	FTGate and FTGate Pro 1.05 lock user mailboxes before authentication succeeds, which allows remote attackers to lock the mailboxes of other users.	NVD-CWE-Other	CVE-2002-2082	2008-09-6 05:32	2002-12-31	表示	GitHub Exploit DB Packet Storm

270073	2.1	LOW	novell	netware	The Novell Netware client running on Windows 95 allows local users to bypass the login and open arbitrary files via the "What is this?" help feature, which can be launched from the Novell Netware log…	NVD-CWE-Other	CVE-2002-2083	2008-09-6 05:32	2002-12-31	表示	GitHub Exploit DB Packet Storm

270074	5.0	MEDIUM	portix-php	portix-php	Directory traversal vulnerability in index.php of Portix 0.4.02 allows remote attackers to read arbitrary files via a .. (dot dot) in the (1) l and (2) topic parameters.	NVD-CWE-Other	CVE-2002-2084	2008-09-6 05:32	2002-12-31	表示	GitHub Exploit DB Packet Storm

270075	5.0	MEDIUM	wwwebbb	wwwebbb_forum	Directory traversal vulnerability in page.cgi of WWWeBBB Forum 3.82 beta and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP request.	NVD-CWE-Other	CVE-2002-2085	2008-09-6 05:32	2002-12-31	表示	GitHub Exploit DB Packet Storm

270076	4.6	MEDIUM	borland_software	interbase	Buffer overflow in Borland InterBase 6.0 allows local users to execute arbitrary code via a long INTERBASE environment variable when calling (1) gds_drop, (2) gds_lock_mgr, or (3) gds_inet_server.	NVD-CWE-Other	CVE-2002-2087	2008-09-6 05:32	2002-12-31	表示	GitHub Exploit DB Packet Storm

270077	10.0	HIGH	mosix_project	clump_os	The MOSIX Project clump/os 5.4 creates a default VNC account without a password, which allows remote attackers to gain root access.	NVD-CWE-Other	CVE-2002-2088	2008-09-6 05:32	2002-12-31	表示	GitHub Exploit DB Packet Storm

270078	4.6	MEDIUM	sun	solaris	Buffer overflow in rcp in Solaris 9.0 allows local users to execute arbitrary code via a long command line argument.	NVD-CWE-Other	CVE-2002-2089	2008-09-6 05:32	2002-12-31	表示	GitHub Exploit DB Packet Storm

270079	5.0	MEDIUM	caucho_technology	resin	Caucho Technology Resin server 2.1.1 to 2.1.2 allows remote attackers to obtain server's root path via requests for MS-DOS device names such as lpt9.xtp.	NVD-CWE-Other	CVE-2002-2090	2008-09-6 05:32	2002-12-31	表示	GitHub Exploit DB Packet Storm

270080	7.5	HIGH	decfingerd	decfingerd	Format string vulnerability in Deception Finger Daemon, decfingerd, 0.7 may allow remote attackers to execute arbitrary code via the username of a finger request.	NVD-CWE-Other	CVE-2002-2091	2008-09-6 05:32	2002-12-31	表示	GitHub Exploit DB Packet Storm

270081	5.0	MEDIUM	joe_testa	hellbent	Joe Testa hellbent 01 webserver allows attackers to read files that are specified in the hellbent.prefs file by creating a file with a similar name in the web root, as demonstrated using (1) index.we…	NVD-CWE-Other	CVE-2002-2095	2008-09-6 05:32	2002-12-31	表示	GitHub Exploit DB Packet Storm

270082	7.5	HIGH	novell	netware	Buffer overflow in Novell Remote Manager module, httpstk.nlm, in NetWare 5.1 and NetWare 6 allows remote attackers to execute arbitrary code via a long (1) username or (2) password.	NVD-CWE-Other	CVE-2002-2096	2008-09-6 05:32	2002-12-31	表示	GitHub Exploit DB Packet Storm

270083	5.0	MEDIUM	microsoft	outlook	Microsoft Outlook 2002 allows remote attackers to embed bypass the file download restrictions for attachments via an HTML email message that uses an IFRAME to reference malicious content.	NVD-CWE-Other	CVE-2002-2100	2008-09-6 05:32	2002-12-31	表示	GitHub Exploit DB Packet Storm

270084	7.5	HIGH	microsoft	outlook	Microsoft Outlook 2002 allows remote attackers to execute arbitrary JavaScript code, even when scripting is disabled, via an "about:" or "javascript:" URI in the href attribute of an "a" tag.	NVD-CWE-Other	CVE-2002-2101	2008-09-6 05:32	2002-12-31	表示	GitHub Exploit DB Packet Storm

270085	5.0	MEDIUM	jcraft	jzlib	InfBlocks.java in JCraft JZlib before 0.0.7 allow remote attackers to cause a denial of service (NullPointerException) via an invalid block of deflated data.	NVD-CWE-Other	CVE-2002-2102	2008-09-6 05:32	2002-12-31	表示	GitHub Exploit DB Packet Storm

270086	5.0	MEDIUM	apache	http_server	Apache before 1.3.24, when writing to the log file, records a spoofed hostname from the reverse lookup of an IP address, even when a double-reverse lookup fails, which allows remote attackers to hide…	NVD-CWE-Other	CVE-2002-2103	2008-09-6 05:32	2002-12-31	表示	GitHub Exploit DB Packet Storm

270087	4.3	MEDIUM	veridis	openkeyserver	Cross-site scripting (XSS) vulnerability in the lookup script in Veridis OpenKeyServer (OKS) 1.2 allows remote attackers to inject arbitrary web script or HTML via the search parameter.	NVD-CWE-Other	CVE-2002-2107	2008-09-6 05:32	2002-12-31	表示	GitHub Exploit DB Packet Storm

270088	5.0	MEDIUM	sony	vaio_manual_cybersupport	Unknown vulnerability in the "VAIO Manual" software in certain Sony VAIO personal computers sold from November 2001 to January 2002, allows remote attackers to modify data via a web page or HTML e-ma…	NVD-CWE-Other	CVE-2002-2108	2008-09-6 05:32	2002-12-31	表示	GitHub Exploit DB Packet Storm

270089	7.5	HIGH	matt_wright	formmail	Matt Wright FormMail 1.9 and earlier allows remote attackers to bypass the HTTP_REFERER check and conduct unauthorized activities via (1) a blank referer, (2) a spoofed referer with a trusted domain/…	NVD-CWE-Other	CVE-2002-2109	2008-09-6 05:32	2002-12-31	表示	GitHub Exploit DB Packet Storm

270090	5.0	MEDIUM	rca	digital_cable_modem	The RCA Digital Cable Modems DCM225 and DCM225E allow remote attackers to cause a denial of service (modem device reset) by connecting to port 80 on the 10.0.0.0/8 device.	NVD-CWE-Other	CVE-2002-2110	2008-09-6 05:32	2002-12-31	表示	GitHub Exploit DB Packet Storm

270091	5.0	MEDIUM	rca	digital_cable_modem	RCA Digital Cable Modem DCM225 and DCM225E, and other modems that must conform to the Data-over-Cable Service Interface Specifications DOCSIS standard, uses the "public" community string for SNMP acc…	NVD-CWE-Other	CVE-2002-2112	2008-09-6 05:32	2002-12-31	表示	GitHub Exploit DB Packet Storm

270092	7.5	HIGH	agh	htmlsearch	search.cgi in AGH HTMLsearch 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the template parameter.	NVD-CWE-Other	CVE-2002-2113	2008-09-6 05:32	2002-12-31	表示	GitHub Exploit DB Packet Storm

270093	4.3	MEDIUM	hns	hns hns-lite	Cross-site scripting (XSS) vulnerability in Hyper NIKKI System (HNS) Lite before 0.9 and HNS before 2.10-pl2 allows remote attackers to inject arbitrary web script or HTML.	NVD-CWE-Other	CVE-2002-2115	2008-09-6 05:32	2002-12-31	表示	GitHub Exploit DB Packet Storm

270094	5.0	MEDIUM	netgear	rm356 rt338	Netgear RM-356 and RT-338 series SOHO routers allow remote attackers to cause a denial of service (crash) via a UDP port scan, as demonstrated using nmap.	NVD-CWE-Other	CVE-2002-2116	2008-09-6 05:32	2002-12-31	表示	GitHub Exploit DB Packet Storm

270095	4.6	MEDIUM	qnx	rtos	Multiple buffer overflows in QNX RTOS 4.25 may allow attackers to execute arbitrary code via long filename arguments to (1) Watcom or (2) int10.	NVD-CWE-Other	CVE-2002-2120	2008-09-6 05:32	2002-12-31	表示	GitHub Exploit DB Packet Storm

270096	2.1	LOW	pointsec_mobile_technologies	pointsec	Pointsec before 1.2 for PalmOS stores a user's PIN number in memory in plaintext, which allows a local attacker who steals an unlocked Palm to retrieve the PIN by dumping memory.	NVD-CWE-Other	CVE-2002-2122	2008-09-6 05:32	2002-12-31	表示	GitHub Exploit DB Packet Storm

270097	2.1	LOW	pedestal_software	integrity_protection_driver	restrictEnabled in Integrity Protection Driver (IPD) 1.2 delays driver installation for 20 minutes, which allows local users to insert malicious code by setting system clock to an earlier time.	NVD-CWE-Other	CVE-2002-2126	2008-09-6 05:32	2002-12-31	表示	GitHub Exploit DB Packet Storm

270098	4.6	MEDIUM	w-agora	w-agora	editform.php in w-Agora 4.1.5 allows local users to execute arbitrary PHP code via .. (dot dot) sequences in the file parameter.	NVD-CWE-Other	CVE-2002-2128	2008-09-6 05:32	2002-12-31	表示	GitHub Exploit DB Packet Storm

270099	7.5	HIGH	gallery_project	gallery	publish_xp_docs.php in Gallery 1.3.2 allows remote attackers to execute arbitrary PHP code by modifying the GALLERY_BASEDIR parameter to reference a URL on a remote web server that contains the code.	NVD-CWE-Other	CVE-2002-2130	2008-09-6 05:32	2002-12-31	表示	GitHub Exploit DB Packet Storm

270100	5.0	MEDIUM	perl-httpd	perl-httpd	Directory traversal vulnerability in Perl-HTTPd before 1.0.2 allows remote attackers to view arbitrary files via a .. (dot dot) in an unknown argument.	NVD-CWE-Other	CVE-2002-2131	2008-09-6 05:32	2002-12-31	表示	GitHub Exploit DB Packet Storm