NVD脆弱性情報トップ

検索メニュー表示

ベンダー名
プロダクト・サービス名
タイトル
CRITICAL
HIGH
MEDIUM
LOW
CVE
CWE
公表日降順
更新日降順
表示数

NVD（National Vulnerability Database）で管理されている脆弱性の一覧を検索することが出来ます。
JVN（Japan Vulnerability Note）より先に脆弱性情報が更新される事が多いため、JVNに未記載の脆弱性が更新されている場合があります。

JVN（Japan Vulnerability Note）に関連した脆弱性がある場合は詳細画面で情報を表示します。

CWEで検索する場合は、CWE概要を参照して、CWE番号を確認してください。

CRITICAL
HIGH
MEDIUM
LOW

更新日:2024年11月6日16:19

No	CVSS	レベル攻撃区分	ベンダー名	プロダクト名	タイトル	CWE	CVE	更新日	公表日	影響表示	Exploit PoC 検索
270251	4.3	MEDIUM	jelsoft	vbulletin	Cross-site scripting (XSS) vulnerability in global.php in Jelsoft vBulletin 2.0.0 through 2.2.8 allows remote attackers to inject arbitrary web script or HTML via the (1) $scriptpath or (2) $url vari…	NVD-CWE-Other	CVE-2002-1922	2008-09-6 05:31	2002-12-31	表示	GitHub Exploit DB Packet Storm

270252	5.0	MEDIUM	apc	powerchute	PowerChute plus 5.0.2 creates a "Pwrchute" directory during installation that is shared and world writeable, which could allow remote attackers to modify or create files in that directory.	NVD-CWE-Other	CVE-2002-1924	2008-09-6 05:31	2002-12-31	表示	GitHub Exploit DB Packet Storm

270253	5.0	MEDIUM	tiny_software	tiny_personal_firewall	Tiny Personal Firewall 3.0 through 3.0.6 allows remote attackers to cause a denial of service (crash) by via SYN, UDP, ICMP and TCP portscans when the administrator selects the Log tab of the Persona…	NVD-CWE-Other	CVE-2002-1925	2008-09-6 05:31	2002-12-31	表示	GitHub Exploit DB Packet Storm

270254	5.0	MEDIUM	aquonics_scripting	aquonics_file_manager	Directory traversal vulnerability in source.php in Aquonics File Manager 1.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP query string.	NVD-CWE-Other	CVE-2002-1926	2008-09-6 05:31	2002-12-31	表示	GitHub Exploit DB Packet Storm

270255	5.0	MEDIUM	software602	602pro_lan_suite	602Pro LAN SUITE 2002 allows remote attackers to view the directory tree via an HTTP GET request with a trailing "~" (tilde) or ".bak" extension.	NVD-CWE-Other	CVE-2002-1928	2008-09-6 05:31	2002-12-31	表示	GitHub Exploit DB Packet Storm

270256	4.3	MEDIUM	php_arena	pafiledb	Cross-site scripting (XSS) vulnerability in pafiledb.php in PHP Arena paFileDB 1.1.3 through 3.0 allows remote attackers to inject arbitrary web script or HTML via the query string in the (1) rate, (…	NVD-CWE-Other	CVE-2002-1929	2008-09-6 05:31	2002-12-31	表示	GitHub Exploit DB Packet Storm

270257	7.5	HIGH	an	an-httpd	Buffer overflow in AN HTTPd 1.38 through 1.4.1c allows remote attackers to execute arbitrary code via a SOCKS4 request with a long username.	NVD-CWE-Other	CVE-2002-1930	2008-09-6 05:31	2002-12-31	表示	GitHub Exploit DB Packet Storm

270258	4.3	MEDIUM	php_arena	pafiledb	Cross-site scripting (XSS) vulnerability in PHP Arena paFileDB 1.1.3 and 2.1.1 allows remote attackers to inject arbitrary web script or HTML via Javascript in the search string.	NVD-CWE-Other	CVE-2002-1931	2008-09-6 05:31	2002-12-31	表示	GitHub Exploit DB Packet Storm

270259	7.2	HIGH	microsoft	windows_2000_terminal_services	The terminal services screensaver for Microsoft Windows 2000 does not automatically lock the terminal window if the window is minimized, which could allow local users to gain access to the terminal s…	NVD-CWE-Other	CVE-2002-1933	2008-09-6 05:31	2002-12-31	表示	GitHub Exploit DB Packet Storm

270260	7.5	HIGH	utstarcom	bas_1000	UTStarcom BAS 1000 3.1.10 creates several default or back door accounts and passwords, which allows remote attackers to gain access via (1) field account with a password of "*field", (2) guru account…	NVD-CWE-Other	CVE-2002-1936	2008-09-6 05:31	2002-12-31	表示	GitHub Exploit DB Packet Storm

270261	5.0	MEDIUM	symantec	firewall_vpn_appliance_100 firewall_vpn_appliance_200 firewall_vpn_appliance_200r	Symantec Firewall/VPN Appliance 100 through 200R hardcodes the administrator's MAC address inside the firewall's configuration, which allows remote attackers to spoof the administrator's MAC address …	NVD-CWE-Other	CVE-2002-1937	2008-09-6 05:31	2002-12-31	表示	GitHub Exploit DB Packet Storm

270262	7.5	HIGH	virgil	cgi_scanner	Virgil CGI Scanner 0.9 allows remote attackers to execute arbitrary commands via the (1) tar (TARGET) or (2) zielport (ZIELPORT) parameters.	NVD-CWE-Other	CVE-2002-1938	2008-09-6 05:31	2002-12-31	表示	GitHub Exploit DB Packet Storm

270263	2.1	LOW	flashfxp	flashfxp	FlashFXP 1.4 prints FTP passwords in plaintext when there are transfers in the queue, which allows attackers to obtain FTP passwords of other users by editing the queue properties.	NVD-CWE-Other	CVE-2002-1939	2008-09-6 05:31	2002-12-31	表示	GitHub Exploit DB Packet Storm

270264	5.0	MEDIUM	jacob_navia	lcc-win32	LCC-Win32 3.2 compiler, when running on Windows 95, 98, or ME, writes portions of previously used memory after the import table, which could allow attackers to gain sensitive information. NOTE: it h…	NVD-CWE-Other	CVE-2002-1940	2008-09-6 05:31	2002-12-31	表示	GitHub Exploit DB Packet Storm

270265	5.0	MEDIUM	radiobird_software	web_server_4_everyone	Buffer overflow in RadioBird WebServer 4 Everyone 1.28 allows remote attackers to cause a denial of service (crash) via a long HTTP GET request with the Host header set.	NVD-CWE-Other	CVE-2002-1941	2008-09-6 05:31	2002-12-31	表示	GitHub Exploit DB Packet Storm

270266	5.0	MEDIUM	imatix	xitami	Imatix Xitami 2.5 b5 does not properly terminate certain Keep-Alive connections that have been broken or closed early, which allows remote attackers to cause a denial of service (crash) via a large n…	NVD-CWE-Other	CVE-2002-1942	2008-09-6 05:31	2002-12-31	表示	GitHub Exploit DB Packet Storm

270267	5.0	MEDIUM	safetp	safetp_server	SafeTP 1.46, when network address translation (NAT) is being used, leaks the internal IP address of the FTP server in a response to a passive mode (PASV) file transfer request.	NVD-CWE-Other	CVE-2002-1943	2008-09-6 05:31	2002-12-31	表示	GitHub Exploit DB Packet Storm

270268	5.0	MEDIUM	motorola	surfboard	Motorola Surfboard 4200 cable modem allows remote attackers to cause a denial of service (crash) by performing a SYN scan using a tool such as nmap.	NVD-CWE-Other	CVE-2002-1944	2008-09-6 05:31	2002-12-31	表示	GitHub Exploit DB Packet Storm

270269	5.0	MEDIUM	virtualzone	smartmail_server	Buffer overflow in SmartMail Server 1.0 Beta 10 allows remote attackers to cause a denial of service (crash) via a long request to (1) TCP port 25 (SMTP) or (2) TCP port 110 (POP3).	NVD-CWE-Other	CVE-2002-1945	2008-09-6 05:31	2002-12-31	表示	GitHub Exploit DB Packet Storm

270270	6.4	MEDIUM	webmin	webmin	Webmin 0.21 through 1.0 uses the same built-in SSL key for all installations, which allows remote attackers to eavesdrop or highjack the SSL session.	NVD-CWE-Other	CVE-2002-1947	2008-09-6 05:31	2002-12-31	表示	GitHub Exploit DB Packet Storm

270271	7.2	HIGH	gringotts	gringotts	Multiple buffer overflows in Gringotts 0.5.9 allows local users to execute arbitrary commands via unknown attack vectors.	NVD-CWE-Other	CVE-2002-1948	2008-09-6 05:31	2002-12-31	表示	GitHub Exploit DB Packet Storm

270272	4.3	MEDIUM	phprank	phprank	Cross-site scripting (XSS) vulnerability in phpRank 1.8 allows remote attackers to inject arbitrary web script or HTML via the (1) the email parameter of add.php or (2) the banner URL (banurl paramet…	NVD-CWE-Other	CVE-2002-1950	2008-09-6 05:31	2002-12-31	表示	GitHub Exploit DB Packet Storm

270273	7.5	HIGH	phprank	phprank	phpRank 1.8 does not properly check the return codes for MySQL operations when authenticating users, which could allow remote attackers to authenticate using a NULL password when database errors occu…	NVD-CWE-Other	CVE-2002-1952	2008-09-6 05:31	2002-12-31	表示	GitHub Exploit DB Packet Storm

270274	5.0	MEDIUM	aol	instant_messenger	Heap-based buffer overflow in the goim handler of AOL Instant Messenger (AIM) 4.4 through 4.8.2616 allows remote attackers to cause a denial of service (crash) via escaping of the screen name paramet…	NVD-CWE-Other	CVE-2002-1953	2008-09-6 05:31	2002-12-31	表示	GitHub Exploit DB Packet Storm

270275	4.3	MEDIUM	php	php	Cross-site scripting (XSS) vulnerability in the phpinfo function in PHP 4.2.3 allows remote attackers to inject arbitrary web script or HTML via the query string argument, as demonstrated using soinf…	NVD-CWE-Other	CVE-2002-1954	2008-09-6 05:31	2002-12-31	表示	GitHub Exploit DB Packet Storm

270276	5.0	MEDIUM	iomega	nas	Iomega NAS A300U uses cleartext LANMAN authentication when mounting CIFS/SMB drives, which allows remote attackers to perform a man-in-the-middle attack.	NVD-CWE-Other	CVE-2002-1955	2008-09-6 05:31	2002-12-31	表示	GitHub Exploit DB Packet Storm

270277	2.1	LOW	rox	filer	ROX Filer 1.1.9 and 1.2 is installed with world writable permissions, which allows local users to write to arbitrary files.	NVD-CWE-Other	CVE-2002-1956	2008-09-6 05:31	2002-12-31	表示	GitHub Exploit DB Packet Storm

270278	7.5	HIGH	pen	pen	Buffer overflow in the netlog function in pen.c for Pen 0.9.1 and 0.9.2 allows remote attackers to execute arbitrary commands via malformed log messages.	NVD-CWE-Other	CVE-2002-1957	2008-09-6 05:31	2002-12-31	表示	GitHub Exploit DB Packet Storm

270279	4.3	MEDIUM	kmmail	kmmail	Cross-site scripting (XSS) vulnerability in kmMail 1.0, 1.0a, and 1.0b allows remote attackers to inject arbitrary web script or HTML via (1) javascript in onmouseover or other attributes in "safe" H…	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2002-1958	2008-09-6 05:31	2002-12-31	表示	GitHub Exploit DB Packet Storm

270280	10.0	HIGH	nagios	nagios	Nagios 1.0b1 through 1.0b3 allows remote attackers to execute arbitrary commands via shell metacharacters in plugin output.	NVD-CWE-Other	CVE-2002-1959	2008-09-6 05:31	2002-12-31	表示	GitHub Exploit DB Packet Storm

270281	4.3	MEDIUM	cybozu	share360	Cross-site scripting (XSS) vulnerability in Cybozu Share360 1.1 allows remote attackers to inject arbitrary web script or HTML via an HTML link.	NVD-CWE-Other	CVE-2002-1960	2008-09-6 05:31	2002-12-31	表示	GitHub Exploit DB Packet Storm

270282	7.5	HIGH	finjan_software	surfingate	Finjan Software SurfinGate 6.0 and 6.0 1 allows remote attackers to bypass URL access restrictions via a URL whose hostname portion uses a fully qualified domain name (FQDN) that ends in a "." (dot).	NVD-CWE-Other	CVE-2002-1961	2008-09-6 05:31	2002-12-31	表示	GitHub Exploit DB Packet Storm

270283	7.5	HIGH	finjan_software	surfingate	Finjan Software SurfinGate 6.0 and 6.0 1 allows remote attackers to bypass URL access restrictions via a URL with an IP address instead of a hostname.	NVD-CWE-Other	CVE-2002-1962	2008-09-6 05:31	2002-12-31	表示	GitHub Exploit DB Packet Storm

270284	2.1	LOW	linux	linux_kernel	Linux kernel 2.4.1 through 2.4.19 sets root's NR_RESERVED_FILES limit to 10 files, which allows local users to cause a denial of service (resource exhaustion) by opening 10 setuid binaries.	NVD-CWE-Other	CVE-2002-1963	2008-09-6 05:31	2002-12-31	表示	GitHub Exploit DB Packet Storm

270285	7.5	HIGH	wesmo	phpeventcalendar	Unknown vulnerability in WesMo phpEventCalendar 1.1 allows remote attackers to execute arbitrary commands via unknown attack vectors.	NVD-CWE-Other	CVE-2002-1964	2008-09-6 05:31	2002-12-31	表示	GitHub Exploit DB Packet Storm

270286	4.3	MEDIUM	imatix	xitami	Cross-site scripting (XSS) vulnerability in Errors.gsl in Imatix Xitami 2.5b4 and 2.5b5 allows remote attackers to inject arbitrary web script or HTML via the (1) Javascript events, as demonstrated v…	NVD-CWE-Other	CVE-2002-1965	2008-09-6 05:31	2002-12-31	表示	GitHub Exploit DB Packet Storm

270287	5.0	MEDIUM	my_postcards	my_postcards_platinum	Directory traversal vulnerability in magiccard.cgi in My Postcards Platinum 5.0 and 6.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the page parameter.	NVD-CWE-Other	CVE-2002-1966	2008-09-6 05:31	2002-12-31	表示	GitHub Exploit DB Packet Storm

270288	5.0	MEDIUM	mark_hanson	xircon	Buffer overflow in XiRCON 1.0 Beta 4 allows remote attackers to cause a denial of service (disconnect) via a long (1) ctcp, (2) primsg, (3) msg, or (4) notice command.	NVD-CWE-Other	CVE-2002-1967	2008-09-6 05:31	2002-12-31	表示	GitHub Exploit DB Packet Storm

270289	2.1	LOW	com21	doxport_1100	Com21 DOXport 1100 series cable modem running firmware 2.1.1.106, and possibly other versions before 2.1.1.108.003, downloads a DOCSIS configuration file from a TFTP server running on the internal ne…	NVD-CWE-Other	CVE-2002-1968	2008-09-6 05:31	2002-12-31	表示	GitHub Exploit DB Packet Storm

270290	5.0	MEDIUM	the_magic_notebook	the_magic_notebook	Magic Notebook 1.0b and 1.1b allows remote attackers to cause a denial of service (crash) via an invalid username during login.	NVD-CWE-Other	CVE-2002-1969	2008-09-6 05:31	2002-12-31	表示	GitHub Exploit DB Packet Storm

270291	2.1	LOW	snortcenter	snortcenter	SnortCenter 0.9.5, when configured to push Snort rules, stores the rules in a temporary file with world-readable and world-writable permissions, which allows local users to obtain usernames and passw…	NVD-CWE-Other	CVE-2002-1970	2008-09-6 05:31	2002-12-31	表示	GitHub Exploit DB Packet Storm

270292	10.0	HIGH	sourcecraft	networking_utils	The ping utility in networking_utils.php in Sourcecraft Networking_Utils 1.0 allows remote attackers to read arbitrary files via shell metacharacters in the Domain name or IP address argument.	NVD-CWE-Other	CVE-2002-1971	2008-09-6 05:31	2002-12-31	表示	GitHub Exploit DB Packet Storm

270293	4.6	MEDIUM	sebastian_dehne	pp_powerswitch	Unknown vulnerability in Parallel port powerSwitch (aka pp_powerSwitch) 0.1 does not properly enforce access controls, which allows local users to access arbitrary ports.	NVD-CWE-Other	CVE-2002-1972	2008-09-6 05:31	2002-12-31	表示	GitHub Exploit DB Packet Storm

270294	10.0	HIGH	sharp	zaurus	The FTP service in Zaurus PDAs SL-5000D and SL-5500 does not require authentication, which allows remote attackers to access the file system as root.	NVD-CWE-Other	CVE-2002-1974	2008-09-6 05:31	2002-12-31	表示	GitHub Exploit DB Packet Storm

270295	5.0	MEDIUM	qualcomm	eudora	Qualcomm Eudora 5.1.1, 5.2, and possibly other versions stores email attachments in a predictable location, which allows remote attackers to read arbitrary files via a link that loads an attachment w…	NVD-CWE-Other	CVE-2002-1210	2008-09-6 05:30	2002-11-29	表示	GitHub Exploit DB Packet Storm

270296	7.5	HIGH	kde	kde	Buffer overflow in DSC 3.0 parser from GSview, as used in KGhostView in KDE 1.1 and KDE 3.0.3a, may allow attackers to cause a denial of service or execute arbitrary code via a modified .ps (PostScri…	NVD-CWE-Other	CVE-2002-1223	2008-09-6 05:30	2002-10-28	表示	GitHub Exploit DB Packet Storm

270297	5.0	MEDIUM	kde	kde	Directory traversal vulnerability in kpf for KDE 3.0.1 through KDE 3.0.3a allows remote attackers to read arbitrary files as the kpf user via a URL with a modified icon parameter.	NVD-CWE-Other	CVE-2002-1224	2008-09-6 05:30	2002-10-28	表示	GitHub Exploit DB Packet Storm

270298	7.5	HIGH	pam	pam	PAM 0.76 treats a disabled password as if it were an empty (null) password, which allows local and remote attackers to gain privileges as disabled users.	NVD-CWE-Other	CVE-2002-1227	2008-09-6 05:30	2002-10-28	表示	GitHub Exploit DB Packet Storm

270299	10.0	HIGH	log2mail	log2mail	Buffer overflow in log2mail before 0.2.5.1 allows remote attackers to execute arbitrary code via a long log message.	NVD-CWE-Other	CVE-2002-1251	2008-09-6 05:30	2002-11-12	表示	GitHub Exploit DB Packet Storm

270300	7.2	HIGH	abuse	abuse	Abuse 2.00 and earlier allows local users to gain privileges via command line arguments that specify alternate Lisp scripts that run at escalated privileges, which can contain functions that execute …	NVD-CWE-Other	CVE-2002-1253	2008-09-6 05:30	2002-11-12	表示	GitHub Exploit DB Packet Storm