NVD脆弱性情報トップ

検索メニュー表示

ベンダー名
プロダクト・サービス名
タイトル
CRITICAL
HIGH
MEDIUM
LOW
CVE
CWE
公表日降順
更新日降順
表示数

NVD（National Vulnerability Database）で管理されている脆弱性の一覧を検索することが出来ます。
JVN（Japan Vulnerability Note）より先に脆弱性情報が更新される事が多いため、JVNに未記載の脆弱性が更新されている場合があります。

JVN（Japan Vulnerability Note）に関連した脆弱性がある場合は詳細画面で情報を表示します。

CWEで検索する場合は、CWE概要を参照して、CWE番号を確認してください。

CRITICAL
HIGH
MEDIUM
LOW

更新日:2024年11月6日16:19

No	CVSS	レベル攻撃区分	ベンダー名	プロダクト名	タイトル	CWE	CVE	更新日	公表日	影響表示	Exploit PoC 検索
270401	5.0	MEDIUM	mondosoft	mondosearch	MsmMask.exe in MondoSearch 4.4 allows remote attackers to obtain the source code of scripts via the mask parameter.	NVD-CWE-Other	CVE-2002-1528	2008-09-6 05:30	2003-04-2	表示	GitHub Exploit DB Packet Storm

270402	4.3	MEDIUM	surfcontrol	superscout_email_filter	Cross-site scripting (XSS) vulnerability in msgError.asp for the administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote attackers to insert arbitrary script or …	NVD-CWE-Other	CVE-2002-1529	2008-09-6 05:30	2003-03-31	表示	GitHub Exploit DB Packet Storm

270403	5.0	MEDIUM	surfcontrol	superscout_email_filter	The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows users to obtain usernames and plaintext passwords via a request to the userlist.asp program, which includes …	NVD-CWE-Other	CVE-2002-1530	2008-09-6 05:30	2003-03-31	表示	GitHub Exploit DB Packet Storm

270404	5.0	MEDIUM	surfcontrol	superscout_email_filter	The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote attackers to cause a denial of service (crash) via an HTTP request without a Content-Length parameter.	NVD-CWE-Other	CVE-2002-1531	2008-09-6 05:30	2003-03-31	表示	GitHub Exploit DB Packet Storm

270405	5.0	MEDIUM	surfcontrol	superscout_email_filter	The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote attackers to cause a denial of service (resource exhaustion) via a GET request without the terminatin…	NVD-CWE-Other	CVE-2002-1532	2008-09-6 05:30	2003-03-31	表示	GitHub Exploit DB Packet Storm

270406	5.8	MEDIUM	jetty	jetty	Cross-site scripting (XSS) vulnerability in Jetty JSP servlet engine allows remote attackers to insert arbitrary HTML or script via an HTTP request to a .jsp file whose name contains the malicious sc…	NVD-CWE-Other	CVE-2002-1533	2008-09-6 05:30	2003-03-31	表示	GitHub Exploit DB Packet Storm

270407	5.0	MEDIUM	macromedia	flash_player	Macromedia Flash Player allows remote attackers to read arbitrary files via XML script in a .swf file that is hosted on a remote SMB share.	NVD-CWE-Other	CVE-2002-1534	2008-09-6 05:30	2003-03-31	表示	GitHub Exploit DB Packet Storm

270408	5.0	MEDIUM	symantec	enterprise_firewall raptor_firewall	Secure Webserver 1.1 in Raptor 6.5 and Symantec Enterprise Firewall 6.5.2 allows remote attackers to identify IP addresses of hosts on the internal network via a CONNECT request, which generates diff…	NVD-CWE-Other	CVE-2002-1535	2008-09-6 05:30	2003-03-31	表示	GitHub Exploit DB Packet Storm

270409	7.5	HIGH	hans_persson	molly	Molly IRC bot 0.5 allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the $host variable for nslookup.pl, (2) the $to, $from, or $message variables in pop.pl, (3) th…	NVD-CWE-Other	CVE-2002-1536	2008-09-6 05:30	2003-03-31	表示	GitHub Exploit DB Packet Storm

270410	10.0	HIGH	phpbb_group	phpbb	admin_ug_auth.php in phpBB 2.0.0 allows local users to gain administrator privileges by directly calling admin_ug_auth.php with modifed form fields such as "u".	NVD-CWE-Other	CVE-2002-1537	2008-09-6 05:30	2003-03-31	表示	GitHub Exploit DB Packet Storm

270411	5.0	MEDIUM	acuma	acusend	Acuma Acusend 4, and possibly earlier versions, allows remote authenticated users to read the reports of other users by inferring the full URL, whose name is easily predictable.	NVD-CWE-Other	CVE-2002-1538	2008-09-6 05:30	2003-03-31	表示	GitHub Exploit DB Packet Storm

270412	5.0	MEDIUM	alt-n	mdaemon	Buffer overflow in MDaemon POP server 6.0.7 and earlier allows remote authenticated users to cause a denial of service via long (1) DELE or (2) UIDL arguments.	NVD-CWE-Other	CVE-2002-1539	2008-09-6 05:30	2003-03-31	表示	GitHub Exploit DB Packet Storm

270413	7.5	HIGH	working_resources_inc.	badblue	BadBlue 1.7 allows remote attackers to bypass password protections for directories and files via an HTTP request containing an extra / (slash).	NVD-CWE-Other	CVE-2002-1541	2008-09-6 05:30	2003-03-31	表示	GitHub Exploit DB Packet Storm

270414	5.0	MEDIUM	solarwinds	tftp_server	SolarWinds TFTP server 5.0.55 and earlier allows remote attackers to cause a denial of service (crash) via a large UDP datagram, possibly triggering a buffer overflow.	NVD-CWE-Other	CVE-2002-1542	2008-09-6 05:30	2003-03-31	表示	GitHub Exploit DB Packet Storm

270415	4.6	MEDIUM	netbsd	netbsd	Buffer overflow in trek on NetBSD 1.5 through 1.5.3 allows local users to gain privileges via long keyboard input.	NVD-CWE-Other	CVE-2002-1543	2008-09-6 05:30	2003-03-31	表示	GitHub Exploit DB Packet Storm

270416	6.4	MEDIUM	cooolsoft	personal_ftp_server	Directory traversal vulnerability in CooolSoft Personal FTP Server 2.24 allows remote attackers to read or modify arbitrary files via .. (dot dot) sequences in the commands (1) LIST (ls), (2) mkdir, …	NVD-CWE-Other	CVE-2002-1544	2008-09-6 05:30	2003-03-31	表示	GitHub Exploit DB Packet Storm

270417	5.0	MEDIUM	cooolsoft	personal_ftp_server	CooolSoft Personal FTP Server 2.24 allows remote attackers to obtain the absolute pathname of the FTP root via a PWD command, which includes the full path in the response.	NVD-CWE-Other	CVE-2002-1545	2008-09-6 05:30	2003-03-31	表示	GitHub Exploit DB Packet Storm

270418	7.5	HIGH	brs	webweaver	BRS WebWeaver Web Server 1.01 allows remote attackers to bypass password protections for files and directories via an HTTP request containing a "/./" sequence.	NVD-CWE-Other	CVE-2002-1546	2008-09-6 05:30	2003-03-31	表示	GitHub Exploit DB Packet Storm

270419	5.0	MEDIUM	juniper	netscreen_screenos	Netscreen running ScreenOS 4.0.0r6 and earlier allows remote attackers to cause a denial of service via a malformed SSH packet to the Secure Command Shell (SCS) management interface, as demonstrated …	NVD-CWE-Other	CVE-2002-1547	2008-09-6 05:30	2003-03-31	表示	GitHub Exploit DB Packet Storm

270420	7.5	HIGH	light_httpd	light_httpd	Buffer overflow in Light HTTPd (lhttpd) 0.1 allows remote attackers to execute arbitrary code via a long HTTP GET request.	NVD-CWE-Other	CVE-2002-1549	2008-09-6 05:30	2003-03-31	表示	GitHub Exploit DB Packet Storm

270421	4.6	MEDIUM	ibm	aix	dump_smutil.sh in IBM AIX allows local users to overwrite arbitrary files via a symlink attack on temporary files.	NVD-CWE-Other	CVE-2002-1550	2008-09-6 05:30	2003-03-31	表示	GitHub Exploit DB Packet Storm

270422	4.6	MEDIUM	ibm	aix	Buffer overflow in nslookup in IBM AIX may allow attackers to cause a denial of service or execute arbitrary code.	NVD-CWE-Other	CVE-2002-1551	2008-09-6 05:30	2003-03-31	表示	GitHub Exploit DB Packet Storm

270423	5.0	MEDIUM	research_systems_inc.	ion_script	Directory traversal vulnerability in ion-p.exe (aka ion-p) allows remote attackers to read arbitrary files via (1) C: (drive letter) or (2) .. (dot-dot) sequences in the page parameter.	NVD-CWE-Other	CVE-2002-1559	2008-09-6 05:30	2003-03-31	表示	GitHub Exploit DB Packet Storm

270424	10.0	HIGH	martin_bauer	gbook	index.php in gBook 1.4 allows remote attackers to bypass authentication and gain administrative privileges by setting the login parameter to true.	NVD-CWE-Other	CVE-2002-1560	2008-09-6 05:30	2003-03-31	表示	GitHub Exploit DB Packet Storm

270425	10.0	HIGH	mailreader.com	mailreader.com	compose.cgi in Mailreader.com 2.3.30 and 2.3.31, when using Sendmail as the Mail Transfer Agent, allows remote attackers to execute arbitrary commands via shell metacharacters in the RealEmail config…	NVD-CWE-Other	CVE-2002-1582	2008-09-6 05:30	2004-12-6	表示	GitHub Exploit DB Packet Storm

270426	7.2	HIGH	ibm	db2_universal_database	Buffer overflow in sqllib/security/db2ckpw for IBM DB2 Universal Database 6.0 and 7.0 allows local users to execute arbitrary code via a long username that is read from a file descriptor argument.	NVD-CWE-Other	CVE-2002-1583	2008-09-6 05:30	2004-09-28	表示	GitHub Exploit DB Packet Storm

270427	2.1	LOW	mozilla	bugzilla	Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, allows authenticated users with editing privileges to delete other users by directly calling the editusers.cgi script with the "del" option.	NVD-CWE-Other	CVE-2002-0806	2008-09-6 05:29	2002-08-12	表示	GitHub Exploit DB Packet Storm

270428	7.5	HIGH	mozilla	bugzilla	Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, when performing a mass change, sets the groupset of all bugs to the groupset of the first bug, which could inadvertently cause insecure groupset …	NVD-CWE-Other	CVE-2002-0808	2008-09-6 05:29	2002-08-12	表示	GitHub Exploit DB Packet Storm

270429	7.5	HIGH	mozilla	bugzilla	Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, does not properly handle URL-encoded field names that are generated by some browsers, which could cause certain fields to appear to be unset, whi…	NVD-CWE-Other	CVE-2002-0809	2008-09-6 05:29	2002-08-12	表示	GitHub Exploit DB Packet Storm

270430	5.0	MEDIUM	mozilla	bugzilla	Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, directs error messages from the syncshadowdb command to the HTML output, which could leak sensitive information, including plaintext passwords, i…	NVD-CWE-Other	CVE-2002-0810	2008-09-6 05:29	2002-08-12	表示	GitHub Exploit DB Packet Storm

270431	7.5	HIGH	padl_software	nss_ldap	Buffer overflow in the DNS SRV code for nss_ldap before nss_ldap-198 allows remote attackers to cause a denial of service and possibly execute arbitrary code.	NVD-CWE-Other	CVE-2002-0825	2008-09-6 05:29	2002-08-12	表示	GitHub Exploit DB Packet Storm

270432	7.2	HIGH	caldera	unixware openunix	Vulnerability in pppd on UnixWare 7.1.1 and Open UNIX 8.0.0 allows local users to gain root privileges via (1) ppptalk or (2) ppp, a different vulnerability than CVE-2002-0824.	NVD-CWE-Other	CVE-2002-0827	2008-09-6 05:29	2002-08-12	表示	GitHub Exploit DB Packet Storm

270433	5.0	MEDIUM	caldera redhat hp	openlinux_server openlinux_workstation pre-execution_environment secure_os	Preboot eXecution Environment (PXE) server allows remote attackers to cause a denial of service (crash) via certain DHCP packets from Voice-Over-IP (VOIP) phones.	NVD-CWE-Other	CVE-2002-0835	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

270434	7.2	HIGH	isdn4linux	isdn4linux	Format string vulnerability in ISDN Point to Point Protocol (PPP) daemon (ipppd) in the ISDN4Linux (i4l) package allows local users to gain root privileges via format strings in the device name comma…	NVD-CWE-Other	CVE-2002-0851	2008-09-6 05:29	2002-09-5	表示	GitHub Exploit DB Packet Storm

270435	7.5	HIGH	gnu	mailman	Cross-site scripting vulnerability in Mailman before 2.0.12 allows remote attackers to execute script as other users via a subscriber's list subscription options in the (1) adminpw or (2) info parame…	NVD-CWE-Other	CVE-2002-0855	2008-09-6 05:29	2002-09-5	表示	GitHub Exploit DB Packet Storm

270436	7.5	HIGH	cisco	webns content_services_switch_11000	The original patch for the Cisco Content Service Switch 11000 Series authentication bypass vulnerability (CVE-2001-0622) was incomplete, which still allows remote attackers to gain additional privile…	NVD-CWE-Other	CVE-2002-0870	2008-09-6 05:29	2002-09-5	表示	GitHub Exploit DB Packet Storm

270437	5.0	MEDIUM	evolvable_corporation	shambala_server	Web server for Shambala 4.5 allows remote attackers to cause a denial of service (crash) via a malformed HTTP request.	NVD-CWE-Other	CVE-2002-0876	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

270438	5.0	MEDIUM	evolvable_corporation	shambala_server	Directory traversal vulnerability in the FTP server for Shambala 4.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the (1) LIST (ls) or (2) GET commands.	NVD-CWE-Other	CVE-2002-0877	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

270439	7.5	HIGH	logisense	dns_manager_system hawk-i	SQL injection vulnerability in the login form for LogiSense software including (1) Hawk-i Billing, (2) Hawk-i ASP and (3) DNS Manager allows remote attackers to bypass authentication via SQL code in …	NVD-CWE-Other	CVE-2002-0878	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

270440	5.0	MEDIUM	gafware	cfximage	showtemp.cfm for Gafware CFXImage 1.6.6 allows remote attackers to read arbitrary files via (1) a .. or (2) a C: style pathname in the FILE parameter.	NVD-CWE-Other	CVE-2002-0879	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

270441	7.2	HIGH	compaq	proliant_bl_e-class_integrated_administrator_firmware	Vulnerability in Compaq ProLiant BL e-Class Integrated Administrator 1.0 and 1.10, allows authenticated users with Telnet, SSH, or console access to conduct unauthorized activities.	NVD-CWE-Other	CVE-2002-0883	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

270442	5.0	MEDIUM	juniper	netscreen_screenos	The web interface (WebUI) of NetScreen ScreenOS before 2.6.1r8, and certain 2.8.x and 3.0.x versions before 3.0.3r1, allows remote attackers to cause a denial of service (crash) via a long user name.	NVD-CWE-Other	CVE-2002-0891	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

270443	5.0	MEDIUM	new_atlanta_communications	servletexec_isapi	The default configuration of NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to determine the path of the web root via a direct request to com.newatlanta.servletexec.JSP10Servlet without a f…	NVD-CWE-Other	CVE-2002-0892	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

270444	5.0	MEDIUM	new_atlanta_communications	servletexec_isapi	Directory traversal vulnerability in NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to read arbitrary files via a URL-encoded request to com.newatlanta.servletexec.JSP10Servlet containing "…	NVD-CWE-Other	CVE-2002-0893	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

270445	5.0	MEDIUM	new_atlanta_communications	servletexec_isapi	NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to cause a denial of service (crash) via (1) a request for a long .jsp file, or (2) a long URL sent directly to com.newatlanta.servletexec.JSP…	NVD-CWE-Other	CVE-2002-0894	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

270446	7.5	HIGH	matu	matu_ftp	Buffer overflow in MatuFtpServer 1.1.3.0 (1.1.3) allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long PASS (password) command.	NVD-CWE-Other	CVE-2002-0895	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

270447	5.0	MEDIUM	swatch	swatch	The throttle capability in Swatch may fail to report certain events if (1) the same type of event occurs after the throttle period, or (2) when multiple events matching the same "watchfor" expression…	NVD-CWE-Other	CVE-2002-0896	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

270448	7.5	HIGH	intranet-server	localweb2000	LocalWEB2000 2.1.0 web server allows remote attackers to bypass access restrictions for restricted files via a URL that contains the "/./" directory.	NVD-CWE-Other	CVE-2002-0897	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

270449	7.5	HIGH	blueface	falcon_web_server	Falcon web server 2.0.0.1021 and earlier allows remote attackers to bypass access restrictions for protected files via a URL whose directory portion ends in a . (dot).	NVD-CWE-Other	CVE-2002-0899	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

270450	7.5	HIGH	mit	pgp_public_key_server	Buffer overflow in pks PGP public key web server before 0.9.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long search argument to the lookup…	NVD-CWE-Other	CVE-2002-0900	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm