NVD脆弱性情報トップ

検索メニュー表示

ベンダー名
プロダクト・サービス名
タイトル
CRITICAL
HIGH
MEDIUM
LOW
CVE
CWE
公表日降順
更新日降順
表示数

NVD（National Vulnerability Database）で管理されている脆弱性の一覧を検索することが出来ます。
JVN（Japan Vulnerability Note）より先に脆弱性情報が更新される事が多いため、JVNに未記載の脆弱性が更新されている場合があります。

JVN（Japan Vulnerability Note）に関連した脆弱性がある場合は詳細画面で情報を表示します。

CWEで検索する場合は、CWE概要を参照して、CWE番号を確認してください。

CRITICAL
HIGH
MEDIUM
LOW

更新日:2024年11月6日16:19

No	CVSS	レベル攻撃区分	ベンダー名	プロダクト名	タイトル	CWE	CVE	更新日	公表日	影響表示	Exploit PoC 検索
270451	10.0	HIGH	amanda	amanda	Multiple buffer overflows in Advanced Maryland Automatic Network Disk Archiver (AMANDA) 2.3.0.4 allow (1) remote attackers to execute arbitrary code via long commands to the amindexd daemon, or certa…	NVD-CWE-Other	CVE-2002-0901	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

270452	7.5	HIGH	phpbb_group	phpbb	Cross-site scripting vulnerability in phpBB 2.0.0 (phpBB2) allows remote attackers to execute Javascript as other phpBB users by including a http:// and a double-quote (") in the [IMG] tag, which byp…	NVD-CWE-Other	CVE-2002-0902	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

270453	7.5	HIGH	woltlab	burning_board	register.php for WoltLab Burning Board (wbboard) 1.1.1 uses a small number of random values for the "code" parameter that is provided to action.php to approve a new registration, along with predictab…	NVD-CWE-Other	CVE-2002-0903	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

270454	7.2	HIGH	ibm	informix	Buffer overflow in sqlexec for Informix SE-7.25 allows local users to gain root privileges via a long INFORMIXDIR environment variable.	NVD-CWE-Other	CVE-2002-0905	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

270455	7.5	HIGH	nullsoft	shoutcast_server	Buffer overflow in SHOUTcast 1.8.9 and other versions before 1.8.12 allows a remote authenticated DJ to execute arbitrary code on the server via a long value in a header whose name begins with "icy-".	NVD-CWE-Other	CVE-2002-0907	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

270456	5.0	MEDIUM	cisco	ids_device_manager	Directory traversal vulnerability in the web server for Cisco IDS Device Manager before 3.1.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTPS request.	NVD-CWE-Other	CVE-2002-0908	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

270457	7.5	HIGH	debian	netstd	Buffer overflows in netstd 3.07-17 package allows remote DNS servers to execute arbitrary code via a long FQDN reply, as observed in the utilities (1) linux-ftpd, (2) pcnfsd, (3) tftp, (4) traceroute…	NVD-CWE-Other	CVE-2002-0910	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

270458	7.2	HIGH	caldera	volution_manager	Caldera Volution Manager 1.1 stores the Directory Administrator password in cleartext in the slapd.conf file, which could allow local users to gain privileges.	NVD-CWE-Other	CVE-2002-0911	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

270459	5.0	MEDIUM	debian	debian_linux	in.uucpd UUCP server in Debian GNU/Linux 2.2, and possibly other operating systems, does not properly terminate long strings, which allows remote attackers to cause a denial of service, possibly due …	NVD-CWE-Other	CVE-2002-0912	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

270460	5.0	MEDIUM	double_precision_incorporated	courier_mta	Double Precision Courier e-mail MTA allows remote attackers to cause a denial of service (CPU consumption) via a message with an extremely large or negative value for the year, which causes a tight l…	NVD-CWE-Other	CVE-2002-0914	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

270461	2.1	LOW	harald_hoyer	autorun xandros_desktop_os	autorun in Xandros based Linux distributions allows local users to read the first line of arbitrary files via the -c parameter, which causes autorun to print the first line of the file.	NVD-CWE-Other	CVE-2002-0915	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

270462	7.5	HIGH	stellar-x_software	msntauth	Format string vulnerability in the allowuser code for the Stellar-X msntauth authentication module, as distributed in Squid 2.4.STABLE6 and earlier, allows remote attackers to execute arbitrary code …	NVD-CWE-Other	CVE-2002-0916	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

270463	7.5	HIGH	cgiscript.net	cspassword	CGIScript.net csPassword.cgi stores .htpasswd files under the web document root, which could allow remote authenticated users to download the file and crack the passwords of other users.	NVD-CWE-Other	CVE-2002-0917	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

270464	5.0	MEDIUM	cgiscript.net	cspassword	CGIScript.net csPassword.cgi leaks sensitive information such as the pathname of the server in debug messages that are presented when the script fails, which allows remote attackers to obtain the inf…	NVD-CWE-Other	CVE-2002-0918	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

270465	7.5	HIGH	cgiscript.net	cspassword	CGIScript.net csPassword.cgi allows remote authenticated users to modify the .htaccess file and gain privileges via newlines in the title field of the edit page.	NVD-CWE-Other	CVE-2002-0919	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

270466	5.0	MEDIUM	cgiscript.net	csnews	CGIScript.net csNews.cgi allows remote attackers to obtain potentially sensitive information, such as the full server pathname and other configuration settings, via the viewnews command with an inval…	NVD-CWE-Other	CVE-2002-0921	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

270467	5.0	MEDIUM	cgiscript.net	csnews	CGIScript.net csNews.cgi allows remote attackers to obtain database files via a direct URL-encoded request to (1) default%2edb or (2) default%2edb.style, or remote authenticated users to perform admi…	NVD-CWE-Other	CVE-2002-0922	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

270468	7.5	HIGH	cgiscript.net	csnews	CGIScript.net csNews.cgi allows remote authenticated users to read arbitrary files, and possibly gain privileges, via the (1) pheader or (2) pfooter parameters in the "Advanced Settings" capability.	NVD-CWE-Other	CVE-2002-0923	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

270469	7.5	HIGH	matthew_mondor	mmftpd mmmail	Format string vulnerability in mmsyslog function allows remote attackers to execute arbitrary code via (1) the USER command to mmpop3d for mmmail 0.0.13 and earlier, (2) the HELO command to mmsmtpd f…	NVD-CWE-Other	CVE-2002-0925	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

270470	5.0	MEDIUM	wolfram_research	webmathematica	Directory traversal vulnerability in Wolfram Research webMathematica 1.0.0 and 1.0.0.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the MSPStoreID parameter.	NVD-CWE-Other	CVE-2002-0926	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

270471	7.5	HIGH	pirch	pirch_irc	Buffer overflow in the Pirch 98 IRC client allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long hyperlink in a channel or private message.	NVD-CWE-Other	CVE-2002-0928	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

270472	5.0	MEDIUM	novell	netware	Buffer overflows in the DHCP server for NetWare 6.0 SP1 allow remote attackers to cause a denial of service (reboot) via long DHCP requests.	NVD-CWE-Other	CVE-2002-0929	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

270473	5.0	MEDIUM	novell	netware	Format string vulnerability in the FTP server for Novell Netware 6.0 SP1 (NWFTPD) allows remote attackers to cause a denial of service (ABEND) via format strings in the USER command.	NVD-CWE-Other	CVE-2002-0930	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

270474	7.5	HIGH	luis_bernardo	myhelpdesk	Cross-site scripting vulnerabilities in MyHelpDesk 20020509, and possibly other versions, allows remote attackers to execute script as other users via a (1) Title or (2) Description when a new ticket…	NVD-CWE-Other	CVE-2002-0931	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

270475	6.4	MEDIUM	luis_bernardo	myhelpdesk	SQL injection vulnerability in index.php for MyHelpDesk 20020509, and possibly other versions, allows remote attackers to conduct unauthorized activities via SQL code in the "id" parameter for the op…	NVD-CWE-Other	CVE-2002-0932	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

270476	7.5	HIGH	datalex	bookit_consumer	Datalex PLC BookIt! Consumer before 2.2 stores usernames and passwords in plaintext in a cookie, which could allow remote attackers to gain privileges via Cross-site scripting or sniffing attacks.	NVD-CWE-Other	CVE-2002-0933	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

270477	6.4	MEDIUM	jon_hedley	alienform2	Directory traversal vulnerability in Jon Hedley AlienForm2 (typically installed as af.cgi or alienform.cgi) allows remote attackers to read or modify arbitrary files via an illegal character in the m…	NVD-CWE-Other	CVE-2002-0934	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

270478	5.0	MEDIUM	macromedia	jrun	The Java Server Pages (JSP) engine in JRun allows web page owners to cause a denial of service (engine crash) on the web server via a JSP page that calls WPrinterJob().pageSetup(null,null).	NVD-CWE-Other	CVE-2002-0937	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

270479	7.5	HIGH	cisco	secure_access_control_server	Cross-site scripting vulnerability in CiscoSecure ACS 3.0 allows remote attackers to execute arbitrary script or HTML as other web users via the action argument in a link to setup.exe.	NVD-CWE-Other	CVE-2002-0938	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

270480	4.6	MEDIUM	ncipher	nforce nshield	The ConsoleCallBack class for nCipher running under JRE 1.4.0 and 1.4.0_01, as used by the TrustedCodeTool and possibly other applications, may leak a passphrase when the user aborts an application t…	NVD-CWE-Other	CVE-2002-0941	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

270481	7.5	HIGH	lumigent	log_explorer	Buffer overflows in Lugiment Log Explorer before 3.02 allow attackers with database permissions to execute arbitrary code via long arguments to the extended stored procedures (1) xp_logattach_StartPr…	NVD-CWE-Other	CVE-2002-0942	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

270482	6.4	MEDIUM	metalinks	metacart2.sql	MetaCart2.sql stores the user database under the web document root without access controls, which allows remote attackers to obtain sensitive information such as passwords and credit card numbers via…	NVD-CWE-Other	CVE-2002-0943	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

270483	7.5	HIGH	deepmetrix	livestats	Cross-site scripting vulnerability in DeepMetrix LiveStats 5.03 through 6.2.1 allows remote attackers to execute arbitrary script as the LiveStats user via the (1) user-agent or (2) referrer, which a…	NVD-CWE-Other	CVE-2002-0944	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

270484	7.5	HIGH	seanox	devwex	Buffer overflow in SeaNox Devwex allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request.	NVD-CWE-Other	CVE-2002-0945	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

270485	5.0	MEDIUM	seanox	devwex	Directory traversal vulnerability in SeaNox Devwex before 1.2002.0601 allows remote attackers to read arbitrary files via ..\ (dot dot) sequences in an HTTP request.	NVD-CWE-Other	CVE-2002-0946	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

270486	7.5	HIGH	oracle	application_server reports	Buffer overflow in rwcgi60 CGI program for Oracle Reports Server 6.0.8.18.0 and earlier, as used in Oracle9iAS and other products, allows remote attackers to execute arbitrary code via a long databas…	NVD-CWE-Other	CVE-2002-0947	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

270487	7.5	HIGH	telindus	adsl_router	Telindus 1100 series ADSL router allows remote attackers to gain privileges to the device via a certain packet to UDP port 9833, which generates a reply that includes the router's password and other …	NVD-CWE-Other	CVE-2002-0949	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

270488	7.5	HIGH	transware	active_mail	Cross-site scripting vulnerability in TransWARE Active! mail 1.422 and 2.0 allows remote attackers to execute arbitrary code via a certain e-mail header, which is not properly filtered.	NVD-CWE-Other	CVE-2002-0950	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

270489	10.0	HIGH	ruslan_communications	body_builder	SQL injection vulnerability in Ruslan <Body>Builder allows remote attackers to gain administrative privileges via a "'--" sequence in the username and password.	NVD-CWE-Other	CVE-2002-0951	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

270490	7.5	HIGH	php_address	php_address	globals.php in PHP Address before 0.2f, with the PHP allow_url_fopen and register_globals variables enabled, allows remote attackers to execute arbitrary PHP code via a URL to the code in the LangCoo…	NVD-CWE-Other	CVE-2002-0953	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

270491	7.5	HIGH	yabb	yabb	Cross-site scripting vulnerability in YaBB.cgi for Yet Another Bulletin Board (YaBB) 1 Gold SP1 and earlier allows remote attackers to execute arbitrary script as other web site visitors via script i…	NVD-CWE-Other	CVE-2002-0955	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

270492	7.5	HIGH	iss	blackice_agent	BlackICE Agent 3.1.eal does not always reactivate after a system standby, which could allow remote attackers and local users to bypass intended firewall restrictions.	NVD-CWE-Other	CVE-2002-0956	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

270493	5.0	MEDIUM	iss	blackice_agent	The default configuration of BlackICE Agent 3.1.eal and 3.1.ebh has a high tcp.maxconnections setting, which could allow remote attackers to cause a denial of service (memory consumption) via a large…	NVD-CWE-Other	CVE-2002-0957	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

270494	7.5	HIGH	ekilat_llc	php\(reactor\)	Cross-site scripting vulnerability in browse.php for PHP(Reactor) 1.2.7 allows remote attackers to execute script as other users via the go parameter in the comments section.	NVD-CWE-Other	CVE-2002-0958	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

270495	7.5	HIGH	splatt	splatt_forum	Cross-site scripting vulnerability in Splatt Forum 3.0 allows remote attackers to execute arbitrary script as other users via an [img] tag with a closing quote followed by the script.	NVD-CWE-Other	CVE-2002-0959	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

270496	7.5	HIGH	voxel	cbms	Multiple cross-site scripting vulnerabilities in Voxel Dot Net CBMS 0.7 and earlier allows remote attackers to execute arbitrary script as other CBMS users.	NVD-CWE-Other	CVE-2002-0960	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

270497	7.5	HIGH	voxel	cbms	Vulnerabilities in Voxel Dot Net CBMS 0.7 and earlier allow remote attackers to conduct unauthorized operations as other users, e.g. by deleting clients via dltclnt.php, possibly in a SQL injection a…	NVD-CWE-Other	CVE-2002-0961	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

270498	7.5	HIGH	geeklog	geeklog	Cross-site scripting vulnerabilities in GeekLog 1.3.5 and earlier allow remote attackers to execute arbitrary script via (1) the url variable in the Link field of a calendar event, (2) the topic para…	NVD-CWE-Other	CVE-2002-0962	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

270499	5.0	MEDIUM	geeklog	geeklog	SQL injection vulnerability in comment.php for GeekLog 1.3.5 and earlier allows remote attackers to obtain sensitive user information via the pid parameter.	NVD-CWE-Other	CVE-2002-0963	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

270500	5.0	MEDIUM	valve_software	half-life half-life_dedicated_server	Half-Life Server 1.1.1.0 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via multiple responses to the initial challenge with different cd_key values, which rea…	NVD-CWE-Other	CVE-2002-0964	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm