NVD脆弱性情報トップ

検索メニュー表示

ベンダー名
プロダクト・サービス名
タイトル
CVE
CRITICAL
HIGH
MEDIUM
LOW
CWE
公表日降順
更新日降順
表示数

NVD（National Vulnerability Database）で管理されている脆弱性の一覧を検索することが出来ます。
JVN（Japan Vulnerability Note）より先に脆弱性情報が更新される事が多いため、JVNに未記載の脆弱性が更新されている場合があります。

JVN（Japan Vulnerability Note）に関連した脆弱性がある場合は詳細画面で情報を表示します。

CWEで検索する場合は、CWE概要を参照して、CWE番号を確認してください。

CRITICAL
HIGH
MEDIUM
LOW

更新日:2026年4月25日4:08

No	CVSS	レベル攻撃区分	ベンダー名	プロダクト名	タイトル	CWE	CVE	更新日	公表日	影響表示	Exploit PoC 検索
312751	2.1	LOW	microsoft	internet_information_server	IIS Inetinfo.exe allows local users to cause a denial of service by creating a mail file with a long name and a .txt.eml extension in the pickup directory.	NVD-CWE-Other	CVE-2000-0167	2008-09-11 04:03	2000-02-15	表示	GitHub Exploit DB Packet Storm

312752	7.5	HIGH	oracle	application_server	Batch files in the Oracle web listener ows-bin directory allow remote attackers to execute commands via a malformed URL that includes '?&'.	NVD-CWE-Other	CVE-2000-0169	2008-09-11 04:03	2000-03-15	表示	GitHub Exploit DB Packet Storm

312753	7.2	HIGH	redhat turbolinux	linux turbolinux	Buffer overflow in the man program in Linux allows local users to gain privileges via the MANPAGER environmental variable.	NVD-CWE-Other	CVE-2000-0170	2008-09-11 04:03	2000-02-26	表示	GitHub Exploit DB Packet Storm

312754	7.2	HIGH	at_computing	atsar_linux	atsadc in the atsar package for Linux does not properly check the permissions of an output file, which allows local users to gain root privileges.	NVD-CWE-Other	CVE-2000-0171	2008-09-11 04:03	2000-03-11	表示	GitHub Exploit DB Packet Storm

312755	7.2	HIGH	matt_kimball_and_roger_wolff turbolinux	mtr turbolinux	The mtr program only uses a seteuid call when attempting to drop privileges, which could allow local users to gain root privileges.	NVD-CWE-Other	CVE-2000-0172	2008-09-11 04:03	2000-03-3	表示	GitHub Exploit DB Packet Storm

312756	5.0	MEDIUM	sco	unixware	Vulnerability in the EELS system in SCO UnixWare 7.1.x allows remote attackers to cause a denial of service.	NVD-CWE-Other	CVE-2000-0173	2008-09-11 04:03	2000-03-10	表示	GitHub Exploit DB Packet Storm

312757	5.0	MEDIUM	sun	staroffice	StarOffice StarScheduler web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.	NVD-CWE-Other	CVE-2000-0174	2008-09-11 04:03	2000-03-9	表示	GitHub Exploit DB Packet Storm

312758	10.0	HIGH	sun	staroffice	Buffer overflow in StarOffice StarScheduler web server allows remote attackers to gain root access via a long GET command.	NVD-CWE-Other	CVE-2000-0175	2008-09-11 04:03	2000-03-9	表示	GitHub Exploit DB Packet Storm

312759	5.0	MEDIUM	cat_soft	serv-u	The default configuration of Serv-U 2.5d and earlier allows remote attackers to determine the real pathname of the server by requesting a URL for a directory or file that does not exist.	NVD-CWE-Other	CVE-2000-0176	2008-09-11 04:03	2000-02-29	表示	GitHub Exploit DB Packet Storm

312760	10.0	HIGH	dnstools_software	dnstools	DNSTools CGI applications allow remote attackers to execute arbitrary commands via shell metacharacters.	NVD-CWE-Other	CVE-2000-0177	2008-09-11 04:03	2000-03-2	表示	GitHub Exploit DB Packet Storm

312761	7.5	HIGH	foundrynet	serveriron	ServerIron switches by Foundry Networks have predictable TCP/IP sequence numbers, which allows remote attackers to spoof or hijack sessions.	NVD-CWE-Other	CVE-2000-0178	2008-09-11 04:03	2000-02-28	表示	GitHub Exploit DB Packet Storm

312762	5.0	MEDIUM	hp	openview_omniback_ii	HP OpenView OmniBack 2.55 allows remote attackers to cause a denial of service via a large number of connections to port 5555.	NVD-CWE-Other	CVE-2000-0179	2008-09-11 04:03	2000-02-28	表示	GitHub Exploit DB Packet Storm

312763	5.0	MEDIUM	checkpoint	firewall-1	Firewall-1 3.0 and 4.0 leaks packets with private IP address information, which could allow remote attackers to determine the real IP address of the host that is making the connection.	NVD-CWE-Other	CVE-2000-0181	2008-09-11 04:03	2000-03-11	表示	GitHub Exploit DB Packet Storm

312764	5.1	MEDIUM	michael_sandrof	ircii	Buffer overflow in ircII 4.4 IRC client allows remote attackers to execute commands via the DCC chat capability.	NVD-CWE-Other	CVE-2000-0183	2008-09-11 04:03	2000-03-10	表示	GitHub Exploit DB Packet Storm

312765	2.1	LOW	mandrakesoft redhat	mandrake_linux linux	Linux printtool sets the permissions of printer configuration files to be world-readable, which allows local attackers to obtain printer share passwords.	NVD-CWE-Other	CVE-2000-0184	2008-09-11 04:03	2000-03-9	表示	GitHub Exploit DB Packet Storm

312766	5.0	MEDIUM	realnetworks	realserver realserver_g2	RealMedia RealServer reveals the real IP address of a Real Server, even if the address is supposed to be private.	NVD-CWE-Other	CVE-2000-0185	2008-09-11 04:03	2000-03-8	表示	GitHub Exploit DB Packet Storm

312767	7.2	HIGH	freebsd mandrakesoft redhat turbolinux	freebsd mandrake_linux linux turbolinux	Buffer overflow in the dump utility in the Linux ext2fs backup package allows local users to gain privileges via a long command line argument.	NVD-CWE-Other	CVE-2000-0186	2008-09-11 04:03	2000-02-28	表示	GitHub Exploit DB Packet Storm

312768	7.5	HIGH	alex_heiphetz_group	ezshopper	EZShopper 3.0 loadpage.cgi CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack or execute commands via shell metacharacters.	NVD-CWE-Other	CVE-2000-0187	2008-09-11 04:03	2000-02-27	表示	GitHub Exploit DB Packet Storm

312769	7.5	HIGH	alex_heiphetz_group	ezshopper	EZShopper 3.0 search.cgi CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack or execute commands via shell metacharacters.	NVD-CWE-Other	CVE-2000-0188	2008-09-11 04:03	2000-02-27	表示	GitHub Exploit DB Packet Storm

312770	5.0	MEDIUM	allaire	coldfusion_server	ColdFusion Server 4.x allows remote attackers to determine the real pathname of the server via an HTTP request to the application.cfm or onrequestend.cfm files.	NVD-CWE-Other	CVE-2000-0189	2008-09-11 04:03	2000-03-1	表示	GitHub Exploit DB Packet Storm

312771	5.0	MEDIUM	aol	instant_messenger	AOL Instant Messenger (AIM) client allows remote attackers to cause a denial of service via a message with a malformed ASCII value.	NVD-CWE-Other	CVE-2000-0190	2008-09-11 04:03	2000-03-2	表示	GitHub Exploit DB Packet Storm

312772	5.0	MEDIUM	caldera	openlinux	The default installation of Caldera OpenLinux 2.3 includes the CGI program rpm_query, which allows remote attackers to determine what packages are installed on the system.	NVD-CWE-Other	CVE-2000-0192	2008-09-11 04:03	2000-03-5	表示	GitHub Exploit DB Packet Storm

312773	7.2	HIGH	corel	linux	buildxconf in Corel Linux allows local users to modify or create arbitrary files via the -x or -f parameters.	NVD-CWE-Other	CVE-2000-0194	2008-09-11 04:03	2000-02-24	表示	GitHub Exploit DB Packet Storm

312774	7.2	HIGH	corel	linux	setxconf in Corel Linux allows local users to gain root access via the -T parameter, which executes the user's .xserverrc file.	NVD-CWE-Other	CVE-2000-0195	2008-09-11 04:03	2000-02-24	表示	GitHub Exploit DB Packet Storm

312775	7.5	HIGH	nmh redhat turbolinux	nmh linux turbolinux	Buffer overflow in mhshow in the Linux nmh package allows remote attackers to execute commands via malformed MIME headers in an email message.	NVD-CWE-Other	CVE-2000-0196	2008-09-11 04:03	2000-02-28	表示	GitHub Exploit DB Packet Storm

312776	4.6	MEDIUM	microsoft	windows_nt	The Windows NT scheduler uses the drive mapping of the interactive user who is currently logged onto the system, which allows the local user to gain privileges by providing a Trojan horse batch file …	NVD-CWE-Other	CVE-2000-0197	2008-09-11 04:03	2000-02-14	表示	GitHub Exploit DB Packet Storm

312777	5.0	MEDIUM	atrium_software	mercur_imap4_server mercur_mailserver mercur_pop3_server	Buffer overflow in POP3 and IMAP servers in the MERCUR mail server suite allows remote attackers to cause a denial of service.	NVD-CWE-Other	CVE-2000-0198	2008-09-11 04:03	2000-03-15	表示	GitHub Exploit DB Packet Storm

312778	7.2	HIGH	microsoft	sql_server	When a new SQL Server is registered in Enterprise Manager for Microsoft SQL Server 7.0 and the "Always prompt for login name and password" option is not set, then the Enterprise Manager uses weak enc…	NVD-CWE-Other	CVE-2000-0199	2008-09-11 04:03	2000-03-14	表示	GitHub Exploit DB Packet Storm

312779	6.2	MEDIUM	oracle	oracle8i	The installation of Oracle 8.1.5.x on Linux follows symlinks and creates the orainstRoot.sh file with world-writeable permissions, which allows local users to gain privileges.	NVD-CWE-Other	CVE-2000-0206	2008-09-11 04:03	2000-03-5	表示	GitHub Exploit DB Packet Storm

312780	7.5	HIGH	sgi	infosearch irix	SGI InfoSearch CGI program infosrch.cgi allows remote attackers to execute commands via shell metacharacters.	NVD-CWE-Other	CVE-2000-0207	2008-09-11 04:03	2000-03-1	表示	GitHub Exploit DB Packet Storm

312781	5.0	MEDIUM	htdig	htdig	The htdig (ht://Dig) CGI program htsearch allows remote attackers to read arbitrary files by enclosing the file name with backticks (`) in parameters to htsearch.	NVD-CWE-Other	CVE-2000-0208	2008-09-11 04:03	2000-02-29	表示	GitHub Exploit DB Packet Storm

312782	7.6	HIGH	university_of_kansas	lynx	Buffer overflow in Lynx 2.x allows remote attackers to crash Lynx and possibly execute commands via a long URL in a malicious web page.	NVD-CWE-Other	CVE-2000-0209	2008-09-11 04:03	2000-02-27	表示	GitHub Exploit DB Packet Storm

312783	1.2	LOW	sun	workshop	The lit program in Sun Flex License Manager (FlexLM) follows symlinks, which allows local users to modify arbitrary files.	NVD-CWE-Other	CVE-2000-0210	2008-09-11 04:03	2000-02-21	表示	GitHub Exploit DB Packet Storm

312784	7.2	HIGH	sco	unixware	Vulnerability in SCO cu program in UnixWare 7.x allows local users to gain privileges.	NVD-CWE-Other	CVE-2000-0215	2008-09-11 04:03	2000-02-8	表示	GitHub Exploit DB Packet Storm

312785	5.0	MEDIUM	microsoft	exchange_server outlook windows_messaging	Microsoft email clients in Outlook, Exchange, and Windows Messaging automatically respond to Read Receipt and Delivery Receipt tags, which could allow an attacker to flood a mail system with response…	NVD-CWE-Other	CVE-2000-0216	2008-09-11 04:03	2000-02-29	表示	GitHub Exploit DB Packet Storm

312786	5.1	MEDIUM	openbsd ssh	openssh ssh ssh2	The default configuration of SSH allows X forwarding, which could allow a remote attacker to control a client's X sessions via a malicious xauth program.	NVD-CWE-Other	CVE-2000-0217	2008-09-11 04:03	2000-02-24	表示	GitHub Exploit DB Packet Storm

312787	7.2	HIGH	caldera suse	openlinux suse_linux	Buffer overflow in Linux mount and umount allows local users to gain root privileges via a long relative pathname.	NVD-CWE-Other	CVE-2000-0218	2008-09-11 04:03	2000-02-3	表示	GitHub Exploit DB Packet Storm

312788	5.0	MEDIUM	nortel	nautica_marlin	The Nautica Marlin bridge allows remote attackers to cause a denial of service via a zero length UDP packet to the SNMP port.	NVD-CWE-Other	CVE-2000-0221	2008-09-11 04:03	2000-02-25	表示	GitHub Exploit DB Packet Storm

312789	7.2	HIGH	sam_hawker	wmcdplay	Buffer overflow in the wmcdplay CD player program for the WindowMaker desktop allows local users to gain root privileges via a long parameter.	NVD-CWE-Other	CVE-2000-0223	2008-09-11 04:03	2000-03-10	表示	GitHub Exploit DB Packet Storm

312790	7.2	HIGH	alessandro_rubini debian redhat suse	gpm debian_linux linux suse_linux	gpm-root in the gpm package does not properly drop privileges, which allows local users to gain privileges by starting a utility from gpm-root.	NVD-CWE-Other	CVE-2000-0229	2008-09-11 04:03	2000-03-22	表示	GitHub Exploit DB Packet Storm

312791	7.2	HIGH	halloween redhat	halloween_linux linux	Buffer overflow in imwheel allows local users to gain root privileges via the imwheel-solo script and a long HOME environmental variable.	NVD-CWE-Other	CVE-2000-0230	2008-09-11 04:03	2000-03-13	表示	GitHub Exploit DB Packet Storm

312792	7.2	HIGH	halloween suse	halloween_linux suse_linux	Linux kreatecd trusts a user-supplied path that is used to find the cdrecord program, allowing local users to gain root privileges.	NVD-CWE-Other	CVE-2000-0231	2008-09-11 04:03	2000-03-16	表示	GitHub Exploit DB Packet Storm

312793	10.0	HIGH	suse	suse_linux_imap_server	SuSE Linux IMAP server allows remote attackers to bypass IMAP authentication and gain privileges.	NVD-CWE-Other	CVE-2000-0233	2008-09-11 04:03	2000-03-15	表示	GitHub Exploit DB Packet Storm

312794	6.4	MEDIUM	netscape	enterprise_server	Netscape Enterprise Server with Web Publishing enabled allows remote attackers to list arbitrary directories via a GET request for the /publisher directory, which provides a Java applet that allows t…	NVD-CWE-Other	CVE-2000-0237	2008-09-11 04:03	2000-03-11	表示	GitHub Exploit DB Packet Storm

312795	10.0	HIGH	redhat	linux	The web GUI for the Linux Virtual Server (LVS) software in the Red Hat Linux Piranha package has a backdoor password that allows remote attackers to execute arbitrary commands.	NVD-CWE-Other	CVE-2000-0248	2008-09-11 04:03	2000-04-24	表示	GitHub Exploit DB Packet Storm

312796	7.2	HIGH	ibm	aix	The AIX Fast Response Cache Accelerator (FRCA) allows local users to modify arbitrary files via the configuration capability in the frcactrl program.	NVD-CWE-Other	CVE-2000-0249	2008-09-11 04:03	2000-04-26	表示	GitHub Exploit DB Packet Storm

312797	7.2	HIGH	qnx	qnx	The crypt function in QNX uses weak encryption, which allows local users to decrypt passwords.	NVD-CWE-Other	CVE-2000-0250	2008-09-11 04:03	2000-04-14	表示	GitHub Exploit DB Packet Storm

312798	5.0	MEDIUM	hp	hp-ux vvos	HP-UX 11.04 VirtualVault (VVOS) sends data to unprivileged processes via an interface that has multiple aliased IP addresses.	NVD-CWE-Other	CVE-2000-0251	2008-09-11 04:03	2000-04-6	表示	GitHub Exploit DB Packet Storm

312799	5.0	MEDIUM	nbase-xyplex	edgeblaster	The Nbase-Xyplex EdgeBlaster router allows remote attackers to cause a denial of service via a scan for the FormMail CGI program.	NVD-CWE-Other	CVE-2000-0255	2008-09-11 04:03	2000-04-5	表示	GitHub Exploit DB Packet Storm

312800	2.1	LOW	redhat	linux	The X font server xfs in Red Hat Linux 6.x allows an attacker to cause a denial of service via a malformed request.	NVD-CWE-Other	CVE-2000-0263	2008-09-11 04:03	2000-04-16	表示	GitHub Exploit DB Packet Storm