NVD脆弱性情報トップ

検索メニュー表示

ベンダー名
プロダクト・サービス名
タイトル
CVE
CRITICAL
HIGH
MEDIUM
LOW
CWE
公表日降順
更新日降順
表示数

NVD（National Vulnerability Database）で管理されている脆弱性の一覧を検索することが出来ます。
JVN（Japan Vulnerability Note）より先に脆弱性情報が更新される事が多いため、JVNに未記載の脆弱性が更新されている場合があります。

JVN（Japan Vulnerability Note）に関連した脆弱性がある場合は詳細画面で情報を表示します。

CWEで検索する場合は、CWE概要を参照して、CWE番号を確認してください。

CRITICAL
HIGH
MEDIUM
LOW

更新日:2026年4月23日4:00

No	CVSS	レベル攻撃区分	ベンダー名	プロダクト名	タイトル	CWE	CVE	更新日	公表日	影響表示	Exploit PoC 検索
314201	6.2	MEDIUM	tolis_group	bru	xbru in BRU Workstation 17.0 allows local users to overwrite arbitrary files and gain root privileges via a symlink attack on the xbru_dscheck.dd temporary file.	NVD-CWE-Other	CVE-2002-1512	2008-09-6 05:30	2003-04-2	表示	GitHub Exploit DB Packet Storm

314202	4.6	MEDIUM	compaq	tcp-ip_services	The UCX POP server in HP TCP/IP services for OpenVMS 4.2 through 5.3 allows local users to truncate arbitrary files via the -logfile command line option, which overrides file system permissions becau…	NVD-CWE-Other	CVE-2002-1513	2008-09-6 05:30	2003-04-2	表示	GitHub Exploit DB Packet Storm

314203	7.2	HIGH	borland_software	interbase	gds_lock_mgr in Borland InterBase allows local users to overwrite files and gain privileges via a symlink attack on a "isc_init1.X" temporary file, as demonstrated by modifying the xinetdbd file.	NVD-CWE-Other	CVE-2002-1514	2008-09-6 05:30	2003-04-2	表示	GitHub Exploit DB Packet Storm

314204	5.0	MEDIUM	coolforum	coolforum	Directory traversal vulnerability in avatar.php in CoolForum 0.5 beta allows remote attackers to read arbitrary files via .. (dot dot) sequences in the img parameter.	NVD-CWE-Other	CVE-2002-1515	2008-09-6 05:30	2003-04-2	表示	GitHub Exploit DB Packet Storm

314205	4.6	MEDIUM	sgi	freeware irix	fsr_efs in IRIX 6.5 allows local users to conduct unauthorized file activities via a symlink attack, possibly via the .fsrlast file.	NVD-CWE-Other	CVE-2002-1517	2008-09-6 05:30	2003-04-2	表示	GitHub Exploit DB Packet Storm

314206	3.6	LOW	sgi	irix	mv in IRIX 6.5 creates a directory with world-writable permissions while moving a directory, which could allow local users to modify files and directories.	NVD-CWE-Other	CVE-2002-1518	2008-09-6 05:30	2003-04-2	表示	GitHub Exploit DB Packet Storm

314207	10.0	HIGH	rapidstream watchguard	rapidstream firebox	Format string vulnerability in the CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, allows remote attackers to cause a denial of service and possibly execute arb…	NVD-CWE-Other	CVE-2002-1519	2008-09-6 05:30	2003-04-2	表示	GitHub Exploit DB Packet Storm

314208	10.0	HIGH	rapidstream watchguard	rapidstream firebox	The CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, does not properly close the SSH connection when a -N option is provided during authentication, which allows …	NVD-CWE-Other	CVE-2002-1520	2008-09-6 05:30	2003-04-2	表示	GitHub Exploit DB Packet Storm

314209	2.1	LOW	mdg_computer_services	web_server_4d	Web Server 4D (WS4D) 3.6 stores passwords in plaintext in the Ws4d.4DD file, which allows attackers to gain privileges.	NVD-CWE-Other	CVE-2002-1521	2008-09-6 05:30	2003-04-2	表示	GitHub Exploit DB Packet Storm

314210	5.0	MEDIUM	cooolsoft	powerftp	Buffer overflow in PowerFTP FTP server 2.24, and possibly other versions, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long USER argument.	NVD-CWE-Other	CVE-2002-1522	2008-09-6 05:30	2003-04-2	表示	GitHub Exploit DB Packet Storm

314211	5.0	MEDIUM	daniel_arenz	mini_server	Directory traversal vulnerability in Daniel Arenz Mini Server 2.1.6 allows remote attackers to read arbitrary files via (1) ../ (dot-dot slash) or (2) ..\ (dot-dot backslash) sequences.	NVD-CWE-Other	CVE-2002-1523	2008-09-6 05:30	2003-04-2	表示	GitHub Exploit DB Packet Storm

314212	7.5	HIGH	nullsoft	winamp	Buffer overflow in XML parser in wsabi.dll of Winamp 3 (1.0.0.488) allows remote attackers to execute arbitrary code via a skin file (.wal) with a long include file tag.	NVD-CWE-Other	CVE-2002-1524	2008-09-6 05:30	2003-04-2	表示	GitHub Exploit DB Packet Storm

314213	5.0	MEDIUM	astaware sun	searchdisc sunone_starter_kit	Directory traversal vulnerability in ASTAware SearchDisk engine for Sun ONE Starter Kit 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack on port (1) 6015 or (2) 6016, or …	NVD-CWE-Other	CVE-2002-1525	2008-09-6 05:30	2003-04-2	表示	GitHub Exploit DB Packet Storm

314214	4.3	MEDIUM	emumail	emu_webmail	Cross-site scripting (XSS) vulnerability in emumail.cgi for EMU Webmail 5.0 allows remote attackers to inject arbitrary HTML or script via the email address field.	NVD-CWE-Other	CVE-2002-1526	2008-09-6 05:30	2003-04-2	表示	GitHub Exploit DB Packet Storm

314215	5.0	MEDIUM	emumail	emu_webmail	emumail.cgi in EMU Webmail 5.0 allows remote attackers to determine the full pathname for emumail.cgi via a malformed string containing script, which generates a regular expression matching error tha…	NVD-CWE-Other	CVE-2002-1527	2008-09-6 05:30	2003-04-2	表示	GitHub Exploit DB Packet Storm

314216	5.0	MEDIUM	mondosoft	mondosearch	MsmMask.exe in MondoSearch 4.4 allows remote attackers to obtain the source code of scripts via the mask parameter.	NVD-CWE-Other	CVE-2002-1528	2008-09-6 05:30	2003-04-2	表示	GitHub Exploit DB Packet Storm

314217	4.3	MEDIUM	surfcontrol	superscout_email_filter	Cross-site scripting (XSS) vulnerability in msgError.asp for the administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote attackers to insert arbitrary script or …	NVD-CWE-Other	CVE-2002-1529	2008-09-6 05:30	2003-03-31	表示	GitHub Exploit DB Packet Storm

314218	5.0	MEDIUM	surfcontrol	superscout_email_filter	The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows users to obtain usernames and plaintext passwords via a request to the userlist.asp program, which includes …	NVD-CWE-Other	CVE-2002-1530	2008-09-6 05:30	2003-03-31	表示	GitHub Exploit DB Packet Storm

314219	5.0	MEDIUM	surfcontrol	superscout_email_filter	The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote attackers to cause a denial of service (crash) via an HTTP request without a Content-Length parameter.	NVD-CWE-Other	CVE-2002-1531	2008-09-6 05:30	2003-03-31	表示	GitHub Exploit DB Packet Storm

314220	5.0	MEDIUM	surfcontrol	superscout_email_filter	The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote attackers to cause a denial of service (resource exhaustion) via a GET request without the terminatin…	NVD-CWE-Other	CVE-2002-1532	2008-09-6 05:30	2003-03-31	表示	GitHub Exploit DB Packet Storm

314221	5.8	MEDIUM	jetty	jetty	Cross-site scripting (XSS) vulnerability in Jetty JSP servlet engine allows remote attackers to insert arbitrary HTML or script via an HTTP request to a .jsp file whose name contains the malicious sc…	NVD-CWE-Other	CVE-2002-1533	2008-09-6 05:30	2003-03-31	表示	GitHub Exploit DB Packet Storm

314222	5.0	MEDIUM	macromedia	flash_player	Macromedia Flash Player allows remote attackers to read arbitrary files via XML script in a .swf file that is hosted on a remote SMB share.	NVD-CWE-Other	CVE-2002-1534	2008-09-6 05:30	2003-03-31	表示	GitHub Exploit DB Packet Storm

314223	5.0	MEDIUM	symantec	enterprise_firewall raptor_firewall	Secure Webserver 1.1 in Raptor 6.5 and Symantec Enterprise Firewall 6.5.2 allows remote attackers to identify IP addresses of hosts on the internal network via a CONNECT request, which generates diff…	NVD-CWE-Other	CVE-2002-1535	2008-09-6 05:30	2003-03-31	表示	GitHub Exploit DB Packet Storm

314224	7.5	HIGH	hans_persson	molly	Molly IRC bot 0.5 allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the $host variable for nslookup.pl, (2) the $to, $from, or $message variables in pop.pl, (3) th…	NVD-CWE-Other	CVE-2002-1536	2008-09-6 05:30	2003-03-31	表示	GitHub Exploit DB Packet Storm

314225	10.0	HIGH	phpbb_group	phpbb	admin_ug_auth.php in phpBB 2.0.0 allows local users to gain administrator privileges by directly calling admin_ug_auth.php with modifed form fields such as "u".	NVD-CWE-Other	CVE-2002-1537	2008-09-6 05:30	2003-03-31	表示	GitHub Exploit DB Packet Storm

314226	5.0	MEDIUM	acuma	acusend	Acuma Acusend 4, and possibly earlier versions, allows remote authenticated users to read the reports of other users by inferring the full URL, whose name is easily predictable.	NVD-CWE-Other	CVE-2002-1538	2008-09-6 05:30	2003-03-31	表示	GitHub Exploit DB Packet Storm

314227	5.0	MEDIUM	alt-n	mdaemon	Buffer overflow in MDaemon POP server 6.0.7 and earlier allows remote authenticated users to cause a denial of service via long (1) DELE or (2) UIDL arguments.	NVD-CWE-Other	CVE-2002-1539	2008-09-6 05:30	2003-03-31	表示	GitHub Exploit DB Packet Storm

314228	7.5	HIGH	working_resources_inc.	badblue	BadBlue 1.7 allows remote attackers to bypass password protections for directories and files via an HTTP request containing an extra / (slash).	NVD-CWE-Other	CVE-2002-1541	2008-09-6 05:30	2003-03-31	表示	GitHub Exploit DB Packet Storm

314229	5.0	MEDIUM	solarwinds	tftp_server	SolarWinds TFTP server 5.0.55 and earlier allows remote attackers to cause a denial of service (crash) via a large UDP datagram, possibly triggering a buffer overflow.	NVD-CWE-Other	CVE-2002-1542	2008-09-6 05:30	2003-03-31	表示	GitHub Exploit DB Packet Storm

314230	4.6	MEDIUM	netbsd	netbsd	Buffer overflow in trek on NetBSD 1.5 through 1.5.3 allows local users to gain privileges via long keyboard input.	NVD-CWE-Other	CVE-2002-1543	2008-09-6 05:30	2003-03-31	表示	GitHub Exploit DB Packet Storm

314231	6.4	MEDIUM	cooolsoft	personal_ftp_server	Directory traversal vulnerability in CooolSoft Personal FTP Server 2.24 allows remote attackers to read or modify arbitrary files via .. (dot dot) sequences in the commands (1) LIST (ls), (2) mkdir, …	NVD-CWE-Other	CVE-2002-1544	2008-09-6 05:30	2003-03-31	表示	GitHub Exploit DB Packet Storm

314232	5.0	MEDIUM	cooolsoft	personal_ftp_server	CooolSoft Personal FTP Server 2.24 allows remote attackers to obtain the absolute pathname of the FTP root via a PWD command, which includes the full path in the response.	NVD-CWE-Other	CVE-2002-1545	2008-09-6 05:30	2003-03-31	表示	GitHub Exploit DB Packet Storm

314233	7.5	HIGH	brs	webweaver	BRS WebWeaver Web Server 1.01 allows remote attackers to bypass password protections for files and directories via an HTTP request containing a "/./" sequence.	NVD-CWE-Other	CVE-2002-1546	2008-09-6 05:30	2003-03-31	表示	GitHub Exploit DB Packet Storm

314234	5.0	MEDIUM	juniper	netscreen_screenos	Netscreen running ScreenOS 4.0.0r6 and earlier allows remote attackers to cause a denial of service via a malformed SSH packet to the Secure Command Shell (SCS) management interface, as demonstrated …	NVD-CWE-Other	CVE-2002-1547	2008-09-6 05:30	2003-03-31	表示	GitHub Exploit DB Packet Storm

314235	7.5	HIGH	light_httpd	light_httpd	Buffer overflow in Light HTTPd (lhttpd) 0.1 allows remote attackers to execute arbitrary code via a long HTTP GET request.	NVD-CWE-Other	CVE-2002-1549	2008-09-6 05:30	2003-03-31	表示	GitHub Exploit DB Packet Storm

314236	4.6	MEDIUM	ibm	aix	dump_smutil.sh in IBM AIX allows local users to overwrite arbitrary files via a symlink attack on temporary files.	NVD-CWE-Other	CVE-2002-1550	2008-09-6 05:30	2003-03-31	表示	GitHub Exploit DB Packet Storm

314237	4.6	MEDIUM	ibm	aix	Buffer overflow in nslookup in IBM AIX may allow attackers to cause a denial of service or execute arbitrary code.	NVD-CWE-Other	CVE-2002-1551	2008-09-6 05:30	2003-03-31	表示	GitHub Exploit DB Packet Storm

314238	5.0	MEDIUM	research_systems_inc.	ion_script	Directory traversal vulnerability in ion-p.exe (aka ion-p) allows remote attackers to read arbitrary files via (1) C: (drive letter) or (2) .. (dot-dot) sequences in the page parameter.	NVD-CWE-Other	CVE-2002-1559	2008-09-6 05:30	2003-03-31	表示	GitHub Exploit DB Packet Storm

314239	10.0	HIGH	martin_bauer	gbook	index.php in gBook 1.4 allows remote attackers to bypass authentication and gain administrative privileges by setting the login parameter to true.	NVD-CWE-Other	CVE-2002-1560	2008-09-6 05:30	2003-03-31	表示	GitHub Exploit DB Packet Storm

314240	10.0	HIGH	mailreader.com	mailreader.com	compose.cgi in Mailreader.com 2.3.30 and 2.3.31, when using Sendmail as the Mail Transfer Agent, allows remote attackers to execute arbitrary commands via shell metacharacters in the RealEmail config…	NVD-CWE-Other	CVE-2002-1582	2008-09-6 05:30	2004-12-6	表示	GitHub Exploit DB Packet Storm

314241	7.2	HIGH	ibm	db2_universal_database	Buffer overflow in sqllib/security/db2ckpw for IBM DB2 Universal Database 6.0 and 7.0 allows local users to execute arbitrary code via a long username that is read from a file descriptor argument.	NVD-CWE-Other	CVE-2002-1583	2008-09-6 05:30	2004-09-28	表示	GitHub Exploit DB Packet Storm

314242	2.1	LOW	mozilla	bugzilla	Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, allows authenticated users with editing privileges to delete other users by directly calling the editusers.cgi script with the "del" option.	NVD-CWE-Other	CVE-2002-0806	2008-09-6 05:29	2002-08-12	表示	GitHub Exploit DB Packet Storm

314243	7.5	HIGH	mozilla	bugzilla	Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, when performing a mass change, sets the groupset of all bugs to the groupset of the first bug, which could inadvertently cause insecure groupset …	NVD-CWE-Other	CVE-2002-0808	2008-09-6 05:29	2002-08-12	表示	GitHub Exploit DB Packet Storm

314244	7.5	HIGH	mozilla	bugzilla	Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, does not properly handle URL-encoded field names that are generated by some browsers, which could cause certain fields to appear to be unset, whi…	NVD-CWE-Other	CVE-2002-0809	2008-09-6 05:29	2002-08-12	表示	GitHub Exploit DB Packet Storm

314245	5.0	MEDIUM	mozilla	bugzilla	Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, directs error messages from the syncshadowdb command to the HTML output, which could leak sensitive information, including plaintext passwords, i…	NVD-CWE-Other	CVE-2002-0810	2008-09-6 05:29	2002-08-12	表示	GitHub Exploit DB Packet Storm

314246	7.5	HIGH	padl_software	nss_ldap	Buffer overflow in the DNS SRV code for nss_ldap before nss_ldap-198 allows remote attackers to cause a denial of service and possibly execute arbitrary code.	NVD-CWE-Other	CVE-2002-0825	2008-09-6 05:29	2002-08-12	表示	GitHub Exploit DB Packet Storm

314247	7.2	HIGH	caldera	unixware openunix	Vulnerability in pppd on UnixWare 7.1.1 and Open UNIX 8.0.0 allows local users to gain root privileges via (1) ppptalk or (2) ppp, a different vulnerability than CVE-2002-0824.	NVD-CWE-Other	CVE-2002-0827	2008-09-6 05:29	2002-08-12	表示	GitHub Exploit DB Packet Storm

314248	5.0	MEDIUM	caldera redhat hp	openlinux_server openlinux_workstation pre-execution_environment secure_os	Preboot eXecution Environment (PXE) server allows remote attackers to cause a denial of service (crash) via certain DHCP packets from Voice-Over-IP (VOIP) phones.	NVD-CWE-Other	CVE-2002-0835	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

314249	7.2	HIGH	isdn4linux	isdn4linux	Format string vulnerability in ISDN Point to Point Protocol (PPP) daemon (ipppd) in the ISDN4Linux (i4l) package allows local users to gain root privileges via format strings in the device name comma…	NVD-CWE-Other	CVE-2002-0851	2008-09-6 05:29	2002-09-5	表示	GitHub Exploit DB Packet Storm

314250	7.5	HIGH	gnu	mailman	Cross-site scripting vulnerability in Mailman before 2.0.12 allows remote attackers to execute script as other users via a subscriber's list subscription options in the (1) adminpw or (2) info parame…	NVD-CWE-Other	CVE-2002-0855	2008-09-6 05:29	2002-09-5	表示	GitHub Exploit DB Packet Storm