NVD脆弱性情報トップ

検索メニュー表示

ベンダー名
プロダクト・サービス名
タイトル
CVE
CRITICAL
HIGH
MEDIUM
LOW
CWE
公表日降順
更新日降順
表示数

NVD（National Vulnerability Database）で管理されている脆弱性の一覧を検索することが出来ます。
JVN（Japan Vulnerability Note）より先に脆弱性情報が更新される事が多いため、JVNに未記載の脆弱性が更新されている場合があります。

JVN（Japan Vulnerability Note）に関連した脆弱性がある場合は詳細画面で情報を表示します。

CWEで検索する場合は、CWE概要を参照して、CWE番号を確認してください。

CRITICAL
HIGH
MEDIUM
LOW

更新日:2026年4月22日4:00

No	CVSS	レベル攻撃区分	ベンダー名	プロダクト名	タイトル	CWE	CVE	更新日	公表日	影響表示	Exploit PoC 検索
314401	7.5	HIGH	squirrelmail	squirrelmail	Cross-site scripting vulnerabilities in SquirrelMail 1.2.7 and earlier allows remote attackers to execute script as other web users via (1) addressbook.php, (2) options.php, (3) search.php, or (4) he…	NVD-CWE-Other	CVE-2002-1131	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

314402	5.0	MEDIUM	squirrelmail	squirrelmail	SquirrelMail 1.2.7 and earlier allows remote attackers to determine the absolute pathname of the options.php script via a malformed optpage file argument, which generates an error message when the fi…	NVD-CWE-Other	CVE-2002-1132	2008-09-6 05:29	2002-10-4	表示	GitHub Exploit DB Packet Storm

314403	5.0	MEDIUM	stephen_turner	analog	anlgform.pl in Analog before 5.23 does not restrict access to the PROGRESSFREQ progress update command, which allows remote attackers to cause a denial of service (disk consumption) by using the comm…	NVD-CWE-Other	CVE-2002-1154	2008-09-6 05:29	2002-10-11	表示	GitHub Exploit DB Packet Storm

314404	7.5	HIGH	mod_ssl	mod_ssl	Cross-site scripting vulnerability in the mod_ssl Apache module 2.8.9 and earlier, when UseCanonicalName is off and wildcard DNS is enabled, allows remote attackers to execute script as other web sit…	NVD-CWE-Other	CVE-2002-1157	2008-09-6 05:29	2002-11-4	表示	GitHub Exploit DB Packet Storm

314405	7.5	HIGH	checkpoint	check_point_vpn firewall-1 next_generation	Check Point FireWall-1 SecuRemote/SecuClient 4.0 and 4.1 allows clients to bypass the "authentication timeout" by modifying the to_expire or expire values in the client's users.C configuration file.	NVD-CWE-Other	CVE-2002-0428	2008-09-6 05:28	2002-08-12	表示	GitHub Exploit DB Packet Storm

314406	5.0	MEDIUM	dave_lawrence	xtux	XTux allows remote attackers to cause a denial of service (CPU consumption) via random inputs in the initial connection.	NVD-CWE-Other	CVE-2002-0431	2008-09-6 05:28	2002-07-26	表示	GitHub Exploit DB Packet Storm

314407	10.0	HIGH	citadel	ux	Buffer overflow in (1) lprintf and (2) cprintf in sysdep.c of Citadel/UX 5.90 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via attacks …	NVD-CWE-Other	CVE-2002-0432	2008-09-6 05:28	2002-07-26	表示	GitHub Exploit DB Packet Storm

314408	5.0	MEDIUM	pi3	pi3web	Pi3Web 2.0.0 allows remote attackers to view restricted files via an HTTP request containing a "*" (wildcard or asterisk) character.	NVD-CWE-Other	CVE-2002-0433	2008-09-6 05:28	2002-07-26	表示	GitHub Exploit DB Packet Storm

314409	10.0	HIGH	marcus_s._xenakis	directory.php	Marcus S. Xenakis directory.php script allows remote attackers to execute arbitrary commands via shell metacharacters in the dir parameter.	NVD-CWE-Other	CVE-2002-0434	2008-09-6 05:28	2002-07-26	表示	GitHub Exploit DB Packet Storm

314410	1.2	LOW	gnu	fileutils	Race condition in the recursive (1) directory deletion and (2) directory move in GNU File Utilities (fileutils) 4.1 and earlier allows local users to delete directories as the user running fileutils …	NVD-CWE-Other	CVE-2002-0435	2008-09-6 05:28	2002-07-26	表示	GitHub Exploit DB Packet Storm

314411	10.0	HIGH	stefan_frings	sms_server_tools	Smsd in SMS Server Tools (SMStools) before 1.4.8 allows remote attackers to execute arbitrary commands via shell metacharacters (backquotes) in message text, as described with the term "string format…	NVD-CWE-Other	CVE-2002-0437	2008-09-6 05:28	2002-07-26	表示	GitHub Exploit DB Packet Storm

314412	7.5	HIGH	caupo.net	cauposhop	Cross-site scripting vulnerability in CaupoShop 1.30a and earlier, and possibly CaupoShopPro, allows remote attackers to execute arbitrary Javascript and steal credit card numbers or delete items by …	NVD-CWE-Other	CVE-2002-0439	2008-09-6 05:28	2002-07-26	表示	GitHub Exploit DB Packet Storm

314413	5.0	MEDIUM	jerrett_taylor	php_imglist	Directory traversal vulnerability in imlist.php for Php Imglist allows remote attackers to read arbitrary code via a .. (dot dot) in the cwd parameter.	NVD-CWE-Other	CVE-2002-0441	2008-09-6 05:28	2002-07-26	表示	GitHub Exploit DB Packet Storm

314414	7.2	HIGH	caldera	openserver	Buffer overflow in dlvr_audit for Caldera OpenServer 5.0.5 and 5.0.6 allows local users to gain root privileges.	NVD-CWE-Other	CVE-2002-0442	2008-09-6 05:28	2002-07-26	表示	GitHub Exploit DB Packet Storm

314415	7.5	HIGH	microsoft	windows_2000_terminal_services	Microsoft Windows 2000 running the Terminal Server 90-day trial version, and possibly other versions, does not apply group policies to incoming users when the number of connections to the SYSVOL shar…	NVD-CWE-Other	CVE-2002-0444	2008-09-6 05:28	2002-07-26	表示	GitHub Exploit DB Packet Storm

314416	5.0	MEDIUM	php_firstpost	php_firstpost	article.php in PHP FirstPost 0.1 allows allows remote attackers to obtain the full pathname of the server via an invalid post number in the post parameter, which leaks the pathname in an error messag…	NVD-CWE-Other	CVE-2002-0445	2008-09-6 05:28	2002-07-26	表示	GitHub Exploit DB Packet Storm

314417	5.0	MEDIUM	black_tie_project	black_tie_project	categorie.php3 in Black Tie Project (BTP) 0.4b through 0.5b allows remote attackers to determine the absolute path of the web server via an invalid category ID (cid) parameter, which leaks the pathna…	NVD-CWE-Other	CVE-2002-0446	2008-09-6 05:28	2002-07-26	表示	GitHub Exploit DB Packet Storm

314418	5.0	MEDIUM	xerver	xerver	Directory traversal vulnerability in Xerver Free Web Server 2.10 and earlier allows remote attackers to list arbitrary directories via a .. (dot dot) in an HTTP GET request.	NVD-CWE-Other	CVE-2002-0447	2008-09-6 05:28	2002-07-26	表示	GitHub Exploit DB Packet Storm

314419	5.0	MEDIUM	xerver	xerver	Xerver Free Web Server 2.10 and earlier allows remote attackers to cause a denial of service (crash) via an HTTP request that contains many "C:/" sequences.	NVD-CWE-Other	CVE-2002-0448	2008-09-6 05:28	2002-07-26	表示	GitHub Exploit DB Packet Storm

314420	7.5	HIGH	phpprojekt	phpprojekt	filemanager_forms.php in PHProjekt 3.1 and 3.1a allows remote attackers to execute arbitrary PHP code by specifying the URL to the code in the lib_path parameter.	NVD-CWE-Other	CVE-2002-0451	2008-09-6 05:28	2002-08-12	表示	GitHub Exploit DB Packet Storm

314421	7.5	HIGH	foundrynet	serveriron	Foundry Networks ServerIron switches do not decode URIs when applying "url-map" rules, which could make it easier for attackers to cause the switch to forward traffic to a different server than inten…	NVD-CWE-Other	CVE-2002-0452	2008-09-6 05:28	2002-08-12	表示	GitHub Exploit DB Packet Storm

314422	7.5	HIGH	oblix	netpoint	The account lockout capability in Oblix NetPoint 5.2 and earlier only locks out users once for the specified lockout period, which makes it easier for remote attackers to conduct brute force password…	NVD-CWE-Other	CVE-2002-0453	2008-09-6 05:28	2002-08-12	表示	GitHub Exploit DB Packet Storm

314423	5.0	MEDIUM	qualcomm	qpopper	Qpopper (aka in.qpopper or popper) 4.0.3 and earlier allows remote attackers to cause a denial of service (CPU consumption) via a very large string, which causes an infinite loop.	NVD-CWE-Other	CVE-2002-0454	2008-09-6 05:28	2002-08-12	表示	GitHub Exploit DB Packet Storm

314424	5.0	MEDIUM	incredimail	incredimail	IncrediMail stores attachments in a directory with a fixed name, which could make it easier for attackers to exploit vulnerabilities in other software that rely on installing and reading files from d…	NVD-CWE-Other	CVE-2002-0455	2008-09-6 05:28	2002-08-12	表示	GitHub Exploit DB Packet Storm

314425	7.6	HIGH	bg_guestbook	bg_guestbook	Cross-site scripting vulnerability in signgbook.php for BG GuestBook 1.0 allows remote attackers to execute arbitrary Javascript via encoded tags such as <, >, and & in fields such as (1) n…	NVD-CWE-Other	CVE-2002-0457	2008-09-6 05:28	2002-08-12	表示	GitHub Exploit DB Packet Storm

314426	7.6	HIGH	linux-sottises	news-tnk	Cross-site scripting vulnerability in News-TNK 1.2.1 and earlier allows remote attackers to execute arbitrary Javascript via the WEB parameter.	NVD-CWE-Other	CVE-2002-0458	2008-09-6 05:28	2002-08-12	表示	GitHub Exploit DB Packet Storm

314427	7.6	HIGH	linux-sottises	board-tnk news-tnk	Cross-site scripting vulnerability in Board-TNK 1.3.1 and earlier allows remote attackers to execute arbitrary Javascript via the WEB parameter.	NVD-CWE-Other	CVE-2002-0459	2008-09-6 05:28	2002-08-12	表示	GitHub Exploit DB Packet Storm

314428	5.0	MEDIUM	bitvise	winsshd	Bitvise WinSSHD before 2002-03-16 allows remote attackers to cause a denial of service (resource exhaustion) via a large number of incomplete connections that are not properly terminated, which are n…	NVD-CWE-Other	CVE-2002-0460	2008-09-6 05:28	2002-08-12	表示	GitHub Exploit DB Packet Storm

314429	6.4	MEDIUM	big_sam	big_sam	bigsam_guestbook.php for Big Sam (Built-In Guestbook Stand-Alone Module) 1.1.08 and earlier allows remote attackers to cause a denial of service (CPU consumption) or obtain the absolute path of the w…	NVD-CWE-Other	CVE-2002-0462	2008-09-6 05:28	2002-08-12	表示	GitHub Exploit DB Packet Storm

314430	5.0	MEDIUM	arsc_really_simple_chat	arsc_really_simple_chat	home.php in ARSC (Really Simple Chat) 1.0.1 and earlier allows remote attackers to determine the full pathname of the web server via an invalid language in the arsc_language parameter, which leaks th…	NVD-CWE-Other	CVE-2002-0463	2008-09-6 05:28	2002-08-12	表示	GitHub Exploit DB Packet Storm

314431	6.4	MEDIUM	hosting_controller	hosting_controller	Directory traversal vulnerability in Hosting Controller 1.4.1 and earlier allows remote attackers to read and modify arbitrary files and directories via a .. (dot dot) in arguments to (1) file_editor…	NVD-CWE-Other	CVE-2002-0464	2008-09-6 05:28	2002-08-12	表示	GitHub Exploit DB Packet Storm

314432	10.0	HIGH	ecartis listar	ecartis listar	Buffer overflows in Ecartis (formerly Listar) 1.0.0 before snapshot 20020125 allows remote attackers to execute arbitrary code via (1) address_match() of mystring.c or (2) other functions in tolist.c.	NVD-CWE-Other	CVE-2002-0467	2008-09-6 05:28	2002-08-12	表示	GitHub Exploit DB Packet Storm

314433	7.2	HIGH	ecartis listar	ecartis listar	Ecartis (formerly Listar) 1.0.0 in snapshot 20020125 and earlier does not properly drop privileges when Ecartis is installed setuid-root, "lock-to-user" is not set, and ecartis is called by certain M…	NVD-CWE-Other	CVE-2002-0469	2008-09-6 05:28	2002-08-12	表示	GitHub Exploit DB Packet Storm

314434	5.0	MEDIUM	microsoft	msn_messenger	MSN Messenger Service 3.6, and possibly other versions, uses weak authentication when exchanging messages between clients, which allows remote attackers to spoof messages from other users.	NVD-CWE-Other	CVE-2002-0472	2008-09-6 05:28	2002-08-12	表示	GitHub Exploit DB Packet Storm

314435	5.1	MEDIUM	zeroforum	zeroforum	Cross-site scripting vulnerability in ZeroForum allows remote attackers to execute arbitrary Javascript on web clients by embedding the script within IMG image tag.	NVD-CWE-Other	CVE-2002-0474	2008-09-6 05:28	2002-08-12	表示	GitHub Exploit DB Packet Storm

314436	5.1	MEDIUM	phpbb_group	phpbb	Cross-site scripting vulnerability in phpBB 1.4.4 and earlier allows remote attackers to execute arbitrary Javascript on web clients by embedding the script within an IMG image tag while editing a me…	NVD-CWE-Other	CVE-2002-0475	2008-09-6 05:28	2002-08-12	表示	GitHub Exploit DB Packet Storm

314437	5.0	MEDIUM	macromedia	flash_player	Standalone Macromedia Flash Player 5.0 allows remote attackers to save arbitrary files and programs via a .SWF file containing the undocumented "save" FSCommand.	NVD-CWE-Other	CVE-2002-0476	2008-09-6 05:28	2002-08-12	表示	GitHub Exploit DB Packet Storm

314438	7.2	HIGH	gravity_storm_software	service_pack_manager_2000	Gravity Storm Service Pack Manager 2000 creates a hidden share (SPM2000c$) mapped to the C drive, which may allow local users to bypass access restrictions on certain directories in the C drive, such…	NVD-CWE-Other	CVE-2002-0479	2008-09-6 05:28	2002-08-12	表示	GitHub Exploit DB Packet Storm

314439	5.1	MEDIUM	microsoft	outlook	An interaction between Windows Media Player (WMP) and Outlook 2002 allows remote attackers to bypass Outlook security settings and execute Javascript via an IFRAME in an HTML email message that refer…	NVD-CWE-Other	CVE-2002-0481	2008-09-6 05:28	2002-08-12	表示	GitHub Exploit DB Packet Storm

314440	5.0	MEDIUM	newlog	netsupport_manager	Directory traversal vulnerability in PCI Netsupport Manager before version 7, when running web extensions, allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP GET request.	NVD-CWE-Other	CVE-2002-0482	2008-09-6 05:28	2002-08-12	表示	GitHub Exploit DB Packet Storm

314441	5.0	MEDIUM	francisco_burzi	php-nuke	index.php for PHP-Nuke 5.4 and earlier allows remote attackers to determine the physical pathname of the web server when the file parameter is set to index.php, which triggers an error message that l…	NVD-CWE-Other	CVE-2002-0483	2008-09-6 05:28	2002-08-12	表示	GitHub Exploit DB Packet Storm

314442	4.6	MEDIUM	workforceroi	xpede	Intellisol Xpede 4.1 stores passwords in plaintext in a Javascript "session timeout" re-authentication capability, which could allow local users with access to gain privileges of other Xpede users by…	NVD-CWE-Other	CVE-2002-0487	2008-09-6 05:28	2002-08-12	表示	GitHub Exploit DB Packet Storm

314443	10.0	HIGH	instant_web_mail	instant_web_mail	Instant Web Mail before 0.60 does not properly filter CR/LF sequences, which allows remote attackers to (1) execute arbitrary POP commands via the id parameter in message.php, or (2) modify certain m…	NVD-CWE-Other	CVE-2002-0490	2008-09-6 05:28	2002-08-12	表示	GitHub Exploit DB Packet Storm

314444	10.0	HIGH	alguest	alguest	admin.php in AlGuest 1.0 guestbook checks for the existence of the admin cookie to authenticate the AlGuest administrator, which allows remote attackers to bypass the authentication and gain privileg…	NVD-CWE-Other	CVE-2002-0491	2008-09-6 05:28	2002-08-12	表示	GitHub Exploit DB Packet Storm

314445	5.0	MEDIUM	dcscripts	dcshop	dcshop.cgi in DCShop 1.002 Beta allows remote attackers to delete arbitrary setup files via a null character in the database parameter.	NVD-CWE-Other	CVE-2002-0492	2008-09-6 05:28	2002-08-12	表示	GitHub Exploit DB Packet Storm

314446	7.5	HIGH	websight_directory_system	websight_directory_system	Cross-site scripting vulnerability in WebSight Directory System 0.1 allows remote attackers to execute arbitrary Javascript and gain access to the WebSight administrator via a new link submission con…	NVD-CWE-Other	CVE-2002-0494	2008-09-6 05:28	2002-08-12	表示	GitHub Exploit DB Packet Storm

314447	7.5	HIGH	websight_directory_system	websight_directory_system	This vulnerability is addressed in the following product release: WebSight Directory System, WebSight Directory System, 0.1.1	NVD-CWE-Other	CVE-2002-0494	2008-09-6 05:28	2002-08-12	表示	GitHub Exploit DB Packet Storm

314448	5.0	MEDIUM	southwest	southwest	The HTTP server for SouthWest Talker server 1.0.0 allows remote attackers to cause a denial of service (server crash) via a malformed URL to port 5002.	NVD-CWE-Other	CVE-2002-0496	2008-09-6 05:28	2002-08-12	表示	GitHub Exploit DB Packet Storm

314449	2.1	LOW	mtr	mtr	Buffer overflow in mtr 0.46 and earlier, when installed setuid root, allows local users to access a raw socket via a long MTR_OPTIONS environment variable.	NVD-CWE-Other	CVE-2002-0497	2008-09-6 05:28	2002-08-12	表示	GitHub Exploit DB Packet Storm

314450	4.6	MEDIUM	etnus	totalview	Etnus TotalView 5.0.0-4 installs certain files with UID 5039 and GID 59, which could allow local users with that UID or GID to modify the files and gain privileges as other TotalView users.	NVD-CWE-Other	CVE-2002-0498	2008-09-6 05:28	2002-08-12	表示	GitHub Exploit DB Packet Storm