NVD脆弱性情報トップ

検索メニュー表示

ベンダー名
プロダクト・サービス名
タイトル
CVE
CRITICAL
HIGH
MEDIUM
LOW
CWE
公表日降順
更新日降順
表示数

NVD（National Vulnerability Database）で管理されている脆弱性の一覧を検索することが出来ます。
JVN（Japan Vulnerability Note）より先に脆弱性情報が更新される事が多いため、JVNに未記載の脆弱性が更新されている場合があります。

JVN（Japan Vulnerability Note）に関連した脆弱性がある場合は詳細画面で情報を表示します。

CWEで検索する場合は、CWE概要を参照して、CWE番号を確認してください。

CRITICAL
HIGH
MEDIUM
LOW

更新日:2026年7月16日4:30

No	CVSS	レベル攻撃区分	ベンダー名	プロダクト名	タイトル	CWE	CVE	更新日	公表日	影響表示	Exploit PoC 検索
364951	5.0	MEDIUM	tac	vista	Directory traversal vulnerability in the web interface (ISALogin.dll) for TAC Vista 4.0, and possibly other versions before 4.3, allows remote attackers to read arbitrary files via ".." sequences in …	NVD-CWE-Other	CVE-2005-3040	2008-09-6 05:53	2005-09-22	表示	GitHub Exploit DB Packet Storm

364952	5.0	MEDIUM	multitheftauto	multitheftauto	MultiTheftAuto 0.5 patch 1 and earlier does not properly verify client privileges when running command 40, which allows remote attackers to change or delete the message of the day (motd.txt).	NVD-CWE-Other	CVE-2005-3064	2008-09-6 05:53	2005-09-28	表示	GitHub Exploit DB Packet Storm

364953	10.0	HIGH	eric_integrated_development_environment	eric_integrated_development_environment	Unspecified vulnerability in Eric Integrated Development Environment (eric3) before 3.7.2 has unknown impact and attack vectors related to a "potential security exploit."	NVD-CWE-Other	CVE-2005-3068	2008-09-6 05:53	2005-09-28	表示	GitHub Exploit DB Packet Storm

364954	2.1	LOW	hylafax	hylafax	xferfaxstats in HylaFax 4.2.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on the xferfax$$ temporary file.	NVD-CWE-Other	CVE-2005-3069	2008-09-6 05:53	2005-09-28	表示	GitHub Exploit DB Packet Storm

364955	3.6	LOW	hylafax	hylafax	HylaFax 4.2.1 and earlier does not create or verify ownership of the UNIX domain socket, which might allow local users to read faxes and cause a denial of service by creating the socket using the hyl…	NVD-CWE-Other	CVE-2005-3070	2008-09-6 05:53	2005-09-28	表示	GitHub Exploit DB Packet Storm

364956	7.5	HIGH	rsyslog	rsyslogd	SQL injection vulnerability in rsyslogd in RSyslog before 1.0.1 and before 1.10.1 allows remote attackers to execute arbitrary SQL commands via crafted syslog messages.	NVD-CWE-Other	CVE-2005-3074	2008-09-6 05:53	2005-09-28	表示	GitHub Exploit DB Packet Storm

364957	7.5	HIGH	mpc-donkey	zengaia	SQL injection vulnerability in Zengaia before 0.2 allows remote attackers to execute arbitrary SQL commands via unknown vectors.	NVD-CWE-Other	CVE-2005-3075	2008-09-6 05:53	2005-09-28	表示	GitHub Exploit DB Packet Storm

364958	7.5	HIGH	simplog	simplog	Simplog 0.9.1 might allow remote attackers to execute arbitrary SQL commands or trigger SQL error messages via invalid (1) pid, (2) blogid, (3) cid, or (4) m parameters to archive.php, or the (5) blo…	NVD-CWE-Other	CVE-2005-3076	2008-09-6 05:53	2005-09-28	表示	GitHub Exploit DB Packet Storm

364959	5.0	MEDIUM	microsoft	ie_for_macintosh	Microsoft Internet Explorer 5.2.3 for Mac OS allows remote attackers to cause a denial of service (crash) via a web page with malformed attributes in a BGSOUND tag, possibly involving double-quotes i…	NVD-CWE-Other	CVE-2005-3077	2008-09-6 05:53	2005-09-28	表示	GitHub Exploit DB Packet Storm

364960	4.3	MEDIUM	punbb	punbb	Cross-site scripting (XSS) vulnerability in PunBB before 1.2.8 allows remote attackers to inject arbitrary web script or HTML via the "forgotten e-mail" feature.	NVD-CWE-Other	CVE-2005-3078	2008-09-6 05:53	2005-09-28	表示	GitHub Exploit DB Packet Storm

364961	4.6	MEDIUM	punbb	punbb	PunBB before 1.2.8 allows remote attackers to perform "code inclusion" via the user language selection.	NVD-CWE-Other	CVE-2005-3079	2008-09-6 05:53	2005-09-28	表示	GitHub Exploit DB Packet Storm

364962	5.0	MEDIUM	geshi	geshi	contrib/example.php in GeSHi before 1.0.7.3 allows remote attackers to read arbitrary files via the language field without a source field set.	NVD-CWE-Other	CVE-2005-3080	2008-09-6 05:53	2005-09-28	表示	GitHub Exploit DB Packet Storm

364963	4.6	MEDIUM	wzdftpd	wzdftpd	wzdftpd 0.5.4 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the SITE command.	NVD-CWE-Other	CVE-2005-3081	2008-09-6 05:53	2005-09-28	表示	GitHub Exploit DB Packet Storm

364964	5.0	MEDIUM	sony	playstation_portable	Buffer overflow in the TIFF library in the Photo Viewer for Sony PSP 2.0 firmware allows remote attackers to cause a denial of service via a crafted TIFF image.	NVD-CWE-Other	CVE-2005-3084	2008-09-6 05:53	2005-09-28	表示	GitHub Exploit DB Packet Storm

364965	4.3	MEDIUM	riverdark_studios	rss_syndicator_module	Multiple cross-site scripting (XSS) vulnerabilities in rss.php in Riverdark Studios RSS Syndicator module 2.1.7 allow remote attackers to inject arbitrary web script or HTML via the (1) forum or (2) …	NVD-CWE-Other	CVE-2005-3085	2008-09-6 05:53	2005-09-28	表示	GitHub Exploit DB Packet Storm

364966	6.4	MEDIUM	contentserv	contentserv	Directory traversal vulnerability in admin/about.php in contentServ 3.1 allows remote attackers to read or include arbitrary files via ".." sequences in the ctsWebsite parameter.	NVD-CWE-Other	CVE-2005-3086	2008-09-6 05:53	2005-09-28	表示	GitHub Exploit DB Packet Storm

364967	5.0	MEDIUM	securew2	securew2	The SecureW2 3.0 TLS implementation uses weak random number generators (rand and srand from system time) during generation of the pre-master secret (PMS), which makes it easier for attackers to guess…	NVD-CWE-Other	CVE-2005-3087	2008-09-6 05:53	2005-09-28	表示	GitHub Exploit DB Packet Storm

364968	4.3	MEDIUM	mantis	mantis	Cross-site scripting (XSS) vulnerability in Mantis before 1.0.0rc1 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors, as identified by bug#0005751 "thraxisp".	NVD-CWE-Other	CVE-2005-3091	2008-09-6 05:53	2005-09-29	表示	GitHub Exploit DB Packet Storm

364969	5.0	MEDIUM	nokia	3210 7610	Nokia 7610 and 3210 phones allows attackers to cause a denial of service via certain characters in the filename of a Bluetooth OBEX transfer.	NVD-CWE-Other	CVE-2005-3093	2008-09-6 05:53	2005-09-29	表示	GitHub Exploit DB Packet Storm

364970	5.0	MEDIUM	avi_alkalay	contribute.cgi	Directory traversal vulnerability in Avi Alkalay contribute.cgi (aka contribute.pl), dated 16 Jun 2002, allows remote attackers to overwrite arbitrary files via ".." sequences in the contribdir varia…	NVD-CWE-Other	CVE-2005-3097	2008-09-6 05:53	2005-09-29	表示	GitHub Exploit DB Packet Storm

364971	5.0	MEDIUM	astaro	security_linux	Unspecified "PPTP Remote DoS Vulnerability" in Astaro Security Linux 4.027 allows attackers to cause a denial of service.	NVD-CWE-Other	CVE-2005-3100	2008-09-6 05:53	2005-09-29	表示	GitHub Exploit DB Packet Storm

364972	5.0	MEDIUM	six_apart	movable_type	The password reset feature in Movable Type before 3.2 generates different error messages depending on whether a user exists or not, which allows remote attackers to determine valid usernames.	NVD-CWE-Other	CVE-2005-3101	2008-09-6 05:53	2005-09-29	表示	GitHub Exploit DB Packet Storm

364973	5.0	MEDIUM	-	-	The administrative interface in Movable Type allows attackers to upload files with arbitrary extensions under the web root.	NVD-CWE-Other	CVE-2005-3102	2008-09-6 05:53	2005-09-29	表示	GitHub Exploit DB Packet Storm

364974	4.3	MEDIUM	six_apart	movable_type	Cross-site scripting (XSS) vulnerability in Movable Type before 3.2 allows remote attackers to inject arbitrary web script or HTML via the (1) title, (2) category, (3) body, (4) extended body, and (5…	NVD-CWE-Other	CVE-2005-3103	2008-09-6 05:53	2005-09-29	表示	GitHub Exploit DB Packet Storm

364975	2.6	LOW	six_apart	movable_type	mt-comments.cgi in Movable Type before 3.2 allows attackers to redirect users to other web sites via URLs in comments.	NVD-CWE-Other	CVE-2005-3104	2008-09-6 05:53	2005-09-29	表示	GitHub Exploit DB Packet Storm

364976	2.1	LOW	macromedia	breeze	The "reset password" feature in Macromedia Breeze 5.0 stores passwords in plaintext in the database instead of the hash, which allows attackers with access to the database to obtain the passwords.	NVD-CWE-Other	CVE-2005-3112	2008-09-6 05:53	2005-09-30	表示	GitHub Exploit DB Packet Storm

364977	2.1	LOW	mpeg-tools	mpeg-tools	mpeg-tools before 1.5b-r2 creates multiple temporary files insecurely, which allows local users to overwrite arbitrary files via (1) ts.stat, (2) ts.mpg, (3) foobar, (4) blockbar, or (5) foobar[NNN].	NVD-CWE-Other	CVE-2005-3115	2008-09-6 05:53	2005-10-1	表示	GitHub Exploit DB Packet Storm

364978	2.1	LOW	eduard_bloch	module-assistant	A rule file in module-assistant before 0.9.10 causes a temporary file to be created insecurely, which allows local users to conduct unauthorized operations.	NVD-CWE-Other	CVE-2005-3121	2008-09-6 05:53	2005-10-21	表示	GitHub Exploit DB Packet Storm

364979	5.0	MEDIUM	4d	webstar	Unspecified vulnerability in the Mailbox Server for 4D WebStar before 5.3.5 allows attackers to cause a denial of service (crash) via IMAP clients on Mac OS X 10.4 Mail 2.	NVD-CWE-Other	CVE-2005-3143	2008-09-6 05:53	2005-10-6	表示	GitHub Exploit DB Packet Storm

364980	5.0	MEDIUM	standards_based_linux_instrumentation	sblim-sfcb	httpAdapter.c in sblim-sfcb before 0.9.2 allows remote attackers to cause a denial of service via long HTTP headers.	NVD-CWE-Other	CVE-2005-3144	2008-09-6 05:53	2005-10-6	表示	GitHub Exploit DB Packet Storm

364981	5.0	MEDIUM	standards_based_linux_instrumentation	sblim-sfcb	httpAdapter.c in sblim-sfcb before 0.9.2 allows remote attackers to cause a denial of service (resource consumption) by connecting to sblim-sfcb but not sending any data.	NVD-CWE-Other	CVE-2005-3145	2008-09-6 05:53	2005-10-6	表示	GitHub Exploit DB Packet Storm

364982	2.1	LOW	storebackup suse	storebackup suse_linux	StoreBackup before 1.19 allows local users to perform unauthorized operations on arbitrary files via a symlink attack on temporary files.	NVD-CWE-Other	CVE-2005-3146	2008-09-6 05:53	2005-10-6	表示	GitHub Exploit DB Packet Storm

364983	2.1	LOW	storebackup suse	storebackup suse_linux	StoreBackup before 1.19 creates the backup root with world-readable permissions, which allows local users to obtain sensitive information.	NVD-CWE-Other	CVE-2005-3147	2008-09-6 05:53	2005-10-6	表示	GitHub Exploit DB Packet Storm

364984	4.6	MEDIUM	storebackup suse	storebackup suse_linux	StoreBackup before 1.19 does not properly set the uid and guid for symbolic links (1) that are backed up by storeBackup.pl, or (2) recovered by storeBackupRecover.pl, which could cause files to be re…	NVD-CWE-Other	CVE-2005-3148	2008-09-6 05:53	2005-10-6	表示	GitHub Exploit DB Packet Storm

364985	7.5	HIGH	weex	weex	Format string vulnerability in the Log_Flush function in Weex 2.6.1.5, 2.6.1, and possibly other versions allows remote FTP servers to execute arbitrary code via format strings in filenames.	NVD-CWE-Other	CVE-2005-3150	2008-09-6 05:53	2005-10-6	表示	GitHub Exploit DB Packet Storm

364986	7.5	HIGH	blender	blender	Buffer overflow in blenderplay in Blender Player 2.37a allows attackers to execute arbitrary code via a long command line argument.	NVD-CWE-Other	CVE-2005-3151	2008-09-6 05:53	2005-10-6	表示	GitHub Exploit DB Packet Storm

364987	7.5	HIGH	mailenable	mailenable_enterprise mailenable_professional	Buffer overflow in the W3C logging for MailEnable Enterprise 1.1 and Professional 1.6 allows remote attackers to execute arbitrary code.	NVD-CWE-Other	CVE-2005-3155	2008-09-6 05:53	2005-10-6	表示	GitHub Exploit DB Packet Storm

364988	7.5	HIGH	php_fusion	php_fusion	Multiple SQL injection vulnerabilities in photogallery.php in PHP-Fusion allow remote attackers to execute arbitrary SQL commands via the (1) album and (2) photo parameters.	NVD-CWE-Other	CVE-2005-3160	2008-09-6 05:53	2005-10-6	表示	GitHub Exploit DB Packet Storm

364989	5.0	MEDIUM	polipo	polipo	Unspecified vulnerability in Polipo 0.9.8 and earlier allows attackers to read files outside of the web root.	NVD-CWE-Other	CVE-2005-3163	2008-09-6 05:53	2005-10-6	表示	GitHub Exploit DB Packet Storm

364990	4.3	MEDIUM	mediawiki	mediawiki	Multiple cross-site scripting (XSS) vulnerabilities in MediaWiki before 1.4.9 allow remote attackers to inject arbitrary web script or HTML via (1) <math> tags or (2) Extension or <nowiki> sections t…	NVD-CWE-Other	CVE-2005-3165	2008-09-6 05:53	2005-10-6	表示	GitHub Exploit DB Packet Storm

364991	5.0	MEDIUM	mediawiki	mediawiki	Unspecified vulnerability in "edit submission handling" for MediaWiki 1.4.x before 1.4.10 and 1.3.x before 1.3.16 allows remote attackers to cause a denial of service (corruption of the previous subm…	NVD-CWE-Other	CVE-2005-3166	2008-09-6 05:53	2005-10-6	表示	GitHub Exploit DB Packet Storm

364992	4.3	MEDIUM	mediawiki	mediawiki	Incomplete blacklist vulnerability in MediaWiki before 1.4.11 does not properly remove certain CSS inputs (HTML inline style attributes) that are processed as active content by Internet Explorer, whi…	NVD-CWE-Other	CVE-2005-3167	2008-09-6 05:53	2005-10-6	表示	GitHub Exploit DB Packet Storm

364993	7.5	HIGH	microsoft	windows_2000	The SECEDIT command on Microsoft Windows 2000 before Update Rollup 1 for SP4, when using a security template to set Access Control Lists (ACLs) on folders, does not apply ACLs on folders that are lis…	NVD-CWE-Other	CVE-2005-3168	2008-09-6 05:53	2005-10-6	表示	GitHub Exploit DB Packet Storm

364994	5.0	MEDIUM	microsoft	windows_2000	Microsoft Windows 2000 before Update Rollup 1 for SP4, when the "audit directory service access" policy is enabled, does not record a 565 event message for File Delete Child operations on an Active D…	NVD-CWE-Other	CVE-2005-3169	2008-09-6 05:53	2005-10-6	表示	GitHub Exploit DB Packet Storm

364995	4.6	MEDIUM	microsoft	windows_2000	Microsoft Windows 2000 before Update Rollup 1 for SP4 records Event ID 1704 to indicate that Group Policy security settings were successfully updated, even when the processing fails such as when Ntus…	NVD-CWE-Other	CVE-2005-3171	2008-09-6 05:53	2005-10-6	表示	GitHub Exploit DB Packet Storm

364996	5.0	MEDIUM	microsoft	windows_2000	The WideCharToMultiByte function in Microsoft Windows 2000 before Update Rollup 1 for SP4 does not properly convert strings with Japanese composite characters in the last character, which could preve…	NVD-CWE-Other	CVE-2005-3172	2008-09-6 05:53	2005-10-6	表示	GitHub Exploit DB Packet Storm

364997	4.6	MEDIUM	microsoft	windows_2000	Microsoft Windows 2000 before Update Rollup 1 for SP4 does not apply group policies if the user logs on using UPN credentials with a trailing dot, which prevents Windows 2000 from finding the correct…	NVD-CWE-Other	CVE-2005-3173	2008-09-6 05:53	2005-10-6	表示	GitHub Exploit DB Packet Storm

364998	4.6	MEDIUM	microsoft	windows_2000	Microsoft Windows 2000 before Update Rollup 1 for SP4 allows users to log on to the domain, even when their password has expired, if the fully qualified domain name (FQDN) is 8 characters long.	NVD-CWE-Other	CVE-2005-3174	2008-09-6 05:53	2005-10-6	表示	GitHub Exploit DB Packet Storm

364999	7.2	HIGH	microsoft	windows_2000	Microsoft Windows 2000 before Update Rollup 1 for SP4 allows a local administrator to unlock a computer even if it has been locked by a domain administrator, which allows the local administrator to a…	NVD-CWE-Other	CVE-2005-3175	2008-09-6 05:53	2005-10-6	表示	GitHub Exploit DB Packet Storm

365000	7.5	HIGH	microsoft	windows_2000	Microsoft Windows 2000 before Update Rollup 1 for SP4 does not record the IP address of a Windows Terminal Services client in a security log event if the client connects successfully, which could mak…	NVD-CWE-Other	CVE-2005-3176	2008-09-6 05:53	2005-10-6	表示	GitHub Exploit DB Packet Storm