NVD脆弱性情報トップ

検索メニュー表示

ベンダー名
プロダクト・サービス名
タイトル
CVE
CRITICAL
HIGH
MEDIUM
LOW
CWE
公表日降順
更新日降順
表示数

NVD（National Vulnerability Database）で管理されている脆弱性の一覧を検索することが出来ます。
JVN（Japan Vulnerability Note）より先に脆弱性情報が更新される事が多いため、JVNに未記載の脆弱性が更新されている場合があります。

JVN（Japan Vulnerability Note）に関連した脆弱性がある場合は詳細画面で情報を表示します。

CWEで検索する場合は、CWE概要を参照して、CWE番号を確認してください。

CRITICAL
HIGH
MEDIUM
LOW

更新日:2026年7月16日4:30

No	CVSS	レベル攻撃区分	ベンダー名	プロダクト名	タイトル	CWE	CVE	更新日	公表日	影響表示	Exploit PoC 検索
365901	6.8	MEDIUM	sap	internet_transaction_server	Cross-site scripting (XSS) vulnerability in wgate.dll for SAP Internet Transaction Server (ITS) 4620.2.0.323011 allows remote attackers to insert arbitrary web script and steal cookies via the ~servi…	NVD-CWE-Other	CVE-2003-0749	2008-09-6 05:35	2003-10-20	表示	GitHub Exploit DB Packet Storm

365902	7.5	HIGH	attila-php.net	attilaphp	SQL injection vulnerability in global.php3 of AttilaPHP 3.0, and possibly earlier versions, allows remote attackers to bypass authentication via a modified cook_id parameter.	NVD-CWE-Other	CVE-2003-0752	2008-09-6 05:35	2003-10-20	表示	GitHub Exploit DB Packet Storm

365903	5.0	MEDIUM	checkpoint	firewall-1	Check Point FireWall-1 4.0 and 4.1 before SP5 allows remote attackers to obtain the IP addresses of internal interfaces via certain SecuRemote requests to TCP ports 256 or 264, which leaks the IP add…	NVD-CWE-Other	CVE-2003-0757	2008-09-6 05:35	2003-10-20	表示	GitHub Exploit DB Packet Storm

365904	7.5	HIGH	digium	asterisk	Buffer overflow in the get_msg_text of chan_sip.c in the Session Initiation Protocol (SIP) protocol implementation for Asterisk releases before August 15, 2003, allows remote attackers to execute arb…	NVD-CWE-Other	CVE-2003-0761	2008-09-6 05:35	2003-09-17	表示	GitHub Exploit DB Packet Storm

365905	7.8	HIGH	charles_kerr	pan	Pan 0.13.3 and earlier allows remote attackers to cause a denial of service (crash) via a news post with a long author email address.	NVD-CWE-Other	CVE-2003-0855	2008-09-6 05:35	2003-11-3	表示	GitHub Exploit DB Packet Storm

365906	4.6	MEDIUM	redhat	enterprise_linux	The (1) ipq_read and (2) ipulog_read functions in iptables allow local users to cause a denial of service by sending spoofed messages as other users to the kernel netlink interface.	CWE-264 認可・権限・アクセス制御	CVE-2003-0857	2008-09-6 05:35	2003-12-31	表示	GitHub Exploit DB Packet Storm

365907	2.1	LOW	sco	openserver	Certain scripts in OpenServer before 5.0.6 allow local users to overwrite files and conduct other unauthorized activities via a symlink attack on temporary files.	NVD-CWE-Other	CVE-2003-0872	2008-09-6 05:35	2003-11-17	表示	GitHub Exploit DB Packet Storm

365908	2.1	LOW	apple	mac_os_x	slpd daemon in Mac OS X before 10.3 allows local users to overwrite arbitrary files via a symlink attack on a temporary file, a different vulnerability than CVE-2003-0875.	NVD-CWE-Other	CVE-2003-0878	2008-09-6 05:35	2003-11-3	表示	GitHub Exploit DB Packet Storm

365909	4.6	MEDIUM	apple	mac_os_x	Unknown vulnerability in Mac OS X before 10.3 allows local users to access Dock functions from behind Screen Effects when Full Keyboard Access is enabled using the Keyboard pane in System Preferences.	NVD-CWE-Other	CVE-2003-0880	2008-09-6 05:35	2003-11-3	表示	GitHub Exploit DB Packet Storm

365910	7.5	HIGH	apple	mac_os_x	Mail in Mac OS X before 10.3, when configured to use MD5 Challenge Response, uses plaintext authentication if the CRAM-MD5 hashed login fails, which could allow remote attackers to gain privileges by…	NVD-CWE-Other	CVE-2003-0881	2008-09-6 05:35	2003-11-3	表示	GitHub Exploit DB Packet Storm

365911	5.0	MEDIUM	apple	mac_os_x	Mac OS X before 10.3 initializes the TCP timestamp with a constant number, which allows remote attackers to determine the system's uptime via the ID field in a TCP packet.	NVD-CWE-Other	CVE-2003-0882	2008-09-6 05:35	2003-11-3	表示	GitHub Exploit DB Packet Storm

365912	4.6	MEDIUM	apple	mac_os_x	The System Preferences capability in Mac OS X before 10.3 allows local users to access secure Preference Panes for a short period after an administrator has authenticated to the system.	NVD-CWE-Other	CVE-2003-0883	2008-09-6 05:35	2003-11-3	表示	GitHub Exploit DB Packet Storm

365913	6.4	MEDIUM	xscreensaver	xscreensaver	Xscreensaver 4.14 contains certain debugging code that should have been omitted, which causes Xscreensaver to create temporary files insecurely in the (1) apple2, (2) xanalogtv, and (3) pong screensa…	NVD-CWE-Other	CVE-2003-0885	2008-09-6 05:35	2003-12-31	表示	GitHub Exploit DB Packet Storm

365914	2.1	LOW	angus_mackay	ez-ipupdate	ez-ipupdate 3.0.11b7 and earlier creates insecure temporary cache files, which allows local users to conduct unauthorized operations via a symlink attack on the ez-ipupdate.cache file.	NVD-CWE-Other	CVE-2003-0887	2008-09-6 05:35	2003-12-31	表示	GitHub Exploit DB Packet Storm

365915	5.0	MEDIUM	larry_wall	perl	Perl 5.8.1 on Fedora Core does not properly initialize the random number generator when forking, which makes it easier for attackers to predict random numbers.	NVD-CWE-Other	CVE-2003-0900	2008-09-6 05:35	2003-12-31	表示	GitHub Exploit DB Packet Storm

365916	7.5	HIGH	postgresql	postgresql	Buffer overflow in to_ascii for PostgreSQL 7.2.x, and 7.3.x before 7.3.4, allows remote attackers to execute arbitrary code.	NVD-CWE-Other	CVE-2003-0901	2008-09-6 05:35	2003-11-3	表示	GitHub Exploit DB Packet Storm

365917	7.5	HIGH	sap	sap_db	eo420_GetStringFromVarPart in veo420.c for SAP database server (SAP DB) 7.4.03.27 and earlier may allow remote attackers to execute arbitrary code via a connect packet with a 256 byte segment to the …	NVD-CWE-Other	CVE-2003-0939	2008-09-6 05:35	2003-12-15	表示	GitHub Exploit DB Packet Storm

365918	5.0	MEDIUM	sap	sap_db	Directory traversal vulnerability in sqlfopenc for web-tools in SAP DB before 7.4.03.30 allows remote attackers to read arbitrary files via .. (dot dot) sequences in a URL.	NVD-CWE-Other	CVE-2003-0940	2008-09-6 05:35	2003-12-15	表示	GitHub Exploit DB Packet Storm

365919	7.5	HIGH	sap	sap_db	web-tools in SAP DB before 7.4.03.30 allows remote attackers to access the Web Agent Administration pages and modify configuration via a direct request to waadmin.wa.	NVD-CWE-Other	CVE-2003-0941	2008-09-6 05:35	2003-12-15	表示	GitHub Exploit DB Packet Storm

365920	7.5	HIGH	sap	sap_db	Buffer overflow in Web Agent Administration service in web-tools for SAP DB before 7.4.03.30 allows remote attackers to execute arbitrary code via a long Name parameter to waadmin.wa.	NVD-CWE-Other	CVE-2003-0942	2008-09-6 05:35	2003-12-15	表示	GitHub Exploit DB Packet Storm

365921	7.5	HIGH	sap	sap_db	web-tools in SAP DB before 7.4.03.30 installs several services that are enabled by default, which could allow remote attackers to obtain potentially sensitive information or redirect attacks against …	NVD-CWE-Other	CVE-2003-0943	2008-09-6 05:35	2003-12-15	表示	GitHub Exploit DB Packet Storm

365922	7.5	HIGH	sap	sap_db	Buffer overflow in the WAECHO default service in web-tools in SAP DB before 7.4.03.30 allows remote attackers to execute arbitrary code via a URL with a long requestURI.	NVD-CWE-Other	CVE-2003-0944	2008-09-6 05:35	2003-12-15	表示	GitHub Exploit DB Packet Storm

365923	7.2	HIGH	wireless_tools	wireless_tools	Buffer overflow in iwconfig allows local users to execute arbitrary code via a long HOME environment variable.	NVD-CWE-Other	CVE-2003-0948	2008-09-6 05:35	2003-12-15	表示	GitHub Exploit DB Packet Storm

365924	7.2	HIGH	ibm	aix	Buffer overflow in rcp for AIX 4.3.3, 5.1 and 5.2 allows local users to gain privileges.	NVD-CWE-Other	CVE-2003-0954	2008-09-6 05:35	2003-12-31	表示	GitHub Exploit DB Packet Storm

365925	5.0	MEDIUM	sun	sun_fire	The Network Management Port on Sun Fire B1600 systems allows remote attackers to cause a denial of service (packet loss) via ARP packets, which cause all ports to become temporarily disabled.	NVD-CWE-Other	CVE-2003-0970	2008-09-6 05:35	2003-12-15	表示	GitHub Exploit DB Packet Storm

365926	4.3	MEDIUM	-	-	Cross-site scripting (XSS) vulnerability in register.php for vBulletin 3.0 Beta 2 allows remote attackers to inject arbitrary HTML or web script via optional fields such as (1) "Interests-Hobbies", (…	NVD-CWE-Other	CVE-2003-1031	2008-09-6 05:35	2004-02-17	表示	GitHub Exploit DB Packet Storm

365927	5.0	MEDIUM	mod_access_referer	mod_access_referer	mod_access_referer 1.0.2 allows remote attackers to cause a denial of service (crash) via a malformed Referer header that is missing a hostname, as parsed by the ap_parse_uri_components function in A…	NVD-CWE-Other	CVE-2003-1054	2008-09-6 05:35	2003-04-16	表示	GitHub Exploit DB Packet Storm

365928	5.0	MEDIUM	fourelle_venturi_wireless	venturi_client	Venturi Client before 2.2, as used in certain Fourelle and Venturi Wireless products, can be used as an open proxy for various protocols, including an open relay for SMTP, which allows it to be abuse…	NVD-CWE-Other	CVE-2003-0316	2008-09-6 05:34	2003-06-16	表示	GitHub Exploit DB Packet Storm

365929	5.0	MEDIUM	colten_edwards	bitchx	Integer overflow in BitchX IRC client 1.0-0c19 and earlier allows remote malicious IRC servers to cause a denial of service (crash).	NVD-CWE-Other	CVE-2003-0322	2008-09-6 05:34	2003-06-9	表示	GitHub Exploit DB Packet Storm

365930	7.5	HIGH	epic	epic4	EPIC IRC Client (EPIC4) pre2.002, pre2.003, and possibly later versions, allows remote malicious IRC servers to cause a denial of service (crash) and possibly execute arbitrary code via a CTCP reques…	NVD-CWE-Other	CVE-2003-0328	2008-09-6 05:34	2003-06-9	表示	GitHub Exploit DB Packet Storm

365931	7.5	HIGH	demarc_security	puresecure	Demarc Puresecure 1.6 stores authentication information for the logging server in plaintext, which allows attackers to steal login names and passwords to gain privileges.	NVD-CWE-Other	CVE-2003-0340	2008-09-6 05:34	2003-05-21	表示	GitHub Exploit DB Packet Storm

365932	5.0	MEDIUM	apple kde	safari konqueror_embedded	Safari 1.0 Beta 2 (v73) and earlier does not validate the Common Name (CN) field for X.509 Certificates, which could allow remote attackers to spoof certificates.	NVD-CWE-Other	CVE-2003-0355	2008-09-6 05:34	2003-06-9	表示	GitHub Exploit DB Packet Storm

365933	4.6	MEDIUM	stichting_mathematisch_centrum	nethack	nethack 3.4.0 and earlier installs certain setgid binaries with insecure permissions, which allows local users to gain privileges by replacing the original binaries with malicious code.	NVD-CWE-Other	CVE-2003-0359	2008-09-6 05:34	2003-07-24	表示	GitHub Exploit DB Packet Storm

365934	7.5	HIGH	debian	debian_linux	Multiple buffer overflows in gPS before 1.0.0 allow attackers to cause a denial of service and possibly execute arbitrary code.	NVD-CWE-Other	CVE-2003-0360	2008-09-6 05:34	2003-06-9	表示	GitHub Exploit DB Packet Storm

365935	7.5	HIGH	debian	debian_linux	gPS before 1.1.0 does not properly follow the rgpsp connection source acceptation policy as specified in the rgpsp.conf file, which could allow unauthorized remote attackers to connect to rgpsp.	NVD-CWE-Other	CVE-2003-0361	2008-09-6 05:34	2003-06-9	表示	GitHub Exploit DB Packet Storm

365936	5.0	MEDIUM	debian	debian_linux	Buffer overflow in gPS before 0.10.2 may allow local users to cause a denial of service (SIGSEGV) in rgpsp via long command lines.	NVD-CWE-Other	CVE-2003-0362	2008-09-6 05:34	2003-06-9	表示	GitHub Exploit DB Packet Storm

365937	7.5	HIGH	licq	licq	Format string vulnerability in LICQ 1.2.6, 1.0.3 and possibly other versions allows remote attackers to perform unknown actions via format string specifiers.	NVD-CWE-Other	CVE-2003-0363	2008-09-6 05:34	2003-12-31	表示	GitHub Exploit DB Packet Storm

365938	5.0	MEDIUM	lysator	lyskom-server	lyskom-server 2.0.7 and earlier allows unauthenticated users to cause a denial of service (CPU consumption) via a large query.	NVD-CWE-Other	CVE-2003-0366	2008-09-6 05:34	2003-07-24	表示	GitHub Exploit DB Packet Storm

365939	7.5	HIGH	apple	mac_os_x	The Kerberos login authentication feature in Mac OS X, when used with an LDAPv3 server and LDAP bind authentication, may send cleartext passwords to the LDAP server when the AuthenticationAuthority a…	NVD-CWE-Other	CVE-2003-0378	2008-09-6 05:34	2003-06-16	表示	GitHub Exploit DB Packet Storm

365940	7.5	HIGH	atftpd	atftpd	Buffer overflow in atftp daemon (atftpd) 0.6.1 and earlier, and possibly later versions, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long fi…	NVD-CWE-Other	CVE-2003-0380	2008-09-6 05:34	2003-07-2	表示	GitHub Exploit DB Packet Storm

365941	2.1	LOW	norman_ramsey	noweb	Multiple vulnerabilities in noweb 2.9 and earlier creates temporary files insecurely, which allows local users to overwrite arbitrary files via multiple vectors including the noroff script.	NVD-CWE-Other	CVE-2003-0381	2008-09-6 05:34	2003-07-24	表示	GitHub Exploit DB Packet Storm

365942	4.3	MEDIUM	rsa	ace_agent	Cross-site scripting (XSS) vulnerability in the secure redirect function of RSA ACE/Agent 5.0 for Windows, and 5.x for Web, allows remote attackers to insert arbitrary web script and possibly cause u…	NVD-CWE-Other	CVE-2003-0389	2008-09-6 05:34	2003-07-24	表示	GitHub Exploit DB Packet Storm

365943	5.0	MEDIUM	smc_networks	barricade_wireless_cable_dsl_broadband_router	SMC Networks Barricade Wireless Cable/DSL Broadband Router SMC7004VWBR allows remote attackers to cause a denial of service via certain packets to PPTP port 1723 on the internal interface.	NVD-CWE-Other	CVE-2003-0419	2008-09-6 05:34	2003-07-24	表示	GitHub Exploit DB Packet Storm

365944	10.0	HIGH	apple	darwin_streaming_server	Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to cause a denial of service (crash) via an MS-DOS device name (e.g. AUX) in a request to HTTP port 1220, a different v…	NVD-CWE-Other	CVE-2003-0421	2008-09-6 05:34	2003-08-27	表示	GitHub Exploit DB Packet Storm

365945	10.0	HIGH	apple	darwin_streaming_server	The installation of Apple QuickTime / Darwin Streaming Server before 4.1.3f starts the administration server with a "Setup Assistant" page that allows remote attackers to set the administrator passwo…	NVD-CWE-Other	CVE-2003-0426	2008-09-6 05:34	2003-08-27	表示	GitHub Exploit DB Packet Storm

365946	7.5	HIGH	gnocatan-develop	gnocatan	Multiple buffer overflows in gnocatan 0.6.1 and earlier allow attackers to execute arbitrary code.	NVD-CWE-Other	CVE-2003-0433	2008-09-6 05:34	2003-07-24	表示	GitHub Exploit DB Packet Storm

365947	1.2	LOW	yuuichi_teranishi	eldav	eldav WebDAV client for Emacs, version 0.7.2 and earlier, allows local users to create or overwrite arbitrary files via a symlink attack on temporary files.	NVD-CWE-Other	CVE-2003-0438	2008-09-6 05:34	2003-07-24	表示	GitHub Exploit DB Packet Storm

365948	7.5	HIGH	webfs	webfs	Buffer overflow in webfs before 1.17.1 allows remote attackers to execute arbitrary code via an HTTP request with a long Request-URI.	NVD-CWE-Other	CVE-2003-0445	2008-09-6 05:34	2003-07-24	表示	GitHub Exploit DB Packet Storm

365949	4.6	MEDIUM	xblockout	xbl	Multiple buffer overflows in xbl before 1.0k allow local users to gain privileges via certain long command line arguments.	NVD-CWE-Other	CVE-2003-0451	2008-09-6 05:34	2003-08-7	表示	GitHub Exploit DB Packet Storm

365950	4.6	MEDIUM	gunnar_ritter	osh	Buffer overflows in osh before 1.7-11 allow local users to execute arbitrary code and bypass shell restrictions via (1) long environment variables or (2) long "file redirections."	NVD-CWE-Other	CVE-2003-0452	2008-09-6 05:34	2003-08-7	表示	GitHub Exploit DB Packet Storm