Latest CVE Feed
-
3.2
LOWCVE-2020-2748
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.40, prior to 6.0.20 and prior to 6.1.6. Easily exploitable vulnerability allows high privileged attacker wi... Read more
- EPSS Score: %0.13
- Published: Apr. 15, 2020
- Modified: Nov. 21, 2024
-
3.2
LOWCVE-2015-0427
Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 4.3.20 allows local users to affect integrity and availability via vectors related to VMSVGA virtual graphics device, a different vulnerability th... Read more
- EPSS Score: %0.10
- Published: Jan. 21, 2015
- Modified: Apr. 12, 2025
-
3.2
LOWCVE-2021-25351
Improper Access Control in EmailValidationView in Samsung Account prior to version 10.7.0.7 and 12.1.1.3 allows physically proximate attackers to log out user account on device without user password.... Read more
- EPSS Score: %0.05
- Published: Mar. 25, 2021
- Modified: Nov. 21, 2024
-
3.2
LOWCVE-2021-27260
This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 16.0.1-48919. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to explo... Read more
Affected Products : parallels_desktop- EPSS Score: %0.10
- Published: Apr. 14, 2021
- Modified: Nov. 21, 2024
-
3.2
LOWCVE-2021-25331
Improper access control in Samsung Pay mini application prior to v4.0.14 allows unauthorized access to balance information over the lockscreen in specific condition.... Read more
Affected Products : pay_mini- EPSS Score: %0.07
- Published: Mar. 04, 2021
- Modified: Nov. 21, 2024
-
3.2
LOWCVE-2007-0282
Unspecified vulnerability in Oracle HTTP Server 9.0.1.5, Application Server 9.0.4.2 and 10.1.2.0.0, and Collaboration Suite 9.0.4.2 has unknown impact and attack vectors related to the Oracle Process Mgmt & Notification component, aka OPMN02.... Read more
- EPSS Score: %0.33
- Published: Jan. 17, 2007
- Modified: Apr. 09, 2025
-
3.2
LOWCVE-2012-5512
Array index error in the HVMOP_set_mem_access handler in Xen 4.1 allows local HVM guest OS administrators to cause a denial of service (crash) or obtain sensitive information via unspecified vectors.... Read more
Affected Products : xenserver- EPSS Score: %0.08
- Published: Dec. 13, 2012
- Modified: Apr. 11, 2025
-
3.2
LOWCVE-2008-4004
Unspecified vulnerability in the JDE EnterpriseOne Business Service Server component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.97.2.2 and 8.98.0.1 allows local users to affect confidentiality and integrity via unknown vectors.... Read more
- EPSS Score: %0.19
- Published: Oct. 14, 2008
- Modified: Apr. 09, 2025
-
3.2
LOWCVE-2020-13362
In QEMU 5.0.0 and earlier, megasas_lookup_frame in hw/scsi/megasas.c has an out-of-bounds read via a crafted reply_queue_head field from a guest OS user.... Read more
- EPSS Score: %0.10
- Published: May. 28, 2020
- Modified: Nov. 21, 2024
-
3.2
LOWCVE-2020-13353
When importing repos via URL, one time use git credentials were persisted beyond the expected time window in Gitaly 1.79.0 or above.... Read more
Affected Products : gitaly- EPSS Score: %0.08
- Published: Nov. 17, 2020
- Modified: Nov. 21, 2024
-
3.2
LOWCVE-2010-3508
Unspecified vulnerability in Oracle Solaris 10 allows local users to affect confidentiality and integrity via unknown vectors related to Solaris Zones.... Read more
Affected Products : solaris- EPSS Score: %0.16
- Published: Oct. 14, 2010
- Modified: Apr. 11, 2025
-
3.2
LOWCVE-2010-2376
Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows local users to affect confidentiality and integrity via unknown vectors related to Solaris Management Console.... Read more
Affected Products : solaris- EPSS Score: %0.06
- Published: Jul. 13, 2010
- Modified: Apr. 11, 2025
-
3.2
LOWCVE-2020-14394
An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transfer Request Block (TRB) Ring. This flaw allows a privileged guest user to hang the QEMU process on the host, resulting in a denial of servi... Read more
Affected Products : enterprise_linux fedora qemu openstack_platform extra_packages_for_enterprise_linux- EPSS Score: %0.01
- Published: Aug. 17, 2022
- Modified: Nov. 21, 2024
-
3.2
LOWCVE-2010-2383
Unspecified vulnerability in Oracle Solaris 8, 9, and 10, and OpenSolaris, allows local users to affect confidentiality and integrity, related to NFS.... Read more
- EPSS Score: %0.19
- Published: Jul. 13, 2010
- Modified: Apr. 11, 2025
-
3.2
LOWCVE-2025-48931
The TeleMessage service through 2025-05-05 relies on MD5 for password hashing, which opens up various attack possibilities (including rainbow tables) with low computational effort.... Read more
Affected Products : telemessage- Published: May. 28, 2025
- Modified: May. 29, 2025
- Vuln Type: Cryptography
-
3.2
LOWCVE-2025-52992
The Nix, Lix, and Guix package managers fail to properly set permissions when a derivation build fails. This may allow arbitrary processes to modify the content of a store outside of the build sandbox. This affects Nix before 2.24.15, 2.26.4, 2.28.4, and ... Read more
Affected Products : nix- Published: Jun. 27, 2025
- Modified: Jun. 30, 2025
- Vuln Type: Misconfiguration
-
3.2
LOWCVE-2021-2123
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure wher... Read more
Affected Products : vm_virtualbox- EPSS Score: %0.04
- Published: Jan. 20, 2021
- Modified: Nov. 21, 2024
-
3.2
LOWCVE-2014-6588
Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.3.20 allows local users to affect integrity and availability via vectors related to VMSVGA virtual graphics device, a different vulnerability than... Read more
- EPSS Score: %0.08
- Published: Jan. 21, 2015
- Modified: Apr. 12, 2025
-
3.2
LOWCVE-2013-4373
The storeFiles method in JPADriftServerBean in Red Hat JBoss Operations Network (JON) 3.1.2 allows local users to load arbitrary drift files into a server by writing the files to the temporary directory that is used to unpack zip files.... Read more
Affected Products : jboss_operations_network- EPSS Score: %0.05
- Published: Oct. 24, 2013
- Modified: Apr. 11, 2025
-
3.2
LOWCVE-2012-0524
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.50, 8.51, and 8.52 allows local users to affect confidentiality and integrity via unknown vectors related to File Processing.... Read more
Affected Products : peoplesoft_products- EPSS Score: %0.20
- Published: May. 03, 2012
- Modified: Apr. 11, 2025