Latest CVE Feed
-
2.3
LOWCVE-2020-23250
GigaVUE-OS (GVOS) 5.4 - 5.9 uses a weak algorithm for a hash stored in internal database.... Read more
Affected Products : gigavue-os- EPSS Score: %0.03
- Published: Jan. 05, 2021
- Modified: Nov. 21, 2024
-
2.3
LOWCVE-2017-10292
Vulnerability in the RDBMS Security component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2 and 12.2.0.1. Easily exploitable vulnerability allows high privileged attacker having Create User privilege with logon to ... Read more
Affected Products : database- EPSS Score: %0.07
- Published: Oct. 19, 2017
- Modified: Apr. 20, 2025
-
2.3
LOWCVE-2024-23591
ThinkSystem SR670V2 servers manufactured from approximately June 2021 to July 2023 were left in Manufacturing Mode which could allow an attacker with privileged logical access to the host or physical access to server internals to modify or disable Intel... Read more
- Published: Feb. 16, 2024
- Modified: Jul. 23, 2025
-
2.3
LOWCVE-2022-20240
In sOpAllowSystemRestrictionBypass of AppOpsManager.java, there is a possible leak of location information due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not... Read more
Affected Products : android- EPSS Score: %0.00
- Published: Dec. 13, 2022
- Modified: Apr. 22, 2025
-
2.3
LOWCVE-2025-2517
Reference to Expired Domain Vulnerability in OpenText™ ArcSight Enterprise Security Manager.... Read more
Affected Products :- Published: Apr. 21, 2025
- Modified: Apr. 23, 2025
- Vuln Type: Misconfiguration
-
2.3
LOWCVE-2024-51539
The Dell Secure Connect Gateway (SCG) Application and Appliance, versions prior to 5.28, contains a SQL injection vulnerability due to improper neutralization of special elements used in an SQL command. This vulnerability can only be exploited locally on ... Read more
Affected Products :- Published: Feb. 25, 2025
- Modified: Feb. 25, 2025
- Vuln Type: Injection
-
2.3
LOWCVE-2007-3442
Format string vulnerability on the Research in Motion BlackBerry 7270 before 4.0 SP1 Bundle 108 allows remote attackers to cause a denial of service (blocked call reception and calling) via format string specifiers in an SIP INVITE message that lacks a ho... Read more
Affected Products : blackberry_7270- EPSS Score: %0.26
- Published: Jun. 27, 2007
- Modified: Apr. 09, 2025
-
2.3
LOWCVE-2021-3923
A flaw was found in the Linux kernel's implementation of RDMA over infiniband. An attacker with a privileged local account can leak kernel stack information when issuing commands to the /dev/infiniband/rdma_cm device node. While this access is unlikely to... Read more
- EPSS Score: %0.01
- Published: Mar. 27, 2023
- Modified: Feb. 24, 2025
-
2.3
LOWCVE-2024-21123
Vulnerability in the Oracle Database Core component of Oracle Database Server. Supported versions that are affected are 19.3-19.23. Easily exploitable vulnerability allows high privileged attacker having SYSDBA privilege with logon to the infrastructure ... Read more
Affected Products : database_server- Published: Jul. 16, 2024
- Modified: Jun. 18, 2025
-
2.3
LOWCVE-2024-44123
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15, iOS 18 and iPadOS 18. A malicious app with root privileges may be able to access keyboard input and location information without user consent.... Read more
- Published: Oct. 28, 2024
- Modified: Dec. 06, 2024
-
2.3
LOWCVE-2025-3864
Hackney fails to properly release HTTP connections to the pool after handling 307 Temporary Redirect responses. Remote attackers can exploit this to exhaust connection pools, causing denial of service in applications using the library. Fix for this issue ... Read more
Affected Products :- Published: May. 28, 2025
- Modified: May. 28, 2025
- Vuln Type: Denial of Service
-
2.3
LOWCVE-2025-6703
Improper Input Validation vulnerability in Mozilla neqo leads to an unexploitable crash..This issue affects neqo: from 0.4.24 through 0.13.2.... Read more
Affected Products :- Published: Jun. 26, 2025
- Modified: Jun. 26, 2025
-
2.3
LOWCVE-2021-41527
An error related to the 2-factor authorization (2FA) on the RISC Platform prior to the saas-2021-12-29 release can potentially be exploited to bypass the 2FA. The vulnerability requires that the 2FA setup hasn’t been completed.... Read more
Affected Products :- Published: Feb. 07, 2025
- Modified: Mar. 13, 2025
- Vuln Type: Authentication
-
2.3
LOWCVE-2025-2545
Vulnerability in Best Practical Solutions, LLC's Request Tracker prior to v5.0.8, where the Triple DES (3DES) cryptographic algorithm is used to protect emails sent with S/MIME encryption. Triple DES is considered obsolete and insecure due to its suscepti... Read more
Affected Products :- Published: May. 05, 2025
- Modified: May. 29, 2025
- Vuln Type: Cryptography
-
2.3
LOWCVE-2015-8569
The (1) pptp_bind and (2) pptp_connect functions in drivers/net/ppp/pptp.c in the Linux kernel through 4.3.3 do not verify an address length, which allows local users to obtain sensitive information from kernel memory and bypass the KASLR protection mecha... Read more
Affected Products : linux_kernel- EPSS Score: %0.02
- Published: Dec. 28, 2015
- Modified: Apr. 12, 2025
-
2.3
LOWCVE-2020-8991
vg_lookup in daemons/lvmetad/lvmetad-core.c in LVM2 2.02 mismanages memory, leading to an lvmetad memory leak, as demonstrated by running pvs. NOTE: RedHat disputes CVE-2020-8991 as not being a vulnerability since there’s no apparent route to either privi... Read more
Affected Products : lvm2- EPSS Score: %0.16
- Published: Feb. 14, 2020
- Modified: Nov. 21, 2024
-
2.3
LOWCVE-2022-33686
Exposure of Sensitive Information in GsmAlarmManager prior to SMR Jul-2022 Release 1 allows local attacker to access iccid via log.... Read more
- EPSS Score: %0.02
- Published: Jul. 12, 2022
- Modified: Nov. 21, 2024
-
2.3
LOWCVE-2024-20914
Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Core). The supported version that is affected is 8.8. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Ora... Read more
Affected Products : zfs_storage_appliance_kit- EPSS Score: %0.10
- Published: Jan. 16, 2024
- Modified: Jun. 03, 2025
-
2.3
LOWCVE-2024-35274
An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiAnalyzer versions below 7.4.2, Fortinet FortiManager versions below 7.4.2 and Fortinet FortiAnalyzer-BigData version 7.4.0 and below ... Read more
- Published: Nov. 12, 2024
- Modified: Jan. 17, 2025
-
2.3
LOWCVE-2018-2923
Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: Core Services). The supported version that is affected is Prior to 8.7.20. Easily exploitable vulnerability allows high privileged attack... Read more
- EPSS Score: %0.09
- Published: Jul. 18, 2018
- Modified: Nov. 21, 2024