Latest CVE Feed
-
2.1
LOWCVE-2005-1059
Linksys WET11 1.5.4 allows remote attackers to change the password without providing the original password via the data parameter to changepw.html.... Read more
Affected Products : wet11- EPSS Score: %0.76
- Published: May. 02, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2011-1840
The MartiniCreations PassmanLite Password Manager application before 1.48 for Android stores the master password and unspecified other account information in cleartext, which allows local users to obtain sensitive information by leveraging shell access.... Read more
- EPSS Score: %0.06
- Published: May. 13, 2011
- Modified: Apr. 11, 2025
-
2.1
LOWCVE-2005-0822
Citrix Metaframe Password Manager 2.5 and earlier stores a password in cleartext although it is obfuscated when presented to a user, which allows users to view their secondary passwords even if it is not allowed by policy.... Read more
Affected Products : metaframe_password_manager- EPSS Score: %0.10
- Published: May. 02, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2007-6680
Trusted Execution in IBM AIX 6.1 uses an incorrect pathname argument in a call to the trustchk_block_write function, which might allow local users to modify trusted files, related to an error in the support for links in the TSD_FILES_LOCK policy.... Read more
Affected Products : aix- EPSS Score: %0.07
- Published: Jan. 10, 2008
- Modified: Apr. 09, 2025
-
2.1
LOWCVE-2006-0488
The VDM (Virtual DOS Machine) emulation environment for MS-DOS applications in Windows 2000, Windows XP SP2, and Windows Server 2003 allows local users to read the first megabyte of memory and possibly obtain sensitive information, as demonstrated by dump... Read more
- EPSS Score: %1.42
- Published: Feb. 01, 2006
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2006-1376
The installation of Debian GNU/Linux 3.1r1 from the network install CD creates /var/log/debian-installer/cdebconf with world writable permissions, which allows local users to cause a denial of service (disk consumption).... Read more
Affected Products : debian_linux- EPSS Score: %0.05
- Published: Mar. 24, 2006
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2006-0432
Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 9.0, when an Administrator uses the WebLogic Administration Console to add custom security policies, causes incorrect policies to be created, which prevents the server from properly pro... Read more
Affected Products : weblogic_server- EPSS Score: %0.10
- Published: Jan. 25, 2006
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2007-1589
TrueCrypt before 4.3, when set-euid mode is used on Linux, allows local users to cause a denial of service (filesystem unavailability) by dismounting a volume mounted by a different user.... Read more
- EPSS Score: %0.06
- Published: Mar. 21, 2007
- Modified: Apr. 09, 2025
-
2.1
LOWCVE-2006-0380
A logic error in FreeBSD kernel 5.4-STABLE and 6.0 causes the kernel to calculate an incorrect buffer length, which causes more data to be copied to userland than intended, which could allow local users to read portions of kernel memory.... Read more
Affected Products : freebsd- EPSS Score: %0.08
- Published: Jan. 25, 2006
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2005-1627
Unknown vulnerability in Viewglob before 2.0.1, related to "a potential security issue with the Viewglob display and ssh X forwarding," has unknown impact.... Read more
Affected Products : viewglob- EPSS Score: %0.09
- Published: May. 17, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2005-1098
GetDataBack for NTFS 2.31 stores the username and license key in plaintext in the Name value in the License registry key, which may allow local users to obtain sensitive information.... Read more
Affected Products : getdataback_for_ntfs- EPSS Score: %0.50
- Published: May. 02, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2005-2283
WebEOC before 6.0.2 does not properly restrict the size of an uploaded file, which allows remote authenticated users to cause a denial of service (system and database resource consumption) via a large file.... Read more
Affected Products : webeoc- EPSS Score: %0.47
- Published: Jul. 18, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2005-2444
Trillian Pro 3.1 build 121, when checking Yahoo e-mail, stores the password in plaintext in a world readable file and does not delete the file after login, which allows local users to obtain sensitive information.... Read more
Affected Products : trillian_pro- EPSS Score: %0.07
- Published: Aug. 03, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2006-0363
The "Remember my Password" feature in MSN Messenger 7.5 stores passwords in an encrypted format under the HKEY_CURRENT_USER\Software\Microsoft\IdentityCRL\Creds registry key, which might allow local users to obtain the original passwords via a program tha... Read more
Affected Products : msn_messenger- EPSS Score: %1.16
- Published: Jan. 22, 2006
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2007-4394
Unspecified vulnerability in a "core clean" cron job created by the findutils-locate package on SUSE Linux 10.0 and 10.1 and Enterprise Server 9 and 10 before 20070810 allows local users to delete of arbitrary files via unknown vectors.... Read more
- EPSS Score: %0.04
- Published: Aug. 17, 2007
- Modified: Apr. 09, 2025
-
2.1
LOWCVE-2007-1191
The Social Bookmarks (del.icio.us) plug-in 8F in Quicksilver writes usernames and passwords in plaintext to the /Library/Logs/Console/UID/Console.log file, which allows local users to obtain sensitive information by reading this file.... Read more
Affected Products : del.icio.us_module- EPSS Score: %0.07
- Published: Mar. 02, 2007
- Modified: Apr. 09, 2025
-
2.1
LOWCVE-2006-7129
ISS BlackICE PC Protection 3.6 cpj and cpu, and possibly earlier versions, allows local users to bypass the protection scheme by using the ZwDeleteFile API function to delete the critical filelock.txt file, which stores information about protected files.... Read more
Affected Products : blackice_pc_protection- EPSS Score: %0.21
- Published: Mar. 06, 2007
- Modified: Apr. 09, 2025
-
2.1
LOWCVE-2005-2230
Electronic Mail Operator (elmo) 1.3.2-r1 and earlier creates the elmostats temporary file insecurely, which allows local users to overwrite arbitrary files.... Read more
Affected Products : elmo- EPSS Score: %0.08
- Published: Jul. 12, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2006-5851
openexec in OpenBase SQL before 10.0.1 allows local users to create arbitrary files via a symlink attack on the /tmp/output file, a different vulnerability than CVE-2006-5328.... Read more
Affected Products : openbase- EPSS Score: %0.16
- Published: Nov. 10, 2006
- Modified: Apr. 09, 2025
-
2.1
LOWCVE-2006-6013
Integer signedness error in the fw_ioctl (FW_IOCTL) function in the FireWire (IEEE-1394) drivers (dev/firewire/fwdev.c) in various BSD kernels, including DragonFlyBSD, FreeBSD 5.5, MidnightBSD 0.1-CURRENT before 20061115, NetBSD-current before 20061116, N... Read more
- EPSS Score: %0.08
- Published: Nov. 21, 2006
- Modified: Apr. 09, 2025