Latest CVE Feed
-
2.1
LOWCVE-2011-1170
net/ipv4/netfilter/arp_tables.c in the IPv4 implementation in the Linux kernel before 2.6.39 does not place the expected '\0' character at the end of string data in the values of certain structure members, which allows local users to obtain potentially se... Read more
Affected Products : linux_kernel- EPSS Score: %0.04
- Published: Jun. 22, 2011
- Modified: Apr. 11, 2025
-
2.1
LOWCVE-2005-0578
Firefox before 1.0.1 and Mozilla Suite before 1.7.6 use a predictable filename for the plugin temporary directory, which allows local users to delete arbitrary files of other users via a symlink attack on the plugtmp directory.... Read more
- EPSS Score: %0.07
- Published: May. 02, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2005-2499
slocate before 2.7 does not properly process very long paths, which allows local users to cause a denial of service (updatedb exit and incomplete slocate database) via a certain crafted directory structure.... Read more
Affected Products : slocate- EPSS Score: %0.06
- Published: Aug. 23, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2015-6113
The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 allows local users to bypass intended filesystem p... Read more
- EPSS Score: %0.34
- Published: Nov. 11, 2015
- Modified: Apr. 12, 2025
-
2.1
LOWCVE-2012-3108
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than... Read more
Affected Products : fusion_middleware- EPSS Score: %0.62
- Published: Jul. 17, 2012
- Modified: Apr. 11, 2025
-
2.1
LOWCVE-2005-2292
Oracle JDeveloper 9.0.4, 9.0.5, and 10.1.2 stores cleartext passwords in (1) IDEConnections.xml, (2) XSQLConfig.xml and (3) settings.xml, which allows local users to obtain sensitive information.... Read more
Affected Products : jdeveloper- EPSS Score: %0.33
- Published: Jul. 18, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2025-3840
An improper neutralization of input vulnerability was identified in the End of Life (EOL) OVA based connect installer component which is deployed for installation purposes in a customer network. This EOL component was deprecated in September 2023 with end... Read more
Affected Products :- Published: Apr. 21, 2025
- Modified: Apr. 21, 2025
- Vuln Type: Cross-Site Scripting
-
2.1
LOWCVE-2025-32698
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/logging/LogPager.Php. This issue affects MediaWiki: before 1.39.12, 1.42.6, 1.43.1.... Read more
Affected Products : mediawiki- Published: Apr. 10, 2025
- Modified: Apr. 11, 2025
- Vuln Type: Information Disclosure
-
2.1
LOWCVE-1999-1572
cpio on FreeBSD 2.1.0, Debian GNU/Linux 3.0, and possibly other operating systems, uses a 0 umask when creating files using the -O (archive) or -F options, which creates the files with mode 0666 and allows local users to read or overwrite those files.... Read more
Affected Products : enterprise_linux debian_linux enterprise_linux_desktop freebsd ubuntu_linux mandrake_linux- EPSS Score: %0.11
- Published: Jul. 16, 1996
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2005-1764
Linux 2.6.11 on 64-bit x86 (x86_64) platforms does not use a guard page for the 47-bit address page to protect against an AMD K8 bug, which allows local users to cause a denial of service.... Read more
Affected Products : linux_kernel- EPSS Score: %0.06
- Published: Oct. 07, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-1999-0105
finger allows recursive searches by using a long string of @ symbols.... Read more
Affected Products :- EPSS Score: %0.08
- Published: Mar. 01, 1997
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2010-3477
The tcf_act_police_dump function in net/sched/act_police.c in the actions implementation in the network queueing functionality in the Linux kernel before 2.6.36-rc4 does not properly initialize certain structure members, which allows local users to obtain... Read more
- EPSS Score: %0.08
- Published: Sep. 21, 2010
- Modified: Apr. 11, 2025
-
2.1
LOWCVE-2010-4171
The staprun runtime tool in SystemTap 1.3 does not verify that a module to unload was previously loaded by SystemTap, which allows local users to cause a denial of service (unloading of arbitrary kernel modules).... Read more
Affected Products : systemtap- EPSS Score: %0.06
- Published: Dec. 07, 2010
- Modified: Apr. 11, 2025
-
2.1
LOWCVE-2005-1856
The CD-burning feature in backup-manager 0.5.8 and earlier uses a fixed filename in a world-writable directory for logging, which allows local users to overwrite files via a symlink attack.... Read more
Affected Products : backup_manager- EPSS Score: %0.08
- Published: Aug. 30, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2005-1841
The control for Adobe Reader 5.0.9 and 5.0.10 on Linux, Solaris, HP-UX, and AIX creates temporary files with the permissions as specified in a user's umask, which could allow local users to read PDF documents of that user if the umask allows it.... Read more
Affected Products : acrobat_reader- EPSS Score: %0.10
- Published: Jul. 07, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2010-4352
Stack consumption vulnerability in D-Bus (aka DBus) before 1.4.1 allows local users to cause a denial of service (daemon crash) via a message containing many nested variants.... Read more
Affected Products : d-bus- EPSS Score: %0.09
- Published: Dec. 30, 2010
- Modified: Apr. 11, 2025
-
2.1
LOWCVE-2009-1969
Unspecified vulnerability in the Auditing component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect confidentiality via unknown vectors.... Read more
Affected Products : database_server- EPSS Score: %0.38
- Published: Jul. 14, 2009
- Modified: Apr. 09, 2025
-
2.1
LOWCVE-2014-4446
Mail Service in Apple OS X Server before 4.0 does not enforce SACL changes until after a service restart, which allows remote authenticated users to bypass intended access restrictions in opportunistic circumstances by leveraging a change made by an admin... Read more
Affected Products : os_x_server- EPSS Score: %0.12
- Published: Oct. 18, 2014
- Modified: Apr. 12, 2025
-
2.1
LOWCVE-2005-3109
The HFS and HFS+ (hfsplus) modules in Linux 2.6 allow attackers to cause a denial of service (oops) by using hfsplus to mount a filesystem that is not hfsplus.... Read more
- EPSS Score: %0.07
- Published: Sep. 30, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2012-3217
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.7.0 allows context-dependent attackers to affect availability, related to Outside In HTML Export SDK.... Read more
Affected Products : fusion_middleware- EPSS Score: %0.83
- Published: Oct. 17, 2012
- Modified: Apr. 11, 2025