Latest CVE Feed
-
2.1
LOWCVE-2004-0755
The FileStore capability in CGI::Session for Ruby before 1.8.1, and possibly PStore, creates files with insecure permissions, which can allow local users to steal session information and hijack sessions.... Read more
Affected Products : ruby- EPSS Score: %0.06
- Published: Oct. 20, 2004
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2009-2489
Unspecified vulnerability in the utdmsession program in Sun Ray Server Software (SRSS) 4.0 allows local users to access the sessions of arbitrary users via unknown vectors.... Read more
Affected Products : ray_server_software- EPSS Score: %0.06
- Published: Jul. 16, 2009
- Modified: Apr. 09, 2025
-
2.1
LOWCVE-2009-1276
XScreenSaver in Sun Solaris 10 and OpenSolaris before snv_109, and Solaris 8 and 9 with GNOME 2.0 or 2.0.2, allows physically proximate attackers to obtain sensitive information by reading popup windows, which are displayed even when the screen is locked,... Read more
- EPSS Score: %0.07
- Published: Apr. 09, 2009
- Modified: Apr. 09, 2025
-
2.1
LOWCVE-2013-0980
The Passcode Lock implementation in Apple iOS before 6.1.3 does not properly manage the lock state, which allows physically proximate attackers to bypass an intended passcode requirement by leveraging an error in the emergency-call feature.... Read more
Affected Products : iphone_os- EPSS Score: %0.05
- Published: Mar. 20, 2013
- Modified: Apr. 11, 2025
-
2.1
LOWCVE-2010-0884
Unspecified vulnerability in the Sun Cluster component in Oracle Sun Product Suite 3.1 and 3.2 allows local users to affect confidentiality via unknown vectors related to Data Service for Oracle E-Business Suite, a different vulnerability than CVE-2010-08... Read more
Affected Products : sun_products_suite- EPSS Score: %0.25
- Published: Apr. 13, 2010
- Modified: Apr. 11, 2025
-
2.1
LOWCVE-2015-2382
win32k.sys in the kernel-mode drivers in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to obtain sensitive information from kernel memory via a crafted application, aka "Win32k Informatio... Read more
- EPSS Score: %1.93
- Published: Jul. 14, 2015
- Modified: Apr. 12, 2025
-
2.1
LOWCVE-2012-2658
Buffer overflow in the SQLDriverConnect function in unixODBC 2.3.1 allows local users to cause a denial of service (crash) via a long string in the DRIVER option. NOTE: this issue might not be a vulnerability, since the ability to set this option typicall... Read more
Affected Products : unixodbc- EPSS Score: %0.08
- Published: Aug. 31, 2012
- Modified: Apr. 11, 2025
-
2.1
LOWCVE-2011-3257
The Data Access component in Apple iOS before 5 does not properly handle the existence of multiple user accounts on the same mail server, which allows local users to bypass intended access restrictions in opportunistic circumstances by leveraging a differ... Read more
Affected Products : iphone_os- EPSS Score: %0.05
- Published: Oct. 14, 2011
- Modified: Apr. 11, 2025
-
2.1
LOWCVE-2005-2800
Memory leak in the seq_file implementation in the SCSI procfs interface (sg.c) in Linux kernel 2.6.13 and earlier allows local users to cause a denial of service (memory consumption) via certain repeated reads from the /proc/scsi/sg/devices file, which is... Read more
- EPSS Score: %0.16
- Published: Sep. 06, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2005-2032
Unknown vulnerability in lpadmin on Sun Solaris 7, 8, and 9 allows local users to overwrite arbitrary files.... Read more
- EPSS Score: %0.06
- Published: Jun. 16, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2005-2962
The post-installation script for ntlmaps before 0.9.9 sets world-readable permissions for the configuration file, which allows local users to obtain the username and password.... Read more
Affected Products : ntlmaps- EPSS Score: %0.05
- Published: Sep. 30, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2005-2973
The udp_v6_get_port function in udp.c in Linux 2.6 before 2.6.14-rc5, when running IPv6, allows local users to cause a denial of service (infinite loop and crash).... Read more
Affected Products : linux_kernel- EPSS Score: %0.29
- Published: Oct. 27, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2005-2992
arc 5.21j and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files, a different type of vulnerability than CVE-2005-2945.... Read more
Affected Products : arc- EPSS Score: %0.07
- Published: Oct. 13, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2005-3053
The sys_set_mempolicy function in mempolicy.c in Linux kernel 2.6.x allows local users to cause a denial of service (kernel BUG()) via a negative first argument.... Read more
- EPSS Score: %0.10
- Published: Sep. 26, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2001-1412
nidump on MacOS X before 10.3 allows local users to read the encrypted passwords from the password file by specifying passwd as a command line argument.... Read more
Affected Products : mac_os_x- EPSS Score: %0.23
- Published: Nov. 17, 2003
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2014-4499
The App Store process in CommerceKit Framework in Apple OS X before 10.10.2 places Apple ID credentials in App Store logs, which allows local users to obtain sensitive information by reading a file.... Read more
- EPSS Score: %0.06
- Published: Jan. 30, 2015
- Modified: Apr. 12, 2025
-
2.1
LOWCVE-2005-1765
syscall in the Linux kernel 2.6.8.1 and 2.6.10 for the AMD64 platform, when running in 32-bit compatibility mode, allows local users to cause a denial of service (kernel hang) via crafted arguments.... Read more
Affected Products : linux_kernel- EPSS Score: %0.06
- Published: May. 31, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2011-3262
tools/libxc/xc_dom_bzimageloader.c in Xen 3.2, 3.3, 4.0, and 4.1 allows local users to cause a denial of service (management software infinite loop and management domain resource consumption) via unspecified vectors related to "Lack of error checking in t... Read more
Affected Products : xen- EPSS Score: %0.10
- Published: Aug. 19, 2011
- Modified: Apr. 11, 2025
-
2.1
LOWCVE-2005-1410
The tsearch2 module in PostgreSQL 7.4 through 8.0.x declares the (1) dex_init, (2) snb_en_init, (3) snb_ru_init, (4) spell_init, and (5) syn_init functions as "internal" even when they do not take an internal argument, which allows attackers to cause a de... Read more
- EPSS Score: %0.10
- Published: May. 03, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2005-1265
The mmap function in the Linux Kernel 2.6.10 can be used to create memory maps with a start address beyond the end address, which allows local users to cause a denial of service (kernel crash).... Read more
- EPSS Score: %0.06
- Published: Jun. 16, 2005
- Modified: Apr. 03, 2025