Latest CVE Feed
-
2.1
LOWCVE-2000-0076
nviboot boot script in the Debian nvi package allows local users to delete files via malformed entries in vi.recover.... Read more
- EPSS Score: %0.10
- Published: Dec. 30, 1999
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2008-1738
Rising Antivirus 2008 before 20.38.20 allows local users to cause a denial of service (system crash) via an invalid pointer to the _CLIENT_ID structure in a call to the NtOpenProcess hooked System Service Descriptor Table (SSDT) function.... Read more
Affected Products : rising_antivirus- EPSS Score: %0.03
- Published: Apr. 30, 2008
- Modified: Apr. 09, 2025
-
2.1
LOWCVE-2001-0079
Support Tools Manager (STM) A.22.00 for HP-UX allows local users to overwrite arbitrary files via a symlink attack on the tool_stat.txt log file.... Read more
Affected Products : support_tools_manager- EPSS Score: %0.27
- Published: Feb. 12, 2001
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2012-2690
virt-edit in libguestfs before 1.18.0 does not preserve the permissions from the original file and saves the new file with world-readable permissions when editing, which might allow local guest users to obtain sensitive information.... Read more
Affected Products : libguestfs- EPSS Score: %0.05
- Published: Jun. 29, 2012
- Modified: Apr. 11, 2025
-
2.1
LOWCVE-2012-3203
Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability, related to Gnome Display Manager GDM.... Read more
- EPSS Score: %0.06
- Published: Oct. 17, 2012
- Modified: Apr. 11, 2025
-
2.1
LOWCVE-2010-4352
Stack consumption vulnerability in D-Bus (aka DBus) before 1.4.1 allows local users to cause a denial of service (daemon crash) via a message containing many nested variants.... Read more
Affected Products : d-bus- EPSS Score: %0.09
- Published: Dec. 30, 2010
- Modified: Apr. 11, 2025
-
2.1
LOWCVE-2010-4171
The staprun runtime tool in SystemTap 1.3 does not verify that a module to unload was previously loaded by SystemTap, which allows local users to cause a denial of service (unloading of arbitrary kernel modules).... Read more
Affected Products : systemtap- EPSS Score: %0.06
- Published: Dec. 07, 2010
- Modified: Apr. 11, 2025
-
2.1
LOWCVE-2015-3218
The authentication_agent_new function in polkitbackend/polkitbackendinteractiveauthority.c in PolicyKit (aka polkit) before 0.113 allows local users to cause a denial of service (NULL pointer dereference and polkitd daemon crash) by calling RegisterAuthen... Read more
- EPSS Score: %0.13
- Published: Oct. 26, 2015
- Modified: Apr. 12, 2025
-
2.1
LOWCVE-2009-1173
IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.3 uses weak permissions (777) for files associated with unspecified "interim fixes," which allows attackers to modify files that would not have been accessible if the intended 755 permissions were us... Read more
Affected Products : websphere_application_server- EPSS Score: %0.05
- Published: Mar. 31, 2009
- Modified: Apr. 09, 2025
-
2.1
LOWCVE-2005-1725
launchd 106 in Apple Mac OS X 10.4.x up to 10.4.1 allows local users to overwrite arbitrary files via a symlink attack on the socket file in an insecure temporary directory.... Read more
Affected Products : mac_os_x_server- EPSS Score: %0.16
- Published: Jun. 08, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2001-1029
libutil in OpenSSH on FreeBSD 4.4 and earlier does not drop privileges before verifying the capabilities for reading the copyright and welcome files, which allows local users to bypass the capabilities checks and read arbitrary files by specifying alterna... Read more
- EPSS Score: %0.13
- Published: Sep. 20, 2001
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2009-0988
Unspecified vulnerability in the Password Policy component in Oracle Database 11.1.0.6 allows remote authenticated users to affect confidentiality via unknown vectors.... Read more
- EPSS Score: %0.64
- Published: Apr. 15, 2009
- Modified: Apr. 09, 2025
-
2.1
LOWCVE-2005-1981
Unknown vulnerability in Microsoft Windows 2000 Server and Windows Server 2003 domain controllers allows remote authenticated users to cause a denial of service (system crash) via a crafted Kerberos message.... Read more
- EPSS Score: %2.25
- Published: Aug. 10, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2014-9496
The sd2_parse_rsrc_fork function in sd2.c in libsndfile allows attackers to have unspecified impact via vectors related to a (1) map offset or (2) rsrc marker, which triggers an out-of-bounds read.... Read more
- EPSS Score: %0.12
- Published: Jan. 16, 2015
- Modified: Apr. 12, 2025
-
2.1
LOWCVE-2001-0169
When using the LD_PRELOAD environmental variable in SUID or SGID applications, glibc does not verify that preloaded libraries in /etc/ld.so.cache are also SUID/SGID, which could allow a local user to overwrite arbitrary files by loading a library from /li... Read more
- EPSS Score: %0.14
- Published: Mar. 26, 2001
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2013-5872
Unspecified vulnerability in Oracle Solaris 10 and 11.1 allows local users to affect availability via vectors related to Name Service Cache Daemon (NSCD).... Read more
- EPSS Score: %0.10
- Published: Jan. 15, 2014
- Modified: Apr. 11, 2025
-
2.1
LOWCVE-2013-6480
Libcloud 0.12.3 through 0.13.2 does not set the scrub_data parameter for the destroy DigitalOcean API, which allows local users to obtain sensitive information by leveraging a new VM.... Read more
Affected Products : libcloud- EPSS Score: %0.56
- Published: Jan. 07, 2014
- Modified: Apr. 11, 2025
-
2.1
LOWCVE-2012-0570
Unspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11 allows local users to affect availability via unknown vectors related to Libraries/Libc.... Read more
- EPSS Score: %0.09
- Published: Apr. 17, 2013
- Modified: Apr. 11, 2025
-
2.1
LOWCVE-2015-1015
Omron CX-One CX-Programmer before 9.6, CJ2M PLC devices before 2.1, and CJ2H PLC devices before 1.5 use a reversible format for password storage in object files on Compact Flash cards, which makes it easier for local users to obtain sensitive information ... Read more
- EPSS Score: %0.08
- Published: Oct. 06, 2015
- Modified: Apr. 12, 2025
-
2.1
LOWCVE-2013-6497
clamscan in ClamAV before 0.98.5, when using -a option, allows remote attackers to cause a denial of service (crash) as demonstrated by the jwplayer.js file.... Read more
Affected Products : clamav- EPSS Score: %0.45
- Published: Dec. 01, 2014
- Modified: Apr. 12, 2025