Latest CVE Feed
-
2.1
LOWCVE-2005-1855
Backup Manager (backup-manager) before 0.5.8 creates backup files with world-readable default permissions, which allows local users to obtain sensitive information.... Read more
- EPSS Score: %0.06
- Published: Aug. 30, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2004-0133
The XFS file system code in Linux 2.4.x has an information leak in which in-memory data is written to the device for the XFS file system, which allows local users to obtain sensitive information by reading the raw device.... Read more
Affected Products : linux_kernel- EPSS Score: %0.06
- Published: Jun. 01, 2004
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2002-0110
Nevrona Designs MiraMail 1.04 and earlier stores authentication information such as POP usernames and passwords in plaintext in a .ini file, which allows an attacker to gain privileges by reading the passwords from the file.... Read more
Affected Products : miramail- EPSS Score: %0.20
- Published: Mar. 25, 2002
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2005-1126
The SIOCGIFCONF ioctl (ifconf function) in FreeBSD 4.x through 4.11 and 5.x through 5.4 does not properly clear a buffer before using it, which allows local users to obtain portions of sensitive kernel memory.... Read more
Affected Products : freebsd- EPSS Score: %0.07
- Published: Apr. 15, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2005-1129
eGroupWare 1.0.6 and earlier, when an e-mail is composed with an attachment but not sent, will send that attachment in the next e-mail, which may cause sensitive information to be sent to the wrong recipient.... Read more
Affected Products : egroupware- EPSS Score: %0.09
- Published: May. 02, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2004-0299
Buffer overflow in smallftpd 0.99 allows local users to cause a denial of service (crash) via an FTP request with a large number of "/" (slash) characters.... Read more
Affected Products : smallftpd- EPSS Score: %0.23
- Published: Nov. 23, 2004
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2004-0325
TYPSoft FTP Server 1.10 allows remote authenticated users to cause a denial of service (CPU consumption) via "//../" arguments to (1) mkd, (2) xmkd, (3) dele, (4) size, (5) retr, (6) stor, (7) appe, (8) rnfr, (9) rnto, (10) rmd, or (11) xrmd, as demonstra... Read more
Affected Products : typsoft_ftp_server- EPSS Score: %1.17
- Published: Dec. 31, 2004
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2004-0341
WFTPD Pro Server 3.21 Release 1 allocates memory for a command until a 0Ah byte (newline) is sent, which allows local users to cause a denial of service (CPU consumption) by continuing to send a long command that does not contain a newline.... Read more
Affected Products : wftpd- EPSS Score: %0.15
- Published: Nov. 23, 2004
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2004-0370
The setsockopt call in the KAME Project IPv6 implementation, as used in FreeBSD 5.2, does not properly handle certain IPv6 socket options, which could allow attackers to read kernel memory and cause a system panic.... Read more
Affected Products : freebsd- EPSS Score: %0.08
- Published: May. 04, 2004
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2002-0129
efax 0.9 and earlier, when installed setuid root, allows local users to read arbitrary files via the -d option, which prints the contents of the file in a warning message.... Read more
Affected Products : efax- EPSS Score: %0.21
- Published: Mar. 25, 2002
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2004-0422
flim before 1.14.3 creates temporary files insecurely, which allows local users to overwrite arbitrary files of the Emacs user via a symlink attack.... Read more
- EPSS Score: %0.08
- Published: Jul. 07, 2004
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2004-0462
The built-in web servers for multiple networking devices do not set the Secure attribute for sensitive cookies in HTTPS sessions, which could cause the user agent to send those cookies in plaintext over an HTTP session with the same server.... Read more
Affected Products :- EPSS Score: %0.23
- Published: Dec. 31, 2004
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2005-2749
Unspecified vulnerability in the Finder Get Info window for Mac OS X 10.4 up to 10.4.2 causes Finder to misrepresent file and group ownership information. NOTE: it is not clear whether this issue satisfies the CVE definition of a vulnerability.... Read more
- EPSS Score: %0.08
- Published: Nov. 01, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2005-1720
AFP Server for Mac OS X 10.4.1, when using an ACL enabled volume, does not properly remove an ACL when a file is copied to a directory that does not use ACLs, which will override the POSIX file permissions for that ACL.... Read more
Affected Products : afp_server- EPSS Score: %0.05
- Published: Jun. 16, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2004-1689
sudoedit (aka sudo -e) in sudo 1.6.8 opens a temporary file with root privileges, which allows local users to read arbitrary files via a symlink attack on the temporary file before quitting sudoedit.... Read more
Affected Products : sudo- EPSS Score: %0.17
- Published: Sep. 16, 2004
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2007-4394
Unspecified vulnerability in a "core clean" cron job created by the findutils-locate package on SUSE Linux 10.0 and 10.1 and Enterprise Server 9 and 10 before 20070810 allows local users to delete of arbitrary files via unknown vectors.... Read more
- EPSS Score: %0.04
- Published: Aug. 17, 2007
- Modified: Apr. 09, 2025
-
2.1
LOWCVE-2004-2544
Admin Console in Secure Computing Corporation Sidewinder G2 6.1.0.01 exports private keys when exporting firewall certificates, which might allow attackers to obtain sensitive information.... Read more
Affected Products : sidewinder_g2- EPSS Score: %0.04
- Published: Dec. 31, 2004
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2003-0876
Finder in Mac OS X 10.2.8 and earlier sets global read/write/execute permissions on directories when they are dragged (copied) from a mounted volume such as a disk image (DMG), which could cause the directories to have less restrictive permissions than in... Read more
- EPSS Score: %0.08
- Published: Nov. 03, 2003
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2002-1470
SHOUTcast 1.8.9 and earlier allows local users to obtain the cleartext administrative password via a GET request to port 8001, which causes the password to be logged in the world-readable sc_serv.log file.... Read more
Affected Products : shoutcast_server- EPSS Score: %0.10
- Published: Apr. 22, 2003
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2007-1191
The Social Bookmarks (del.icio.us) plug-in 8F in Quicksilver writes usernames and passwords in plaintext to the /Library/Logs/Console/UID/Console.log file, which allows local users to obtain sensitive information by reading this file.... Read more
Affected Products : del.icio.us_module- EPSS Score: %0.07
- Published: Mar. 02, 2007
- Modified: Apr. 09, 2025