Latest CVE Feed
-
2.1
LOWCVE-2015-5006
IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR2, 7 R1 before SR3 FP20, 7 before SR9 FP20, 6 R1 before SR8 FP15, and 6 before SR16 FP15 allow physically proximate attackers to obtain sensitive information by reading the Kerber... Read more
- EPSS Score: %0.07
- Published: Dec. 07, 2015
- Modified: Apr. 12, 2025
-
2.1
LOWCVE-2007-1856
Vixie Cron before 4.1-r10 on Gentoo Linux is installed with insecure permissions, which allows local users to cause a denial of service (cron failure) by creating hard links, which results in a failed st_nlink check in database.c.... Read more
- EPSS Score: %0.05
- Published: Apr. 18, 2007
- Modified: Apr. 09, 2025
-
2.1
LOWCVE-2007-2894
The emulated floppy disk controller in Bochs 2.3 allows local users of the guest operating system to cause a denial of service (virtual machine crash) via unspecified vectors, resulting in a divide-by-zero error.... Read more
Affected Products : bochs- EPSS Score: %0.11
- Published: May. 30, 2007
- Modified: Apr. 09, 2025
-
2.1
LOWCVE-2013-5872
Unspecified vulnerability in Oracle Solaris 10 and 11.1 allows local users to affect availability via vectors related to Name Service Cache Daemon (NSCD).... Read more
- EPSS Score: %0.10
- Published: Jan. 15, 2014
- Modified: Apr. 11, 2025
-
2.1
LOWCVE-2006-3858
IBM Informix Dynamic Server (IDS) before 9.40.xC8 and 10.00 before 10.00.xC4 stores passwords in plaintext in shared memory, which allows local users to obtain passwords by reading the memory (product defects 171893, 171894, 173772).... Read more
Affected Products : informix_dynamic_server- EPSS Score: %0.07
- Published: Aug. 08, 2006
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2015-2428
Object Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly constrain impersonation levels during interaction with... Read more
Affected Products : windows_7 windows_8.1 windows_rt_8.1 windows_server_2008 windows_server_2012 windows_vista windows_8 windows_rt- EPSS Score: %1.04
- Published: Aug. 15, 2015
- Modified: Apr. 12, 2025
-
2.1
LOWCVE-2013-6480
Libcloud 0.12.3 through 0.13.2 does not set the scrub_data parameter for the destroy DigitalOcean API, which allows local users to obtain sensitive information by leveraging a new VM.... Read more
Affected Products : libcloud- EPSS Score: %0.56
- Published: Jan. 07, 2014
- Modified: Apr. 11, 2025
-
2.1
LOWCVE-2012-0570
Unspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11 allows local users to affect availability via unknown vectors related to Libraries/Libc.... Read more
- EPSS Score: %0.09
- Published: Apr. 17, 2013
- Modified: Apr. 11, 2025
-
2.1
LOWCVE-2011-4607
PuTTY 0.59 through 0.61 does not clear sensitive process memory when managing user replies that occur during keyboard-interactive authentication, which might allow local users to read login passwords by obtaining access to the process' memory.... Read more
- EPSS Score: %0.06
- Published: Aug. 23, 2013
- Modified: Apr. 11, 2025
-
2.1
LOWCVE-2015-3218
The authentication_agent_new function in polkitbackend/polkitbackendinteractiveauthority.c in PolicyKit (aka polkit) before 0.113 allows local users to cause a denial of service (NULL pointer dereference and polkitd daemon crash) by calling RegisterAuthen... Read more
- EPSS Score: %0.13
- Published: Oct. 26, 2015
- Modified: Apr. 12, 2025
-
2.1
LOWCVE-2005-0596
PHP 4 (PHP4) allows attackers to cause a denial of service (daemon crash) by using the readfile function on a file whose size is a multiple of the page size.... Read more
Affected Products : php- EPSS Score: %0.07
- Published: May. 02, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2025-46553
@misskey-dev/summaly is a tool for getting a summary of a web page. Starting in version 3.0.1 and prior to version 5.2.1, a logic error in the main `summaly` function causes the `allowRedirects` option to never be passed to any plugins, and as a result, i... Read more
Affected Products :- Published: May. 05, 2025
- Modified: May. 05, 2025
- Vuln Type: Misconfiguration
-
2.1
LOWCVE-2011-1886
win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP3 does not properly validate the arguments to functions, which allows local users to read arbitrary data from kernel memory via a crafted application that triggers a NULL pointer dereference,... Read more
Affected Products : windows_xp- EPSS Score: %0.36
- Published: Jul. 13, 2011
- Modified: Apr. 11, 2025
-
2.1
LOWCVE-2009-3402
Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.1 allows remote authenticated users to affect confidentiality via unknown vectors.... Read more
Affected Products : e-business_suite- EPSS Score: %0.36
- Published: Oct. 22, 2009
- Modified: Apr. 09, 2025
-
2.1
LOWCVE-2013-3273
EMC RSA Authentication Manager 8.0 before P2 and 7.1 before SP4 P26, as used in Appliance 3.0, does not omit the cleartext administrative password from trace logging in custom SDK applications, which allows local users to obtain sensitive information by r... Read more
- EPSS Score: %0.05
- Published: Jul. 08, 2013
- Modified: Apr. 11, 2025
-
2.1
LOWCVE-2017-18392
cPanel before 68.0.15 allows collisions because PostgreSQL databases can be assigned to multiple accounts (SEC-325).... Read more
Affected Products : cpanel- EPSS Score: %0.27
- Published: Aug. 02, 2019
- Modified: Nov. 21, 2024
-
2.1
LOWCVE-2009-2918
The tgbvpn.sys driver in TheGreenBow IPSec VPN Client 4.61.003 allows local users to cause a denial of service (NULL pointer dereference and system crash) via a crafted request to the 0x80000034 IOCTL, probably involving an input or output buffer size of ... Read more
Affected Products : thegreenbow_vpn_client- EPSS Score: %0.16
- Published: Aug. 21, 2009
- Modified: Apr. 09, 2025
-
2.1
LOWCVE-2015-7238
The Secondary server in Threat Intelligence Exchange (TIE) before 1.2.0 uses weak permissions for unspecified (1) configuration files and (2) installation logs, which allows local users to obtain sensitive information by reading the files.... Read more
Affected Products : threat_intelligence_exchange- EPSS Score: %0.04
- Published: Sep. 18, 2015
- Modified: Apr. 12, 2025
-
2.1
LOWCVE-2004-2169
Application Access Server (A-A-S) 1.0.37 and earlier allows remote authenticated users to cause a denial of service (application crash) via a long file request.... Read more
Affected Products : a-a-s_application_access_server- EPSS Score: %0.23
- Published: Dec. 31, 2004
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2004-0654
Unknown vulnerability in the Basic Security Module (BSM), when configured to audit either the Administrative (ad) or the System-Wide Administration (as) audit class in Solaris 7, 8, and 9, allows local users to cause a denial of service (kernel panic).... Read more
- EPSS Score: %0.13
- Published: Aug. 06, 2004
- Modified: Apr. 03, 2025