Latest CVE Feed
-
2.1
LOWCVE-2008-7258
The standardise function in Anibal Monsalve Salazar sSMTP 2.61 and 2.62 allows local users to cause a denial of service (application exit) via an e-mail message containing a long line that begins with a . (dot) character. NOTE: CVE disputes this issue be... Read more
Affected Products : ssmtp- EPSS Score: %0.07
- Published: Aug. 20, 2010
- Modified: Apr. 11, 2025
-
2.1
LOWCVE-2005-0201
D-BUS (dbus) before 0.22 does not properly restrict access to a socket, if the socket address is known, which allows local users to listen or send arbitrary messages on another user's per-user session bus via that socket.... Read more
- EPSS Score: %0.07
- Published: Jun. 29, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2006-1859
Memory leak in __setlease in fs/locks.c in Linux kernel before 2.6.16.16 allows attackers to cause a denial of service (memory consumption) via unspecified actions related to an "uninitialised return value," aka "slab leak."... Read more
Affected Products : linux_kernel- EPSS Score: %0.07
- Published: May. 12, 2006
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2014-0164
openshift-origin-broker-util, as used in Red Hat OpenShift Enterprise 1.2.7 and 2.0.5, uses world-readable permissions for the mcollective client.cfg configuration file, which allows local users to obtain credentials and other sensitive information by rea... Read more
- EPSS Score: %0.04
- Published: May. 05, 2014
- Modified: Apr. 12, 2025
-
2.1
LOWCVE-2006-2563
The cURL library (libcurl) in PHP 4.4.2 and 5.1.4 allows attackers to bypass safe mode and read files via a file:// request containing null characters.... Read more
Affected Products : php- EPSS Score: %0.24
- Published: May. 29, 2006
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2006-6921
Unspecified versions of the Linux kernel allow local users to cause a denial of service (unrecoverable zombie process) via a program with certain instructions that prevent init from properly reaping a child whose parent has died.... Read more
Affected Products : linux_kernel- EPSS Score: %0.06
- Published: Jan. 12, 2007
- Modified: Apr. 09, 2025
-
2.1
LOWCVE-2009-2910
arch/x86/ia32/ia32entry.S in the Linux kernel before 2.6.31.4 on the x86_64 platform does not clear certain kernel registers before a return to user mode, which allows local users to read register values from an earlier process by switching an ia32 proces... Read more
Affected Products : linux_kernel ubuntu_linux fedora enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation enterprise_linux_eus virtualization opensuse linux_enterprise_server +3 more products- EPSS Score: %0.05
- Published: Oct. 20, 2009
- Modified: Apr. 09, 2025
-
2.1
LOWCVE-2007-1420
MySQL 5.x before 5.0.36 allows local users to cause a denial of service (database crash) by performing information_schema table subselects and using ORDER BY to sort a single-row result, which prevents certain structure elements from being initialized and... Read more
- EPSS Score: %0.15
- Published: Mar. 12, 2007
- Modified: Apr. 09, 2025
-
2.1
LOWCVE-2012-6120
Red Hat OpenStack Essex and Folsom creates the /var/log/puppet directory with world-readable permissions, which allows local users to obtain sensitive information such as Puppet log files.... Read more
- EPSS Score: %0.04
- Published: Apr. 10, 2013
- Modified: Apr. 11, 2025
-
2.1
LOWCVE-2005-0072
zhcon before 0.2 does not drop privileges before reading a user configuration file, which allows local users to read arbitrary files.... Read more
Affected Products : zhcon- EPSS Score: %0.08
- Published: Jan. 24, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2005-3319
The apache2handler SAPI (sapi_apache2.c) in the Apache module (mod_php) for PHP 5.x before 5.1.0 final and 4.4 before 4.4.1 final allows attackers to cause a denial of service (segmentation fault) via the session.save_path option in a .htaccess file or Vi... Read more
Affected Products : php- EPSS Score: %1.20
- Published: Oct. 27, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2005-2708
The search_binary_handler function in exec.c in Linux 2.4 kernel on 64-bit x86 architectures does not check a return code for a particular function call when virtual memory is low, which allows local users to cause a denial of service (panic), as demonstr... Read more
Affected Products : linux_kernel- EPSS Score: %0.10
- Published: Oct. 25, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2005-0977
The shmem_nopage function in shmem.c for the tmpfs driver in Linux kernel 2.6 does not properly verify the address argument, which allows local users to cause a denial of service (kernel crash) via an invalid address.... Read more
Affected Products : linux_kernel- EPSS Score: %0.07
- Published: May. 02, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2005-0135
The unw_unwind_to_user function in unwind.c on Itanium (ia64) architectures in Linux kernel 2.6 allows local users to cause a denial of service (system crash).... Read more
Affected Products : linux_kernel- EPSS Score: %0.07
- Published: May. 02, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2011-0016
Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha does not properly manage key data in memory, which might allow local users to obtain sensitive information by leveraging the ability to read memory that was previously used by a different process.... Read more
- EPSS Score: %0.06
- Published: Jan. 19, 2011
- Modified: Apr. 11, 2025
-
2.1
LOWCVE-2005-3271
Exec in Linux kernel 2.6 does not properly clear posix-timers in multi-threaded environments, which results in a resource leak and could allow a large number of multiple local users to cause a denial of service by using more posix-timers than specified by... Read more
Affected Products : linux_kernel- EPSS Score: %0.06
- Published: Oct. 21, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2008-3619
Time Machine in Apple Mac OS X 10.5 through 10.5.4 uses weak permissions for Time Machine Backup log files, which allows local users to obtain sensitive information by reading these files.... Read more
- EPSS Score: %0.05
- Published: Sep. 16, 2008
- Modified: Apr. 09, 2025
-
2.1
LOWCVE-2005-2672
pwmconfig in LM_sensors before 2.9.1 creates temporary files insecurely, which allows local users to overwrite arbitrary files via a symlink attack on the fancontrol temporary file.... Read more
Affected Products : lm_sensors- EPSS Score: %0.10
- Published: Aug. 23, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2005-1166
The DNTUS26 process in Dameware NT Utilities and the DWRCS process in MiniRemote Control 4.9 and earlier stores the username and password in cleartext in memory, which could allow attackers to obtain sensitive information.... Read more
- EPSS Score: %0.08
- Published: May. 02, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2006-3458
Zope 2.7.0 to 2.7.8, 2.8.0 to 2.8.7, and 2.9.0 to 2.9.3 (Zope2) does not disable the "raw" command when providing untrusted users with restructured text (reStructuredText) functionality from docutils, which allows local users to read arbitrary files.... Read more
Affected Products : zope- EPSS Score: %0.10
- Published: Jul. 07, 2006
- Modified: Apr. 03, 2025