Latest CVE Feed
-
2.1
LOWCVE-2005-1098
GetDataBack for NTFS 2.31 stores the username and license key in plaintext in the Name value in the License registry key, which may allow local users to obtain sensitive information.... Read more
Affected Products : getdataback_for_ntfs- EPSS Score: %0.50
- Published: May. 02, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2002-0795
The rc system startup script for FreeBSD 4 through 4.5 allows local users to delete arbitrary files via a symlink attack on X Windows lock files.... Read more
Affected Products : freebsd- EPSS Score: %0.10
- Published: Aug. 12, 2002
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2002-1125
FreeBSD port programs that use libkvm for FreeBSD 4.6.2-RELEASE and earlier, including (1) asmon, (2) ascpu, (3) bubblemon, (4) wmmon, and (5) wmnet2, leave open file descriptors for /dev/mem and /dev/kmem, which allows local users to read kernel memory.... Read more
Affected Products : freebsd- EPSS Score: %0.21
- Published: Sep. 24, 2002
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2003-1099
shar on HP-UX B.11.00, B.11.04, and B.11.11 creates temporary files with predictable names in /tmp, which allows local users to cause a denial of service and possibly execute arbitrary code via a symlink attack.... Read more
Affected Products : hp-ux- EPSS Score: %0.17
- Published: Dec. 31, 2003
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2002-0915
autorun in Xandros based Linux distributions allows local users to read the first line of arbitrary files via the -c parameter, which causes autorun to print the first line of the file.... Read more
- EPSS Score: %0.19
- Published: Oct. 04, 2002
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2005-0822
Citrix Metaframe Password Manager 2.5 and earlier stores a password in cleartext although it is obfuscated when presented to a user, which allows users to view their secondary passwords even if it is not allowed by policy.... Read more
Affected Products : metaframe_password_manager- EPSS Score: %0.10
- Published: May. 02, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2003-0670
Sustworks IPNetSentryX and IPNetMonitorX allow local users to sniff network packets via the setuid helper applications (1) RunTCPDump, which calls tcpdump, and (2) RunTCPFlow, which calls tcpflow.... Read more
- EPSS Score: %0.09
- Published: Aug. 27, 2003
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2006-0380
A logic error in FreeBSD kernel 5.4-STABLE and 6.0 causes the kernel to calculate an incorrect buffer length, which causes more data to be copied to userland than intended, which could allow local users to read portions of kernel memory.... Read more
Affected Products : freebsd- EPSS Score: %0.08
- Published: Jan. 25, 2006
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2003-0876
Finder in Mac OS X 10.2.8 and earlier sets global read/write/execute permissions on directories when they are dragged (copied) from a mounted volume such as a disk image (DMG), which could cause the directories to have less restrictive permissions than in... Read more
- EPSS Score: %0.08
- Published: Nov. 03, 2003
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2001-0837
DeltaThree Pc-To-Phone 3.0.3 places sensitive data in world-readable locations in the installation directory, which allows local users to read the information in (1) temp.html, (2) the log folder, and (3) the PhoneBook folder.... Read more
Affected Products : pc-to-phone- EPSS Score: %0.07
- Published: Dec. 06, 2001
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2006-1475
Windows Firewall in Microsoft Windows XP SP2 does not produce application alerts when an application is executed using the NTFS Alternate Data Streams (ADS) filename:stream syntax, which might allow local users to launch a Trojan horse attack in which the... Read more
Affected Products : windows_xp- EPSS Score: %0.38
- Published: Mar. 29, 2006
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2006-3675
Password Safe 2.11, 2.16 and 3.0BETA1 does not respect the configuration settings for locking the password database when certain dialogue windows are open, which might allow attackers with physical access to obtain the database contents.... Read more
Affected Products : passwordsafe- EPSS Score: %0.12
- Published: Jul. 28, 2006
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2004-0058
Antivir / Linux 2.0.9-9, and possibly earlier versions, allows local users to overwrite arbitrary files via a symlink attack on the .pid_antivir_$$ temporary file.... Read more
Affected Products : linux_kernel- EPSS Score: %0.11
- Published: Feb. 17, 2004
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2007-3722
The 4BSD process scheduler in the FreeBSD kernel performs scheduling based on CPU billing gathered from periodic process sampling ticks, which allows local users to cause a denial of service (CPU consumption) by performing voluntary nanosecond sleeps that... Read more
Affected Products : freebsd- EPSS Score: %0.06
- Published: Jul. 12, 2007
- Modified: Apr. 09, 2025
-
2.1
LOWCVE-2007-3720
The process scheduler in the Linux kernel 2.4 performs scheduling based on CPU billing gathered from periodic process sampling ticks, which allows local users to cause a denial of service (CPU consumption) by performing voluntary nanosecond sleeps that re... Read more
Affected Products : linux_kernel- EPSS Score: %0.06
- Published: Jul. 12, 2007
- Modified: Apr. 09, 2025
-
2.1
LOWCVE-1999-0327
SGI syserr program allows local users to corrupt files.... Read more
Affected Products : irix- EPSS Score: %0.12
- Published: Nov. 01, 1997
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2006-1376
The installation of Debian GNU/Linux 3.1r1 from the network install CD creates /var/log/debian-installer/cdebconf with world writable permissions, which allows local users to cause a denial of service (disk consumption).... Read more
Affected Products : debian_linux- EPSS Score: %0.05
- Published: Mar. 24, 2006
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2005-0184
Directory traversal vulnerability in ftpfile in the Vacation plugin 0.15 and earlier for Squirrelmail allows local users to read arbitrary files via a .. (dot dot) in a get request.... Read more
Affected Products : vacation_plugin- EPSS Score: %0.08
- Published: May. 02, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2006-0363
The "Remember my Password" feature in MSN Messenger 7.5 stores passwords in an encrypted format under the HKEY_CURRENT_USER\Software\Microsoft\IdentityCRL\Creds registry key, which might allow local users to obtain the original passwords via a program tha... Read more
Affected Products : msn_messenger- EPSS Score: %1.16
- Published: Jan. 22, 2006
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2003-1133
Rit Research Labs The Bat! 1.0.11 through 2.0 creates new accounts with insecure ACLs, which allows local users to read other users' email messages.... Read more
Affected Products : the_bat- EPSS Score: %0.09
- Published: Dec. 31, 2003
- Modified: Apr. 03, 2025