Latest CVE Feed
-
2.1
LOWCVE-2002-0138
CDRDAO 1.1.4 and 1.1.5 allows local users to read arbitrary files via the show-data command.... Read more
Affected Products : cdrdao- EPSS Score: %0.12
- Published: Mar. 25, 2002
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2005-1369
The (1) it87 and (2) via686a drivers in I2C for Linux 2.6.x before 2.6.11.8, and 2.6.12 before 2.6.12-rc2, create the sysfs "alarms" file with write permissions, which allows local users to cause a denial of service (CPU consumption) by attempting to writ... Read more
Affected Products : linux_kernel- EPSS Score: %0.05
- Published: May. 02, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2003-0547
GDM before 2.4.1.6, when using the "examine session errors" feature, allows local users to read arbitrary files via a symlink attack on the ~/.xsession-errors file.... Read more
- EPSS Score: %0.11
- Published: Aug. 27, 2003
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2005-1472
Certain system calls in Apple Mac OS X 10.4.1 do not properly enforce the permissions of certain directories without the POSIX read bit set, but with the execute bits set for group or other, which allows local users to list files in otherwise restricted d... Read more
Affected Products : mac_os_x- EPSS Score: %0.05
- Published: May. 19, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2005-1518
Unknown vulnerability in Solaris 7 through 9, when using Federated Naming Services (FNS), autofs, and FNS X.500 configuration, allows local users to cause a denial of service (automountd crash) when "accessing" /xfn/_x500.... Read more
- EPSS Score: %0.06
- Published: May. 11, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2001-0736
Vulnerability in (1) pine before 4.33 and (2) the pico editor, included with pine, allows local users local users to overwrite arbitrary files via a symlink attack.... Read more
- EPSS Score: %0.17
- Published: Oct. 18, 2001
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2013-0345
varnish 3.0.3 uses world-readable permissions for the /var/log/varnish/ directory and the log files in the directory, which allows local users to obtain sensitive information by reading the files. NOTE: some of these details are obtained from third party... Read more
Affected Products : varnish_cache- EPSS Score: %0.05
- Published: May. 08, 2014
- Modified: Apr. 12, 2025
-
2.1
LOWCVE-2013-1940
X.Org X server before 1.13.4 and 1.4.x before 1.14.1 does not properly restrict access to input events when adding a new hot-plug device, which might allow physically proximate attackers to obtain sensitive information, as demonstrated by reading password... Read more
- EPSS Score: %0.11
- Published: May. 13, 2013
- Modified: Apr. 11, 2025
-
2.1
LOWCVE-2012-0943
debian/guest-account in Light Display Manager (lightdm) 1.0.x before 1.0.6 and 1.1.x before 1.1.7, as used in Ubuntu Linux 11.10, allows local users to delete arbitrary files via a space in the name of a file in /tmp. NOTE: this identifier was SPLIT per ... Read more
- EPSS Score: %0.26
- Published: May. 22, 2014
- Modified: Apr. 12, 2025
-
2.1
LOWCVE-2015-4813
Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 4.0.34, 4.1.42, 4.2.34, 4.3.32, and 5.0.8, when using a Windows guest, allows local users to affect availability via unknown vectors related to Co... Read more
- EPSS Score: %0.06
- Published: Oct. 21, 2015
- Modified: Apr. 12, 2025
-
2.1
LOWCVE-1999-1587
/usr/ucb/ps in Sun Microsystems Solaris 8 and 9, and certain earlier releases, allows local users to view the environment variables and values of arbitrary processes via the -e option.... Read more
- EPSS Score: %0.12
- Published: Dec. 31, 1999
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2015-3284
pioctls in OpenAFS 1.6.x before 1.6.13 allows local users to read kernel memory via crafted commands.... Read more
Affected Products : openafs- EPSS Score: %0.06
- Published: Aug. 12, 2015
- Modified: Apr. 12, 2025
-
2.1
LOWCVE-2011-4623
Integer overflow in the rsCStrExtendBuf function in runtime/stringbuf.c in the imfile module in rsyslog 4.x before 4.6.6, 5.x before 5.7.4, and 6.x before 6.1.4 allows local users to cause a denial of service (daemon hang) via a large file, which triggers... Read more
Affected Products : rsyslog- EPSS Score: %0.09
- Published: Sep. 25, 2012
- Modified: Apr. 11, 2025
-
2.1
LOWCVE-2011-0710
The task_show_regs function in arch/s390/kernel/traps.c in the Linux kernel before 2.6.38-rc4-next-20110216 on the s390 platform allows local users to obtain the values of the registers of an arbitrary process by reading a status file under /proc/.... Read more
Affected Products : linux_kernel- EPSS Score: %0.11
- Published: Feb. 18, 2011
- Modified: Apr. 11, 2025
-
2.1
LOWCVE-2011-0685
The Delete Private Data feature in Opera before 11.01 does not properly implement the "Clear all email account passwords" option, which might allow physically proximate attackers to access an e-mail account via an unattended workstation.... Read more
Affected Products : opera_browser- EPSS Score: %0.07
- Published: Jan. 31, 2011
- Modified: Apr. 11, 2025
-
2.1
LOWCVE-1999-1332
gzexe in the gzip package on Red Hat Linux 5.0 and earlier allows local users to overwrite files of other users via a symlink attack on a temporary file.... Read more
Affected Products : linux- EPSS Score: %0.16
- Published: Dec. 31, 1999
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2012-0863
Mumble 1.2.3 and earlier uses world-readable permissions for .local/share/data/Mumble/.mumble.sqlite files in home directories, which might allow local users to obtain a cleartext password and configuration data by reading a file.... Read more
Affected Products : mumble- EPSS Score: %0.05
- Published: Apr. 30, 2012
- Modified: Apr. 11, 2025
-
2.1
LOWCVE-2025-5991
There is a "Use After Free" vulnerability in Qt's QHttp2ProtocolHandler in the QtNetwork module. This only affects HTTP/2 handling, HTTP handling is not affected by this at all. This happens due to a race condition between how QHttp2Stream uploads the bod... Read more
Affected Products :- Published: Jun. 11, 2025
- Modified: Jun. 12, 2025
- Vuln Type: Race Condition
-
2.1
LOWCVE-2011-1171
net/ipv4/netfilter/ip_tables.c in the IPv4 implementation in the Linux kernel before 2.6.39 does not place the expected '\0' character at the end of string data in the values of certain structure members, which allows local users to obtain potentially sen... Read more
Affected Products : linux_kernel- EPSS Score: %0.04
- Published: Jun. 22, 2011
- Modified: Apr. 11, 2025
-
2.1
LOWCVE-2011-0016
Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha does not properly manage key data in memory, which might allow local users to obtain sensitive information by leveraging the ability to read memory that was previously used by a different process.... Read more
- EPSS Score: %0.06
- Published: Jan. 19, 2011
- Modified: Apr. 11, 2025