Latest CVE Feed
-
2.1
LOWCVE-2011-1172
net/ipv6/netfilter/ip6_tables.c in the IPv6 implementation in the Linux kernel before 2.6.39 does not place the expected '\0' character at the end of string data in the values of certain structure members, which allows local users to obtain potentially se... Read more
Affected Products : linux_kernel- EPSS Score: %0.04
- Published: Jun. 22, 2011
- Modified: Apr. 11, 2025
-
2.1
LOWCVE-2015-7872
The key_gc_unused_keys function in security/keys/gc.c in the Linux kernel through 4.2.6 allows local users to cause a denial of service (OOPS) via crafted keyctl commands.... Read more
Affected Products : linux_kernel- EPSS Score: %0.06
- Published: Nov. 16, 2015
- Modified: Apr. 12, 2025
-
2.1
LOWCVE-2012-3478
rssh 2.3.3 and earlier allows local users to bypass intended restricted shell access via crafted environment variables in the command line.... Read more
Affected Products : rssh- EPSS Score: %0.06
- Published: Aug. 31, 2012
- Modified: Apr. 11, 2025
-
2.1
LOWCVE-2010-1636
The btrfs_ioctl_clone function in fs/btrfs/ioctl.c in the btrfs functionality in the Linux kernel 2.6.29 through 2.6.32, and possibly other versions, does not ensure that a cloned file descriptor has been opened for reading, which allows local users to re... Read more
Affected Products : linux_kernel- EPSS Score: %0.24
- Published: Jun. 08, 2010
- Modified: Apr. 11, 2025
-
2.1
LOWCVE-2015-6102
The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 allows local users to bypass the KASLR protection ... Read more
- EPSS Score: %3.68
- Published: Nov. 11, 2015
- Modified: Apr. 12, 2025
-
2.1
LOWCVE-2012-5530
The (1) pcmd and (2) pmlogger init scripts in Performance Co-Pilot (PCP) before 3.6.10 allow local users to overwrite arbitrary files via a symlink attack on a /var/tmp/##### temporary file.... Read more
Affected Products : performance_co-pilot- EPSS Score: %0.14
- Published: Nov. 29, 2012
- Modified: Apr. 11, 2025
-
2.1
LOWCVE-2015-2585
Unspecified vulnerability in the Application Express component in Oracle Database Server before 5.0 allows remote authenticated users to affect availability via unknown vectors.... Read more
Affected Products : database_server- EPSS Score: %0.36
- Published: Jul. 16, 2015
- Modified: Apr. 12, 2025
-
2.1
LOWCVE-2012-4833
fuser in IBM AIX 6.1 and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, does not properly restrict the -k option, which allows local users to kill arbitrary processes via a crafted command line.... Read more
- EPSS Score: %0.05
- Published: Oct. 01, 2012
- Modified: Apr. 11, 2025
-
2.1
LOWCVE-2024-53698
A double free vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to modify memory. We have already fixed the vulnerability in... Read more
- Published: Mar. 07, 2025
- Modified: Mar. 07, 2025
- Vuln Type: Memory Corruption
-
2.1
LOWCVE-2024-53697
An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to modify or corrupt memory. We have already fixed ... Read more
- Published: Mar. 07, 2025
- Modified: Mar. 07, 2025
- Vuln Type: Memory Corruption
-
2.1
LOWCVE-2024-38638
An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to modify or corrupt memory. QTS 5.2.x/QuTS hero h5... Read more
- Published: Mar. 07, 2025
- Modified: Mar. 07, 2025
- Vuln Type: Memory Corruption
-
2.1
LOWCVE-2024-53699
An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to modify or corrupt memory. We have already fixed ... Read more
- Published: Mar. 07, 2025
- Modified: Mar. 07, 2025
- Vuln Type: Memory Corruption
-
2.1
LOWCVE-2005-1265
The mmap function in the Linux Kernel 2.6.10 can be used to create memory maps with a start address beyond the end address, which allows local users to cause a denial of service (kernel crash).... Read more
- EPSS Score: %0.06
- Published: Jun. 16, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2003-1040
kmod in the Linux kernel does not set its uid, suid, gid, or sgid to 0, which allows local users to cause a denial of service (crash) by sending certain signals to kmod.... Read more
Affected Products : linux_kernel- EPSS Score: %0.08
- Published: Apr. 15, 2004
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2005-1410
The tsearch2 module in PostgreSQL 7.4 through 8.0.x declares the (1) dex_init, (2) snb_en_init, (3) snb_ru_init, (4) spell_init, and (5) syn_init functions as "internal" even when they do not take an internal argument, which allows attackers to cause a de... Read more
- EPSS Score: %0.10
- Published: May. 03, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2005-0118
helvis 1.8h2_1 and earlier stores recovery files in world readable directories with world readable permissions, which allows local users to read the recovered files of other users.... Read more
Affected Products : helvis- EPSS Score: %0.05
- Published: May. 02, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2005-0179
Linux kernel 2.4.x and 2.6.x allows local users to cause a denial of service (CPU and memory consumption) and bypass RLIM_MEMLOCK limits via the mlockall call.... Read more
Affected Products : linux_kernel- EPSS Score: %0.07
- Published: Mar. 07, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2007-0958
Linux kernel 2.6.x before 2.6.20 allows local users to read unreadable binaries by using the interpreter (PT_INTERP) functionality and triggering a core dump, a variant of CVE-2004-1073.... Read more
Affected Products : linux_kernel- EPSS Score: %0.06
- Published: Feb. 15, 2007
- Modified: Apr. 09, 2025
-
2.1
LOWCVE-2004-0372
xine allows local users to overwrite arbitrary files via a symlink attack on a bug report email that is generated by the (1) xine-bugreport or (2) xine-check scripts.... Read more
Affected Products : xine- EPSS Score: %0.10
- Published: Apr. 15, 2004
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2004-0881
getmail 4.x before 4.2.0, and other versions before 3.2.5, when run as root, allows local users to write files in arbitrary directories via a symlink attack on subdirectories in the maildir.... Read more
- EPSS Score: %0.09
- Published: Jan. 27, 2005
- Modified: Apr. 03, 2025