Latest CVE Feed
-
2.1
LOWCVE-2007-1420
MySQL 5.x before 5.0.36 allows local users to cause a denial of service (database crash) by performing information_schema table subselects and using ORDER BY to sort a single-row result, which prevents certain structure elements from being initialized and... Read more
- EPSS Score: %0.15
- Published: Mar. 12, 2007
- Modified: Apr. 09, 2025
-
2.1
LOWCVE-2006-3878
Opsware Network Automation System (NAS) 6.0 installs /etc/init.d/mysql with insecure permissions, which allows local users to read the root password for the MySQL MAX database or gain privileges by modifying /etc/init.d/mysql.... Read more
Affected Products : network_automation_system- EPSS Score: %0.06
- Published: Jul. 27, 2006
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2006-1286
Buffer overflow in the login dialog in dbisqlc.exe in SQLAnywhere for Symantec Ghost 8.0 and 8.2, as used in Symantec Ghost Solutions Suite (SGSS) 1.0, might allow local users to read certain sensitive information from the database.... Read more
- EPSS Score: %0.10
- Published: Mar. 19, 2006
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2005-1270
The (1) check_update.sh and (2) rkhunter script in Rootkit Hunter before 1.2.3-r1 create temporary files with predictable file names, which allows local users to overwrite arbitrary files via a symlink attack.... Read more
Affected Products : rootkit_hunter- EPSS Score: %0.08
- Published: Apr. 26, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2006-2563
The cURL library (libcurl) in PHP 4.4.2 and 5.1.4 allows attackers to bypass safe mode and read files via a file:// request containing null characters.... Read more
Affected Products : php- EPSS Score: %0.24
- Published: May. 29, 2006
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2006-3787
kpf4ss.exe in Sunbelt Kerio Personal Firewall 4.3.x before 4.3.268 does not properly hook the CreateRemoteThread API function, which allows local users to cause a denial of service (crash) and bypass protection mechanisms by calling CreateRemoteThread.... Read more
Affected Products : personal_firewall- EPSS Score: %0.22
- Published: Jul. 24, 2006
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2004-0977
The make_oidjoins_check script in PostgreSQL 7.4.5 and earlier allows local users to overwrite files via a symlink attack on temporary files.... Read more
- EPSS Score: %0.09
- Published: Feb. 09, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2005-1166
The DNTUS26 process in Dameware NT Utilities and the DWRCS process in MiniRemote Control 4.9 and earlier stores the username and password in cleartext in memory, which could allow attackers to obtain sensitive information.... Read more
- EPSS Score: %0.08
- Published: May. 02, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2005-3044
Multiple vulnerabilities in Linux kernel before 2.6.13.2 allow local users to cause a denial of service (kernel OOPS from null dereference) via (1) fput in a 32-bit ioctl on 64-bit x86 systems or (2) sockfd_put in the 32-bit routing_ioctl function on 64-b... Read more
Affected Products : linux_kernel- EPSS Score: %0.12
- Published: Sep. 22, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2006-3495
AFP Server in Apple Mac OS X 10.3.9 and 10.4.7 stores reconnect keys in a world-readable file, which allows local users to obtain the keys and access files and folders of other users.... Read more
- EPSS Score: %0.07
- Published: Aug. 02, 2006
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2004-1453
GNU glibc 2.3.4 before 2.3.4.20040619, 2.3.3 before 2.3.3.20040420, and 2.3.2 before 2.3.2-r10 does not restrict the use of LD_DEBUG for a setuid program, which allows local users to gain sensitive information, such as the list of symbols used by the prog... Read more
Affected Products : glibc- EPSS Score: %0.08
- Published: Dec. 31, 2004
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2011-0016
Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha does not properly manage key data in memory, which might allow local users to obtain sensitive information by leveraging the ability to read memory that was previously used by a different process.... Read more
- EPSS Score: %0.06
- Published: Jan. 19, 2011
- Modified: Apr. 11, 2025
-
2.1
LOWCVE-2006-3912
Stack-based buffer overflow in the SFX module in WinRAR before 3.60 beta 8 has unspecified vectors and impact.... Read more
Affected Products : winrar- EPSS Score: %1.00
- Published: Jul. 28, 2006
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2005-0977
The shmem_nopage function in shmem.c for the tmpfs driver in Linux kernel 2.6 does not properly verify the address argument, which allows local users to cause a denial of service (kernel crash) via an invalid address.... Read more
Affected Products : linux_kernel- EPSS Score: %0.07
- Published: May. 02, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2005-0201
D-BUS (dbus) before 0.22 does not properly restrict access to a socket, if the socket address is known, which allows local users to listen or send arbitrary messages on another user's per-user session bus via that socket.... Read more
- EPSS Score: %0.07
- Published: Jun. 29, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2005-3885
The ps2epsi extension shell script (ps2epsi.sh) in Inkscape before 0.41 allows local users to overwrite arbitrary files via a symlink attack on the tmpepsifile.epsi temporary file.... Read more
Affected Products : inkscape- EPSS Score: %0.08
- Published: Nov. 29, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2004-1016
The scm_send function in the scm layer for Linux kernel 2.4.x up to 2.4.28, and 2.6.x up to 2.6.9, allows local users to cause a denial of service (system hang) via crafted auxiliary messages that are passed to the sendmsg function, which causes a deadloc... Read more
- EPSS Score: %0.32
- Published: Jan. 10, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2006-1343
net/ipv4/netfilter/ip_conntrack_core.c in Linux kernel 2.4 and 2.6, and possibly net/ipv4/netfilter/nf_conntrack_l3proto_ipv4.c in 2.6, does not clear sockaddr_in.sin_zero before returning IPv4 socket names from the getsockopt function with SO_ORIGINAL_DS... Read more
- EPSS Score: %0.10
- Published: Mar. 21, 2006
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2006-1439
NSSecureTextField in AppKit in Apple Mac OS X 10.4.6 does not re-enable secure event input under certain circumstances, which could allow other applications in the window session to monitor input characters and keyboard events.... Read more
Affected Products : mac_os_x- EPSS Score: %0.08
- Published: May. 12, 2006
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2005-2672
pwmconfig in LM_sensors before 2.9.1 creates temporary files insecurely, which allows local users to overwrite arbitrary files via a symlink attack on the fancontrol temporary file.... Read more
Affected Products : lm_sensors- EPSS Score: %0.10
- Published: Aug. 23, 2005
- Modified: Apr. 03, 2025