Latest CVE Feed
-
2.1
LOWCVE-2006-3123
Multiple integer overflows in the (1) dodecrypt and (2) doencrypt functions in cfs_fh.c in cfsd in Matt Blaze Cryptographic File System (CFS) 1.4.1 before Debian GNU/Linux package 1.4.1-17 allow local users to cause a denial of service (daemon crash) by a... Read more
Affected Products : cryptographic_file_system- EPSS Score: %0.06
- Published: Aug. 07, 2006
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2005-1265
The mmap function in the Linux Kernel 2.6.10 can be used to create memory maps with a start address beyond the end address, which allows local users to cause a denial of service (kernel crash).... Read more
- EPSS Score: %0.06
- Published: Jun. 16, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2005-2800
Memory leak in the seq_file implementation in the SCSI procfs interface (sg.c) in Linux kernel 2.6.13 and earlier allows local users to cause a denial of service (memory consumption) via certain repeated reads from the /proc/scsi/sg/devices file, which is... Read more
- EPSS Score: %0.16
- Published: Sep. 06, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2013-1069
Ubuntu Metal as a Service (MaaS) 1.2 and 1.4 uses world-readable permissions for txlongpoll.yaml, which allows local users to obtain RabbitMQ authentication credentials by reading the file.... Read more
- EPSS Score: %0.05
- Published: Feb. 17, 2014
- Modified: Apr. 11, 2025
-
2.1
LOWCVE-2004-0211
The kernel for Microsoft Windows Server 2003 does not reset certain values in CPU data structures, which allows local users to cause a denial of service (system crash) via a malicious program.... Read more
- EPSS Score: %1.38
- Published: Nov. 03, 2004
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2005-2962
The post-installation script for ntlmaps before 0.9.9 sets world-readable permissions for the configuration file, which allows local users to obtain the username and password.... Read more
Affected Products : ntlmaps- EPSS Score: %0.05
- Published: Sep. 30, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2005-2973
The udp_v6_get_port function in udp.c in Linux 2.6 before 2.6.14-rc5, when running IPv6, allows local users to cause a denial of service (infinite loop and crash).... Read more
Affected Products : linux_kernel- EPSS Score: %0.29
- Published: Oct. 27, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2007-3099
usr/mgmt_ipc.c in iscsid in open-iscsi (iscsi-initiator-utils) before 2.0-865 checks the client's UID on the listening AF_LOCAL socket instead of the new connection, which allows remote attackers to access the management interface and cause a denial of se... Read more
Affected Products : enterprise_linux- EPSS Score: %0.22
- Published: Jun. 14, 2007
- Modified: Apr. 09, 2025
-
2.1
LOWCVE-2004-0233
Utempter allows device names that contain .. (dot dot) directory traversal sequences, which allows local users to overwrite arbitrary files via a symlink attack on device names in combination with an application that trusts the utmp or wtmp files.... Read more
- EPSS Score: %0.21
- Published: Aug. 18, 2004
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2010-2226
The xfs_swapext function in fs/xfs/xfs_dfrag.c in the Linux kernel before 2.6.35 does not properly check the file descriptors passed to the SWAPEXT ioctl, which allows local users to leverage write access and obtain read access by swapping one file into a... Read more
- EPSS Score: %0.08
- Published: Sep. 03, 2010
- Modified: Apr. 11, 2025
-
2.1
LOWCVE-2005-2992
arc 5.21j and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files, a different type of vulnerability than CVE-2005-2945.... Read more
Affected Products : arc- EPSS Score: %0.07
- Published: Oct. 13, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2004-0706
Bugzilla 2.17.5 through 2.17.7 embeds the password in an image URL, which could allow local users to view the password in the web server log files.... Read more
Affected Products : bugzilla- EPSS Score: %0.07
- Published: Jul. 27, 2004
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2004-1438
The mod_authz_svn Apache module for Subversion 1.0.4-r1 and earlier allows remote authenticated users, with write access to the repository, to read unauthorized parts of the repository via the svn copy command.... Read more
Affected Products : subversion- EPSS Score: %0.25
- Published: Dec. 31, 2004
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2008-3272
The snd_seq_oss_synth_make_info function in sound/core/seq/oss/seq_oss_synth.c in the sound subsystem in the Linux kernel before 2.6.27-rc2 does not verify that the device number is within the range defined by max_synthdev before returning certain data to... Read more
- EPSS Score: %0.06
- Published: Aug. 08, 2008
- Modified: Apr. 09, 2025
-
2.1
LOWCVE-2005-3053
The sys_set_mempolicy function in mempolicy.c in Linux kernel 2.6.x allows local users to cause a denial of service (kernel BUG()) via a negative first argument.... Read more
- EPSS Score: %0.10
- Published: Sep. 26, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2010-0791
The (1) ncpmount, (2) ncpumount, and (3) ncplogin programs in ncpfs 2.2.6 do not properly create lock files, which allows local users to cause a denial of service (application failure) via unspecified vectors that trigger the creation of a /etc/mtab~ file... Read more
Affected Products : ncpfs- EPSS Score: %0.06
- Published: Mar. 10, 2010
- Modified: Apr. 11, 2025
-
2.1
LOWCVE-2006-1863
Directory traversal vulnerability in CIFS in Linux 2.6.16 and earlier allows local users to escape chroot restrictions for an SMB-mounted filesystem via "..\\" sequences, a similar vulnerability to CVE-2006-1864.... Read more
Affected Products : linux_kernel- EPSS Score: %0.19
- Published: Apr. 25, 2006
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2013-5371
The client in IBM Tivoli Storage Manager (TSM) 6.3.1 and 6.4.0 on Windows does not preserve permissions of Resilient File System (ReFS) files across backup and restore operations, which allows local users to bypass intended access restrictions via standar... Read more
Affected Products : tivoli_storage_manager- EPSS Score: %0.04
- Published: Jan. 23, 2014
- Modified: Apr. 11, 2025
-
2.1
LOWCVE-2007-6039
PHP 5.2.5 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a long string in (1) the domain parameter to the dgettext function, the message parameter to the (2) dcgettext or (3) gettext function, the msgid... Read more
Affected Products : php- EPSS Score: %0.71
- Published: Nov. 20, 2007
- Modified: Apr. 09, 2025
-
2.1
LOWCVE-2007-4571
The snd_mem_proc_read function in sound/core/memalloc.c in the Advanced Linux Sound Architecture (ALSA) in the Linux kernel before 2.6.22.8 does not return the correct write size, which allows local users to obtain sensitive information (kernel memory con... Read more
Affected Products : linux_kernel- EPSS Score: %0.13
- Published: Sep. 26, 2007
- Modified: Apr. 09, 2025