Latest CVE Feed
-
2.1
LOWCVE-2015-7872
The key_gc_unused_keys function in security/keys/gc.c in the Linux kernel through 4.2.6 allows local users to cause a denial of service (OOPS) via crafted keyctl commands.... Read more
Affected Products : linux_kernel- EPSS Score: %0.06
- Published: Nov. 16, 2015
- Modified: Apr. 12, 2025
-
2.1
LOWCVE-2014-3638
The bus_connections_check_reply function in config-parser.c in D-Bus before 1.6.24 and 1.8.x before 1.8.8 allows local users to cause a denial of service (CPU consumption) via a large number of method calls.... Read more
- EPSS Score: %0.10
- Published: Sep. 22, 2014
- Modified: Apr. 12, 2025
-
2.1
LOWCVE-2007-6207
Xen 3.x, possibly before 3.1.2, when running on IA64 systems, does not check the RID value for mov_to_rr, which allows a VTi domain to read memory of other domains.... Read more
Affected Products : xen- EPSS Score: %0.09
- Published: Dec. 04, 2007
- Modified: Apr. 09, 2025
-
2.1
LOWCVE-2007-6206
The do_coredump function in fs/exec.c in Linux kernel 2.4.x and 2.6.x up to 2.6.24-rc3, and possibly other versions, does not change the UID of a core dump file if it exists before a root process creates a core dump in the same location, which might allow... Read more
- EPSS Score: %0.08
- Published: Dec. 04, 2007
- Modified: Apr. 09, 2025
-
2.1
LOWCVE-2007-2448
Subversion 1.4.3 and earlier does not properly implement the "partial access" privilege for users who have access to changed paths but not copied paths, which allows remote authenticated users to obtain sensitive information (revision properties) via svn ... Read more
- EPSS Score: %0.25
- Published: Jun. 14, 2007
- Modified: Apr. 09, 2025
-
2.1
LOWCVE-2004-2607
A numeric casting discrepancy in sdla_xfer in Linux kernel 2.6.x up to 2.6.5 and 2.4 up to 2.4.29-rc1 allows local users to read portions of kernel memory via a large len argument, which is received as an int but cast to a short, which prevents a read loo... Read more
Affected Products : linux_kernel- EPSS Score: %0.06
- Published: Dec. 31, 2004
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2007-0010
The GdkPixbufLoader function in GIMP ToolKit (GTK+) in GTK 2 (gtk2) before 2.4.13 allows context-dependent attackers to cause a denial of service (crash) via a malformed image file.... Read more
Affected Products : gtk- EPSS Score: %0.87
- Published: Jan. 24, 2007
- Modified: Apr. 09, 2025
-
2.1
LOWCVE-2014-4702
The check_icmp plugin in Nagios Plugins before 2.0.2 allows local users to obtain sensitive information from INI configuration files via the extra-opts flag, a different vulnerability than CVE-2014-4701.... Read more
Affected Products : nagios- EPSS Score: %0.11
- Published: Dec. 05, 2014
- Modified: Apr. 12, 2025
-
2.1
LOWCVE-2006-5173
Linux kernel does not properly save or restore EFLAGS during a context switch, or reset the flags when creating new threads, which allows local users to cause a denial of service (process crash), as demonstrated using a process that sets the Alignment Che... Read more
- EPSS Score: %0.06
- Published: Oct. 17, 2006
- Modified: Apr. 09, 2025
-
2.1
LOWCVE-2005-1841
The control for Adobe Reader 5.0.9 and 5.0.10 on Linux, Solaris, HP-UX, and AIX creates temporary files with the permissions as specified in a user's umask, which could allow local users to read PDF documents of that user if the umask allows it.... Read more
Affected Products : acrobat_reader- EPSS Score: %0.10
- Published: Jul. 07, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2005-1764
Linux 2.6.11 on 64-bit x86 (x86_64) platforms does not use a guard page for the 47-bit address page to protect against an AMD K8 bug, which allows local users to cause a denial of service.... Read more
Affected Products : linux_kernel- EPSS Score: %0.06
- Published: Oct. 07, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2005-1856
The CD-burning feature in backup-manager 0.5.8 and earlier uses a fixed filename in a world-writable directory for logging, which allows local users to overwrite files via a symlink attack.... Read more
Affected Products : backup_manager- EPSS Score: %0.08
- Published: Aug. 30, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2014-6501
Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect confidentiality via vectors related to SSH.... Read more
- EPSS Score: %0.06
- Published: Oct. 15, 2014
- Modified: Apr. 12, 2025
-
2.1
LOWCVE-2014-9731
The UDF filesystem implementation in the Linux kernel before 3.18.2 does not ensure that space is available for storing a symlink target's name along with a trailing \0 character, which allows local users to obtain sensitive information via a crafted file... Read more
Affected Products : linux_kernel- EPSS Score: %0.06
- Published: Aug. 31, 2015
- Modified: Apr. 12, 2025
-
2.1
LOWCVE-2012-4833
fuser in IBM AIX 6.1 and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, does not properly restrict the -k option, which allows local users to kill arbitrary processes via a crafted command line.... Read more
- EPSS Score: %0.05
- Published: Oct. 01, 2012
- Modified: Apr. 11, 2025
-
2.1
LOWCVE-2012-5530
The (1) pcmd and (2) pmlogger init scripts in Performance Co-Pilot (PCP) before 3.6.10 allow local users to overwrite arbitrary files via a symlink attack on a /var/tmp/##### temporary file.... Read more
Affected Products : performance_co-pilot- EPSS Score: %0.14
- Published: Nov. 29, 2012
- Modified: Apr. 11, 2025
-
2.1
LOWCVE-2012-3478
rssh 2.3.3 and earlier allows local users to bypass intended restricted shell access via crafted environment variables in the command line.... Read more
Affected Products : rssh- EPSS Score: %0.06
- Published: Aug. 31, 2012
- Modified: Apr. 11, 2025
-
2.1
LOWCVE-2015-6252
The vhost_dev_ioctl function in drivers/vhost/vhost.c in the Linux kernel before 4.1.5 allows local users to cause a denial of service (memory consumption) via a VHOST_SET_LOG_FD ioctl call that triggers permanent file-descriptor allocation.... Read more
Affected Products : linux_kernel- EPSS Score: %0.09
- Published: Oct. 19, 2015
- Modified: Apr. 12, 2025
-
2.1
LOWCVE-2010-0883
Unspecified vulnerability in the Sun Cluster component in Oracle Sun Product Suite 3.1 and 3.2 allows local users to affect confidentiality via unknown vectors related to Data Service for Oracle E-Business Suite, a different vulnerability than CVE-2010-08... Read more
Affected Products : sun_products_suite- EPSS Score: %0.25
- Published: Apr. 13, 2010
- Modified: Apr. 11, 2025
-
2.1
LOWCVE-2015-3291
arch/x86/entry/entry_64.S in the Linux kernel before 4.1.6 on the x86_64 platform does not properly determine when nested NMI processing is occurring, which allows local users to cause a denial of service (skipped NMI) by modifying the rsp register, issui... Read more
Affected Products : linux_kernel- EPSS Score: %0.06
- Published: Aug. 31, 2015
- Modified: Apr. 12, 2025