Latest CVE Feed
-
1.2
LOWCVE-2005-3342
noweb 2.10c and earlier allows local users to overwrite arbitrary files via symlink attacks on temporary files in (1) lib/toascii.nw and (2) shell/roff.mm.... Read more
Affected Products : noweb- EPSS Score: %0.06
- Published: Dec. 31, 2005
- Modified: Apr. 03, 2025
-
1.2
LOWCVE-2009-1707
Race condition in the Reset Safari implementation in Apple Safari before 4.0 on Windows might allow local users to read stored web-site passwords via unspecified vectors.... Read more
Affected Products : safari- EPSS Score: %0.07
- Published: Jun. 10, 2009
- Modified: Apr. 09, 2025
-
1.2
LOWCVE-2001-1276
ispell before 3.1.20 allows local users to overwrite files of other users via a symlink attack on a temporary file.... Read more
Affected Products : ispell- EPSS Score: %0.09
- Published: Jun. 21, 2001
- Modified: Apr. 03, 2025
-
1.2
LOWCVE-2002-0435
Race condition in the recursive (1) directory deletion and (2) directory move in GNU File Utilities (fileutils) 4.1 and earlier allows local users to delete directories as the user running fileutils by moving a low-level directory to a higher level as it ... Read more
- EPSS Score: %0.07
- Published: Jul. 26, 2002
- Modified: Apr. 03, 2025
-
1.2
LOWCVE-2007-0833
VMware Workstation 5.5.3 34685, when the "Enable copy and paste to and from this virtual machine" option is enabled, preserves clipboard data on the guest operating system after it was deleted on the host operating system, which might allow local users to... Read more
Affected Products : workstation- EPSS Score: %0.05
- Published: Feb. 07, 2007
- Modified: Apr. 09, 2025
-
1.2
LOWCVE-2006-3118
spread uses a temporary file with a static filename based on the port number, which allows local users to cause a denial of service by creating the file during a race condition between unlink and bind function calls. NOTE: spread deletes this temporary f... Read more
Affected Products : spread- EPSS Score: %0.06
- Published: Jun. 30, 2006
- Modified: Apr. 03, 2025
-
1.2
LOWCVE-2015-0489
Unspecified vulnerability in the Application Management Pack for Oracle E-Business Suite component in Oracle E-Business Suite AMP 121030 and 121020 allows local users to affect confidentiality via vectors related to EBS Plugin.... Read more
Affected Products : e-business_suite_application_management_pack- EPSS Score: %0.15
- Published: Apr. 16, 2015
- Modified: Apr. 12, 2025
-
1.2
LOWCVE-1999-1042
Cisco Resource Manager (CRM) 1.0 and 1.1 creates world-readable log files and temporary files, which may expose sensitive information, to local users such as user IDs, passwords and SNMP community strings.... Read more
Affected Products : resource_manager- EPSS Score: %0.21
- Published: Dec. 31, 1999
- Modified: Apr. 03, 2025
-
1.2
LOWCVE-2006-0741
Linux kernel before 2.6.15.5, when running on Intel processors, allows local users to cause a denial of service ("endless recursive fault") via unknown attack vectors related to a "bad elf entry address."... Read more
Affected Products : linux_kernel- EPSS Score: %0.09
- Published: Mar. 07, 2006
- Modified: Apr. 03, 2025
-
1.2
LOWCVE-2011-2722
The send_data_to_stdout function in prnt/hpijs/hpcupsfax.cpp in HP Linux Imaging and Printing (HPLIP) 3.x before 3.11.10 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/hpcupsfax.out temporary file.... Read more
Affected Products : linux_imaging_and_printing_project- EPSS Score: %0.03
- Published: May. 25, 2012
- Modified: Apr. 11, 2025
-
1.2
LOWCVE-2003-0120
adb2mhc in the mhc-utils package before 0.25+20010625-7.1 allows local users to overwrite arbitrary files via a symlink attack on a default temporary directory with a predictable name.... Read more
Affected Products : mhc-utils- EPSS Score: %0.18
- Published: Mar. 07, 2003
- Modified: Apr. 03, 2025
-
1.2
LOWCVE-2006-5214
Race condition in the Xsession script, as used by X Display Manager (xdm) in NetBSD before 20060212, X.Org before 20060225, and Solaris 8 through 10 before 20061006, causes a user's Xsession errors file to have weak permissions before a chmod is performed... Read more
- EPSS Score: %0.06
- Published: Oct. 10, 2006
- Modified: Apr. 09, 2025
-
1.2
LOWCVE-2001-0143
vpop3d program in linuxconf 1.23r and earlier allows local users to overwrite arbitrary files via a symlink attack.... Read more
- EPSS Score: %0.07
- Published: Mar. 12, 2001
- Modified: Apr. 03, 2025
-
1.2
LOWCVE-2006-5298
The mutt_adv_mktemp function in the Mutt mail client 1.5.12 and earlier does not properly verify that temporary files have been created with restricted permissions, which might allow local users to create files with weak permissions via a race condition b... Read more
Affected Products : mutt- EPSS Score: %0.06
- Published: Oct. 16, 2006
- Modified: Apr. 09, 2025
-
1.2
LOWCVE-2006-1695
The fbgs script in the fbi package 2.01-1.4, when the TMPDIR environment variable is not defined, allows local users to overwrite arbitrary files via a symlink attack on temporary files in /var/tmp/fbps-[PID].... Read more
Affected Products : fbida- EPSS Score: %0.07
- Published: Apr. 11, 2006
- Modified: Apr. 03, 2025
-
1.2
LOWCVE-2006-0591
The crypt_gensalt functions for BSDI-style extended DES-based and FreeBSD-sytle MD5-based password hashes in crypt_blowfish 0.4.7 and earlier do not evenly and randomly distribute salts, which makes it easier for attackers to guess passwords from a stolen... Read more
Affected Products : crypt_blowfish- EPSS Score: %0.09
- Published: Feb. 08, 2006
- Modified: Apr. 03, 2025
-
1.2
LOWCVE-2002-1508
slapd in OpenLDAP2 (OpenLDAP 2) 2.2.0 and earlier allows local users to overwrite arbitrary files via a race condition during the creation of a log file for rejected replication requests.... Read more
Affected Products : openldap- EPSS Score: %0.03
- Published: Feb. 19, 2003
- Modified: Apr. 03, 2025
-
1.2
LOWCVE-2006-5297
Race condition in the safe_open function in the Mutt mail client 1.5.12 and earlier, when creating temporary files in an NFS filesystem, allows local users to overwrite arbitrary files due to limitations of the use of the O_EXCL flag on NFS filesystems.... Read more
Affected Products : mutt- EPSS Score: %0.08
- Published: Oct. 16, 2006
- Modified: Apr. 09, 2025
-
1.2
LOWCVE-2007-2453
The random number feature in Linux kernel 2.6 before 2.6.20.13, and 2.6.21.x before 2.6.21.4, (1) does not properly seed pools when there is no entropy, or (2) uses an incorrect cast when extracting entropy, which might cause the random number generator t... Read more
Affected Products : linux_kernel- EPSS Score: %0.11
- Published: Jun. 11, 2007
- Modified: Apr. 09, 2025
-
1.2
LOWCVE-2011-1769
SystemTap 1.4 and earlier, when unprivileged (aka stapusr) mode is enabled, allows local users to cause a denial of service (divide-by-zero error and OOPS) via a crafted ELF program with DWARF expressions that are not properly handled by a stap script tha... Read more
Affected Products : systemtap- EPSS Score: %0.07
- Published: Aug. 29, 2011
- Modified: Apr. 11, 2025