Latest CVE Feed
-
1.7
LOWCVE-2008-2619
Unspecified vulnerability in the Oracle Reports Developer component in Oracle Application Server 1.0.2.2, 9.0.4.3, and 10.1.2.2, and E-Business Suite 11.5.10.2, allows remote authenticated users to affect availability via unknown vectors.... Read more
- EPSS Score: %0.36
- Published: Oct. 14, 2008
- Modified: Apr. 09, 2025
-
1.7
LOWCVE-2025-30218
Next.js is a React framework for building full-stack web applications. To mitigate CVE-2025-29927, Next.js validated the x-middleware-subrequest-id which persisted across multiple incoming requests. However, this subrequest ID is sent to all requests, eve... Read more
Affected Products : next.js- Published: Apr. 02, 2025
- Modified: Apr. 07, 2025
- Vuln Type: Misconfiguration
-
1.7
LOWCVE-2011-2312
Unspecified vulnerability in Oracle Solaris 10 allows local users to affect confidentiality, related to ZFS.... Read more
Affected Products : solaris- EPSS Score: %0.15
- Published: Oct. 18, 2011
- Modified: Apr. 11, 2025
-
1.7
LOWCVE-2006-6286
Palm Desktop 4.1.4 and earlier stores user data with weak permissions under the application directory, which allows local users to obtain sensitive information (address books, calendar files, and todo lists of other users) via unspecified vectors. NOTE: ... Read more
Affected Products : palm_desktop- EPSS Score: %0.05
- Published: Dec. 04, 2006
- Modified: Apr. 09, 2025
-
1.7
LOWCVE-2012-0494
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.x allows local users to affect availability via unknown vectors.... Read more
Affected Products : mysql- EPSS Score: %0.06
- Published: Jan. 18, 2012
- Modified: Apr. 11, 2025
-
1.7
LOWCVE-2008-1754
Symantec Altiris Deployment Solution before 6.9.164 stores the Deployment Solution Agent (aka AClient) password in cleartext in memory, which allows local users to obtain sensitive information by dumping the AClient.exe process memory.... Read more
Affected Products : altiris_deployment_solution- EPSS Score: %0.08
- Published: Apr. 11, 2008
- Modified: Apr. 09, 2025
-
1.7
LOWCVE-2010-3406
Unspecified vulnerability in sa_snap in the bos.esagent fileset in IBM AIX 5.3 allows local users to leverage system group membership and delete files via unknown vectors.... Read more
Affected Products : aix- EPSS Score: %0.06
- Published: Sep. 16, 2010
- Modified: Apr. 11, 2025
-
1.7
LOWCVE-2005-2993
Unspecified vulnerability in the FTP Daemon (ftpd) for HP Tru64 UNIX 4.0F PK8 and other versions up to HP Tru64 UNIX 5.1B-3, and HP-UX B.11.00, B.11.04, B.11.11, and B.11.23, allows remote authenticated users to cause a denial of service (hang).... Read more
- EPSS Score: %0.18
- Published: Sep. 20, 2005
- Modified: Apr. 03, 2025
-
1.7
LOWCVE-2013-5885
Unspecified vulnerability in Oracle Solaris 11.1 allows local users to affect integrity via unknown vectors related to Audit.... Read more
- EPSS Score: %0.12
- Published: Jan. 15, 2014
- Modified: Apr. 11, 2025
-
1.7
LOWCVE-2006-6510
An unspecified ActiveX control in SiteKiosk before 6.5.150 is installed "safe for scripting", which allows local users to bypass security protections and read arbitrary files via certain functions.... Read more
Affected Products : sitekiosk- EPSS Score: %0.08
- Published: Dec. 14, 2006
- Modified: Apr. 09, 2025
-
1.7
LOWCVE-2006-0386
FileVault in Mac OS X 10.4.5 and earlier does not properly mount user directories when creating a FileVault image, which allows local users to access protected files when FileVault is enabled.... Read more
- EPSS Score: %0.07
- Published: Mar. 03, 2006
- Modified: Apr. 03, 2025
-
1.7
LOWCVE-2006-5749
The isdn_ppp_ccp_reset_alloc_state function in drivers/isdn/isdn_ppp.c in the Linux 2.4 kernel before 2.4.34-rc4 does not call the init_timer function for the ISDN PPP CCP reset state timer, which has unknown attack vectors and results in a system crash.... Read more
Affected Products : linux_kernel- EPSS Score: %0.08
- Published: Dec. 31, 2006
- Modified: Apr. 09, 2025
-
1.7
LOWCVE-2006-0554
Linux kernel 2.6 before 2.6.15.5 allows local users to obtain sensitive information via a crafted XFS ftruncate call, which may return stale data.... Read more
Affected Products : linux_kernel- EPSS Score: %0.11
- Published: Mar. 07, 2006
- Modified: Apr. 03, 2025
-
1.7
LOWCVE-2015-4767
Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Security : Firewall, a different vulnerability than CVE-2015-4769.... Read more
- EPSS Score: %0.82
- Published: Jul. 16, 2015
- Modified: Apr. 12, 2025
-
1.7
LOWCVE-2007-3700
Sun Java System Access Manager (formerly Java System Identity Server) before 20070710, when the message debug level is configured in the com.iplanet.services.debug.level property in AMConfig.properties, logs cleartext login passwords, which allows local u... Read more
Affected Products : java_system_access_manager- EPSS Score: %0.06
- Published: Jul. 11, 2007
- Modified: Apr. 09, 2025
-
1.7
LOWCVE-2015-4792
Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Partition, a different vulnerability than CVE-2015-4802.... Read more
Affected Products : ubuntu_linux fedora debian_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation leap enterprise_linux_server_aus enterprise_linux_server_tus mysql +5 more products- EPSS Score: %1.02
- Published: Oct. 21, 2015
- Modified: Apr. 12, 2025
-
1.7
LOWCVE-2025-43866
vantage6 is an open-source infrastructure for privacy preserving analysis. The JWT secret key in the vantage6 server is auto-generated unless defined by the user. The auto-generated key is a UUID1, which is not cryptographically secure as it is predictabl... Read more
Affected Products : vantage6- Published: Jun. 12, 2025
- Modified: Jun. 16, 2025
- Vuln Type: Cryptography
-
1.7
LOWCVE-2025-49824
conda-smithy is a tool for combining a conda recipe with configurations to build using freely hosted CI services into a single repository. Prior to version 3.47.1, the travis_encrypt_binstar_token implementation in the conda-smithy package has been identi... Read more
Affected Products :- Published: Jun. 17, 2025
- Modified: Jun. 18, 2025
- Vuln Type: Cryptography
-
1.7
LOWCVE-2011-2291
Unspecified vulnerability in Oracle Solaris 10 allows local users to affect confidentiality via unknown vectors related to Trusted Extensions.... Read more
- EPSS Score: %0.06
- Published: Jul. 21, 2011
- Modified: Apr. 11, 2025
-
1.7
LOWCVE-2008-0996
The Printing component in Apple Mac OS X 10.5.2 might save authentication credentials to disk when starting a job on an authenticated print queue, which might allow local users to obtain the credentials.... Read more
- EPSS Score: %0.06
- Published: Mar. 18, 2008
- Modified: Apr. 09, 2025