Latest CVE Feed
-
1.2
LOWCVE-2006-1824
Multiple cross-site scripting (XSS) vulnerabilities in PhpGuestbook.php in PhpGuestbook 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) Name, (2) Website, and (3) Comment parameter.... Read more
Affected Products : phpguestbook- EPSS Score: %0.16
- Published: Apr. 18, 2006
- Modified: Apr. 03, 2025
-
1.2
LOWCVE-2011-1781
SystemTap 1.4, when unprivileged (aka stapusr) mode is enabled, allows local users to cause a denial of service (divide-by-zero error and OOPS) via a crafted ELF program with DWARF expressions that are not properly handled by a stap script that performs s... Read more
Affected Products : systemtap- EPSS Score: %0.06
- Published: Aug. 29, 2011
- Modified: Apr. 11, 2025
-
1.2
LOWCVE-2005-4761
BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP5 and earlier, and 6.1 SP7 and earlier log the Java command line at server startup, which might include sensitive information (passwords or keyphrases) in the server log file when the -D ... Read more
Affected Products : weblogic_server- EPSS Score: %0.11
- Published: Dec. 31, 2005
- Modified: Apr. 03, 2025
-
1.2
LOWCVE-2005-2666
SSH, as implemented in OpenSSH before 4.0 and possibly other implementations, stores hostnames, IP addresses, and keys in plaintext in the known_hosts file, which makes it easier for an attacker that has compromised an SSH user's account to generate a lis... Read more
Affected Products : openssh- EPSS Score: %0.15
- Published: Aug. 23, 2005
- Modified: Apr. 03, 2025
-
1.2
LOWCVE-2005-1368
The key_user_lookup function in security/keys/key.c in Linux kernel 2.6.10 to 2.6.11.8 may allow attackers to cause a denial of service (oops) via SMP.... Read more
Affected Products : linux_kernel- EPSS Score: %0.07
- Published: May. 02, 2005
- Modified: Apr. 03, 2025
-
1.2
LOWCVE-2006-3551
NCP Secure Enterprise Client (aka VPN/PKI client) 8.30 Build 59, and possibly earlier versions, when the Link Firewall and Personal Firewall are both configured to block all inbound and outbound network traffic, allows context-dependent attackers to send ... Read more
Affected Products : secure_client- EPSS Score: %0.07
- Published: Jul. 13, 2006
- Modified: Apr. 03, 2025
-
1.2
LOWCVE-2007-0832
VMware Workstation 5.5.3 34685 does not immediately change the availability of a shared clipboard when the "Enable copy and paste to and from this virtual machine" checkbox is changed, which allows local users to obtain sensitive information or conduct ce... Read more
Affected Products : workstation- EPSS Score: %0.05
- Published: Feb. 07, 2007
- Modified: Apr. 09, 2025
-
1.2
LOWCVE-2001-0143
vpop3d program in linuxconf 1.23r and earlier allows local users to overwrite arbitrary files via a symlink attack.... Read more
- EPSS Score: %0.07
- Published: Mar. 12, 2001
- Modified: Apr. 03, 2025
-
1.2
LOWCVE-2003-0120
adb2mhc in the mhc-utils package before 0.25+20010625-7.1 allows local users to overwrite arbitrary files via a symlink attack on a default temporary directory with a predictable name.... Read more
Affected Products : mhc-utils- EPSS Score: %0.18
- Published: Mar. 07, 2003
- Modified: Apr. 03, 2025
-
1.2
LOWCVE-2006-5214
Race condition in the Xsession script, as used by X Display Manager (xdm) in NetBSD before 20060212, X.Org before 20060225, and Solaris 8 through 10 before 20061006, causes a user's Xsession errors file to have weak permissions before a chmod is performed... Read more
- EPSS Score: %0.06
- Published: Oct. 10, 2006
- Modified: Apr. 09, 2025
-
1.2
LOWCVE-2014-6134
IBM Rational ClearCase 8.0.0 before 8.0.0.14 and 8.0.1 before 8.0.1.7, when Installation Manager before 1.8.2 is used, retains cleartext server passwords in process memory throughout the installation procedure, which might allow local users to obtain sens... Read more
- EPSS Score: %0.12
- Published: Mar. 25, 2015
- Modified: Apr. 12, 2025
-
1.2
LOWCVE-2016-0431
Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via unknown vectors related to Solaris Kernel Zones, a different vulnerability than CVE-2016-0419.... Read more
Affected Products : solaris- EPSS Score: %0.12
- Published: Jan. 21, 2016
- Modified: Apr. 12, 2025
-
1.2
LOWCVE-2009-1707
Race condition in the Reset Safari implementation in Apple Safari before 4.0 on Windows might allow local users to read stored web-site passwords via unspecified vectors.... Read more
Affected Products : safari- EPSS Score: %0.07
- Published: Jun. 10, 2009
- Modified: Apr. 09, 2025
-
1.2
LOWCVE-2003-0438
eldav WebDAV client for Emacs, version 0.7.2 and earlier, allows local users to create or overwrite arbitrary files via a symlink attack on temporary files.... Read more
Affected Products : eldav- EPSS Score: %0.08
- Published: Jul. 24, 2003
- Modified: Apr. 03, 2025
-
1.2
LOWCVE-2006-1695
The fbgs script in the fbi package 2.01-1.4, when the TMPDIR environment variable is not defined, allows local users to overwrite arbitrary files via a symlink attack on temporary files in /var/tmp/fbps-[PID].... Read more
Affected Products : fbida- EPSS Score: %0.07
- Published: Apr. 11, 2006
- Modified: Apr. 03, 2025
-
1.2
LOWCVE-2006-5298
The mutt_adv_mktemp function in the Mutt mail client 1.5.12 and earlier does not properly verify that temporary files have been created with restricted permissions, which might allow local users to create files with weak permissions via a race condition b... Read more
Affected Products : mutt- EPSS Score: %0.06
- Published: Oct. 16, 2006
- Modified: Apr. 09, 2025
-
1.2
LOWCVE-2007-2453
The random number feature in Linux kernel 2.6 before 2.6.20.13, and 2.6.21.x before 2.6.21.4, (1) does not properly seed pools when there is no entropy, or (2) uses an incorrect cast when extracting entropy, which might cause the random number generator t... Read more
Affected Products : linux_kernel- EPSS Score: %0.11
- Published: Jun. 11, 2007
- Modified: Apr. 09, 2025
-
1.2
LOWCVE-2006-0591
The crypt_gensalt functions for BSDI-style extended DES-based and FreeBSD-sytle MD5-based password hashes in crypt_blowfish 0.4.7 and earlier do not evenly and randomly distribute salts, which makes it easier for attackers to guess passwords from a stolen... Read more
Affected Products : crypt_blowfish- EPSS Score: %0.09
- Published: Feb. 08, 2006
- Modified: Apr. 03, 2025
-
1.2
LOWCVE-2006-5297
Race condition in the safe_open function in the Mutt mail client 1.5.12 and earlier, when creating temporary files in an NFS filesystem, allows local users to overwrite arbitrary files due to limitations of the use of the O_EXCL flag on NFS filesystems.... Read more
Affected Products : mutt- EPSS Score: %0.08
- Published: Oct. 16, 2006
- Modified: Apr. 09, 2025
-
1.2
LOWCVE-2004-0404
logcheck before 1.1.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary directory in /var/tmp.... Read more
Affected Products : logcheck- EPSS Score: %0.07
- Published: Jul. 07, 2004
- Modified: Apr. 03, 2025