Latest CVE Feed
-
1.9
LOWCVE-2015-3785
The Telephony component in Apple OS X before 10.11, when the Continuity feature is enabled, allows local users to bypass intended telephone-call restrictions via unspecified vectors.... Read more
- EPSS Score: %0.09
- Published: Oct. 09, 2015
- Modified: Apr. 12, 2025
-
1.9
LOWCVE-2014-0058
The security audit functionality in Red Hat JBoss Enterprise Application Platform (EAP) 6.x before 6.2.1 logs request parameters in plaintext, which might allow local users to obtain passwords by reading the log files.... Read more
Affected Products : jboss_enterprise_application_platform- EPSS Score: %0.06
- Published: Feb. 26, 2014
- Modified: Apr. 12, 2025
-
1.9
LOWCVE-2013-7336
The qemuMigrationWaitForSpice function in qemu/qemu_migration.c in libvirt before 1.1.3 does not properly enter a monitor when performing seamless SPICE migration, which allows local users to cause a denial of service (NULL pointer dereference and libvirt... Read more
- EPSS Score: %0.07
- Published: May. 07, 2014
- Modified: Apr. 12, 2025
-
1.9
LOWCVE-2015-2580
Unspecified vulnerability in Oracle Sun Solaris 10 and 11.2 allows local users to affect availability via vectors related to NFSv4.... Read more
Affected Products : solaris- EPSS Score: %0.22
- Published: Jul. 16, 2015
- Modified: Apr. 12, 2025
-
1.9
LOWCVE-2024-42155
In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Wipe copies of protected- and secure-keys Although the clear-key of neither protected- nor secure-keys is accessible, this key material should only be visible to the calling ... Read more
Affected Products : linux_kernel- Published: Jul. 30, 2024
- Modified: Nov. 21, 2024
-
1.9
LOWCVE-2015-2534
Hyper-V in Microsoft Windows 8.1, Windows Server 2012 R2, and Windows 10 improperly processes ACL settings, which allows local users to bypass intended network-traffic restrictions via a crafted application, aka "Hyper-V Security Feature Bypass Vulnerabil... Read more
- EPSS Score: %0.60
- Published: Sep. 09, 2015
- Modified: Apr. 12, 2025
-
1.9
LOWCVE-2015-1097
IOMobileFramebuffer in Apple iOS before 8.3 and Apple TV before 7.2 allows attackers to obtain sensitive information about kernel memory via a crafted app.... Read more
- EPSS Score: %0.07
- Published: Apr. 10, 2015
- Modified: Apr. 12, 2025
-
1.9
LOWCVE-2014-2893
The GetHTMLRunDir function in the scan-build utility in Clang 3.5 and earlier allows local users to obtain sensitive information or overwrite arbitrary files via a symlink attack on temporary directories with predictable names.... Read more
- EPSS Score: %0.08
- Published: Apr. 23, 2014
- Modified: Apr. 12, 2025
-
1.9
LOWCVE-2009-3746
XScreenSaver in Sun Solaris 10, when the accessibility feature is enabled, allows physically proximate attackers to obtain sensitive information by reading popup windows, which are displayed even when the screen is locked, a different vulnerability than C... Read more
Affected Products : solaris- EPSS Score: %0.06
- Published: Oct. 22, 2009
- Modified: Apr. 09, 2025
-
1.9
LOWCVE-2011-1098
Race condition in the createOutputFile function in logrotate.c in logrotate 3.7.9 and earlier allows local users to read log data by opening a file before the intended permissions are in place.... Read more
Affected Products : logrotate- EPSS Score: %0.04
- Published: Mar. 30, 2011
- Modified: Apr. 11, 2025
-
1.9
LOWCVE-2012-1568
The ExecShield feature in a certain Red Hat patch for the Linux kernel in Red Hat Enterprise Linux (RHEL) 5 and 6 and Fedora 15 and 16 does not properly handle use of many shared libraries by a 32-bit executable file, which makes it easier for context-dep... Read more
- EPSS Score: %0.05
- Published: Mar. 01, 2013
- Modified: Apr. 11, 2025
-
1.9
LOWCVE-2010-1160
GNU nano before 2.2.4 does not verify whether a file has been changed before it is overwritten in a file-save operation, which allows local user-assisted attackers to overwrite arbitrary files via a symlink attack on an attacker-owned file that is being e... Read more
Affected Products : nano- EPSS Score: %0.08
- Published: Apr. 16, 2010
- Modified: Apr. 11, 2025
-
1.9
LOWCVE-2012-2934
Xen 4.0, and 4.1, when running a 64-bit PV guest on "older" AMD CPUs, does not properly protect against a certain AMD processor bug, which allows local guest OS users to cause a denial of service (host hang) via sequential execution of instructions across... Read more
Affected Products : xen- EPSS Score: %0.16
- Published: Dec. 03, 2012
- Modified: Apr. 11, 2025
-
1.9
LOWCVE-2011-0523
gypsy 0.8 does not properly restrict the files that can be read while running with root privileges, which allows local users to read otherwise restricted files via unspecified vectors.... Read more
Affected Products : gypsy- EPSS Score: %0.06
- Published: Aug. 13, 2012
- Modified: Apr. 11, 2025
-
1.9
LOWCVE-2010-0106
The on-demand scanning in Symantec AntiVirus 10.0.x and 10.1.x before MR9, AntiVirus 10.2.x, and Client Security 3.0.x and 3.1.x before MR9, when Tamper protection is disabled, allows remote attackers to cause a denial of service (prevention of on-demand ... Read more
- EPSS Score: %0.30
- Published: Feb. 19, 2010
- Modified: Apr. 11, 2025
-
1.9
LOWCVE-2008-3230
The ffmpeg lavf demuxer allows user-assisted attackers to cause a denial of service (application crash) via a crafted GIF file, possibly related to gstreamer, as demonstrated by lol-giftopnm.gif.... Read more
Affected Products : lavf_demuxer- EPSS Score: %0.12
- Published: Jul. 18, 2008
- Modified: Apr. 09, 2025
-
1.9
LOWCVE-2007-0120
Acunetix Web Vulnerability Scanner (WVS) 4.0 Build 20060717 and earlier allows remote attackers to cause a denial of service (application crash) via multiple HTTP requests containing invalid Content-Length values.... Read more
Affected Products : web_vulnerability_scanner- EPSS Score: %0.58
- Published: Jan. 09, 2007
- Modified: Apr. 09, 2025
-
1.9
LOWCVE-2007-4751
RemoteDocs R-Viewer before 1.6.3768 stores encrypted RDZ file data in unencrypted temporary files, which allows local users to obtain sensitive information by reading the temporary files.... Read more
Affected Products : remotedocs_r-viewer- EPSS Score: %0.07
- Published: Sep. 18, 2007
- Modified: Apr. 09, 2025
-
1.9
LOWCVE-2009-2490
Unspecified vulnerability in the utaudiod daemon in Sun Ray Server Software (SRSS) 4.0, when Solaris Trusted Extensions is enabled, allows local users to cause a denial of service (audio outage) or possibly gain privileges via unknown vectors related to "... Read more
Affected Products : ray_server_software- EPSS Score: %0.06
- Published: Jul. 16, 2009
- Modified: Apr. 09, 2025
-
1.9
LOWCVE-2009-0142
Race condition in AFP Server in Apple Mac OS X 10.5.6 allows local users to cause a denial of service (infinite loop) via unspecified vectors related to "file enumeration logic."... Read more
- EPSS Score: %0.06
- Published: Feb. 12, 2009
- Modified: Apr. 09, 2025