Latest CVE Feed
-
1.5
LOWCVE-2011-1373
Unspecified vulnerability in IBM DB2 9.7 before FP5 on UNIX, when the Self Tuning Memory Manager (STMM) feature and the AUTOMATIC DATABASE_MEMORY setting are configured, allows local users to cause a denial of service (daemon crash) via unknown vectors.... Read more
Affected Products : db2- EPSS Score: %0.06
- Published: Nov. 09, 2011
- Modified: Apr. 11, 2025
-
1.5
LOWCVE-2015-4809
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows local users to affect availability via vectors related to Outside In PDF Export SDK, a different vulnerability than CVE-2015... Read more
Affected Products : fusion_middleware- EPSS Score: %0.09
- Published: Oct. 21, 2015
- Modified: Apr. 12, 2025
-
1.5
LOWCVE-2013-5763
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Maintenance. NOTE: the original disclosure of th... Read more
Affected Products : fusion_middleware- EPSS Score: %0.16
- Published: Dec. 12, 2013
- Modified: Apr. 11, 2025
-
1.5
LOWCVE-2015-0493
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.1, 8.5.0, and 8.5.1 allows local users to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-201... Read more
Affected Products : fusion_middleware- EPSS Score: %0.54
- Published: Apr. 16, 2015
- Modified: Apr. 12, 2025
-
1.5
LOWCVE-2013-4355
Xen 4.3.x and earlier does not properly handle certain errors, which allows local HVM guests to obtain hypervisor stack memory via a (1) port or (2) memory mapped I/O write or (3) other unspecified operations related to addresses without associated memory... Read more
Affected Products : xen- EPSS Score: %0.09
- Published: Oct. 01, 2013
- Modified: Apr. 11, 2025
-
1.5
LOWCVE-2013-1502
Unspecified vulnerability in Oracle MySQL 5.5.30 and earlier and 5.6.9 and earlier allows local users to affect availability via unknown vectors related to Server Partition.... Read more
- EPSS Score: %0.15
- Published: Apr. 17, 2013
- Modified: Apr. 11, 2025
-
1.5
LOWCVE-2006-0678
PostgreSQL 7.3.x before 7.3.14, 7.4.x before 7.4.12, 8.0.x before 8.0.7, and 8.1.x before 8.1.3, when compiled with Asserts enabled, allows local users to cause a denial of service (server crash) via a crafted SET SESSION AUTHORIZATION command, a differen... Read more
Affected Products : postgresql- EPSS Score: %0.07
- Published: Feb. 14, 2006
- Modified: Apr. 03, 2025
-
1.5
LOWCVE-2007-4179
Unspecified vulnerability in the Address and Routing Parameter Area (ARPA) transport functionality in HP-UX B.11.11 and B.11.23 allows local users to cause an unspecified denial of service via unknown vectors. NOTE: this is probably different from CVE-20... Read more
- EPSS Score: %0.05
- Published: Aug. 08, 2007
- Modified: Apr. 09, 2025
-
1.5
LOWCVE-2009-2094
Unspecified vulnerability in IBM WebSphere Commerce 6.0 Enterprise before 6.0.0.8, when trace is enabled, allows local users to obtain sensitive information via unknown vectors.... Read more
Affected Products : websphere_commerce- EPSS Score: %0.05
- Published: Aug. 13, 2009
- Modified: Apr. 09, 2025
-
1.5
LOWCVE-2008-2587
Unspecified vulnerability in the Advanced Replication component in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 has unknown impact and local attack vectors.... Read more
- EPSS Score: %0.16
- Published: Jul. 15, 2008
- Modified: Apr. 09, 2025
-
1.5
LOWCVE-2013-4829
HP LaserJet M4555, M525, and M725; LaserJet flow MFP M525c; LaserJet Enterprise color flow MFP M575c; Color LaserJet CM4540, M575, and M775; and ScanJet Enterprise 8500fn1 FutureSmart devices allow local users to read images of arbitrary scanned documents... Read more
- EPSS Score: %0.06
- Published: Oct. 04, 2013
- Modified: Apr. 11, 2025
-
1.5
LOWCVE-2009-2752
IBM WebSphere Commerce 7.0 does not properly encrypt data in a database, which makes it easier for local users to obtain sensitive information by defeating cryptographic protection mechanisms.... Read more
Affected Products : websphere_commerce- EPSS Score: %0.06
- Published: Feb. 05, 2010
- Modified: Apr. 11, 2025
-
1.5
LOWCVE-2015-4878
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows local users to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-201... Read more
Affected Products : fusion_middleware- EPSS Score: %0.27
- Published: Oct. 21, 2015
- Modified: Apr. 12, 2025
-
1.4
LOWCVE-2016-0618
Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect confidentiality via unknown vectors related to Zones.... Read more
Affected Products : solaris- EPSS Score: %0.08
- Published: Jan. 21, 2016
- Modified: Apr. 12, 2025
-
1.4
LOWCVE-2014-2485
Unspecified vulnerability in the Siebel Core - EAI component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows local users to affect confidentiality via unknown vectors related to Integration Business Services.... Read more
Affected Products : siebel_crm- EPSS Score: %0.18
- Published: Jul. 17, 2014
- Modified: Apr. 12, 2025
-
1.3
LOWCVE-2015-5464
The Gemalto SafeNet Luna HSM allows remote authenticated users to bypass intended key-export restrictions by leveraging (1) crypto-user or (2) crypto-officer access to an HSM partition.... Read more
- EPSS Score: %0.06
- Published: Jul. 22, 2015
- Modified: Apr. 12, 2025
-
1.3
LOWCVE-2011-2242
Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.2.0.1 and 11.2.0.2 allows local users to affect confidentiality, related to XML DB FTP.... Read more
Affected Products : database_server- EPSS Score: %0.30
- Published: Jul. 20, 2011
- Modified: Apr. 11, 2025
-
1.3
LOWCVE-2025-46826
insa-auth is an authentication server for INSA Rouen. A minor issue allowed third-party websites to access the server's secondary authentication bridge, potentially revealing basic student information (name and number). However, the issue posed minimal ri... Read more
Affected Products :- Published: May. 07, 2025
- Modified: May. 08, 2025
- Vuln Type: Information Disclosure
-
1.3
LOWCVE-2025-53904
The Scratch Channel is a news website that is under development as of time of this writing. The file `/api/admin.js` contains code that could make the website vulnerable to cross-site scripting. No known patches exist as of time of publication.... Read more
Affected Products :- Published: Jul. 16, 2025
- Modified: Jul. 17, 2025
- Vuln Type: Cross-Site Scripting
-
1.3
LOWCVE-2025-53903
The Scratch Channel is a news website that is under development as of time of this writing. The file `/api/users.js` doesn't properly sanitize text box inputs, leading to a potential vulnerability to cross-site scripting attacks. Commit 90b39eb56b27b2bac2... Read more
Affected Products :- Published: Jul. 15, 2025
- Modified: Jul. 15, 2025
- Vuln Type: Cross-Site Scripting