Search
17,826 CVEs · Low severity
CVEs (17,826, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 76–100 of 17,826 (capped at 500)
| CVE ID | Severity | Patch | CVSS ↑ | Published | Description |
|---|---|---|---|---|---|
| CVE-2008-3259 | LOW | Patched | 1.2 | 2008-07-22 | OpenSSH before 5.1 sets the SO_REUSEADDR socket option when the X11UseLocalhost configuration setting is disabled, which allows local users on some platforms to hijack the … |
| CVE-2007-3108 | LOW | Patched | 1.2 | 2007-08-08 | The BN_from_montgomery function in crypto/bn/bn_mont.c in OpenSSL 0.9.8e and earlier does not properly perform Montgomery multiplication, which might allow local users to c… |
| CVE-2007-2453 | LOW | Patched | 1.2 | 2007-06-11 | The random number feature in Linux kernel 2.6 before 2.6.20.13, and 2.6.21.x before 2.6.21.4, (1) does not properly seed pools when there is no entropy, or (2) uses an inco… |
| CVE-2007-0832 | LOW | 1.2 | 2007-02-07 | VMware Workstation 5.5.3 34685 does not immediately change the availability of a shared clipboard when the "Enable copy and paste to and from this virtual machine" checkbox… | |
| CVE-2007-0833 | LOW | 1.2 | 2007-02-07 | VMware Workstation 5.5.3 34685, when the "Enable copy and paste to and from this virtual machine" option is enabled, preserves clipboard data on the guest operating system … | |
| CVE-2006-1167 | LOW | 1.2 | 2007-02-06 | SGI ProPack 3 SP6 kernel displays the frame buffer contents of the last session after a reboot, which might allow local users to obtain sensitive information. | |
| CVE-2006-6306 | LOW | 1.2 | 2006-12-05 | Format string vulnerability in Novell Modular Authentication Services (NMAS) in the Novell Client 4.91 SP2 and SP3 allows users with physical access to read stack and memor… | |
| CVE-2006-5757 | LOW | 1.2 | 2006-11-06 | Race condition in the __find_get_block_slow function in the ISO9660 filesystem in Linux 2.6.18 and possibly other versions allows local users to cause a denial of service (… | |
| CVE-2006-5297 | LOW | Patched | 1.2 | 2006-10-16 | Race condition in the safe_open function in the Mutt mail client 1.5.12 and earlier, when creating temporary files in an NFS filesystem, allows local users to overwrite arb… |
| CVE-2006-5298 | LOW | Patched | 1.2 | 2006-10-16 | The mutt_adv_mktemp function in the Mutt mail client 1.5.12 and earlier does not properly verify that temporary files have been created with restricted permissions, which m… |
| CVE-2006-5214 | LOW | Patched | 1.2 | 2006-10-10 | Race condition in the Xsession script, as used by X Display Manager (xdm) in NetBSD before 20060212, X.Org before 20060225, and Solaris 8 through 10 before 20061006, causes… |
| CVE-2006-4676 | LOW | Patched | 1.2 | 2006-09-11 | TIBCO RendezVous 7.4.11 and earlier logs base64-encoded usernames and passwords in rvrd.db, which allows local users to obtain sensitive information by decoding the log file. |
| CVE-2006-4232 | LOW | Patched | 1.2 | 2006-08-18 | Race condition in the grid-proxy-init tool in Globus Toolkit 3.2.x, 4.0.x, and 4.1.0 before 20060815 allows local users to steal credential data by replacing the proxy cred… |
| CVE-2006-3551 | LOW | Patched | 1.2 | 2006-07-13 | NCP Secure Enterprise Client (aka VPN/PKI client) 8.30 Build 59, and possibly earlier versions, when the Link Firewall and Personal Firewall are both configured to block al… |
| CVE-2006-3118 | LOW | 1.2 | 2006-06-30 | spread uses a temporary file with a static filename based on the port number, which allows local users to cause a denial of service by creating the file during a race condi… | |
| CVE-2006-1824 | LOW | 1.2 | 2006-04-18 | Multiple cross-site scripting (XSS) vulnerabilities in PhpGuestbook.php in PhpGuestbook 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) Name, … | |
| CVE-2006-1695 | LOW | 1.2 | 2006-04-11 | The fbgs script in the fbi package 2.01-1.4, when the TMPDIR environment variable is not defined, allows local users to overwrite arbitrary files via a symlink attack on te… | |
| CVE-2006-1059 | LOW | 1.2 | 2006-03-30 | The winbindd daemon in Samba 3.0.21 to 3.0.21c writes the machine trust account password in cleartext in log files, which allows local users to obtain the password and spoo… | |
| CVE-2006-1066 | LOW | 1.2 | 2006-03-27 | Linux kernel 2.6.16-rc2 and earlier, when running on x86_64 systems with preemption enabled, allows local users to cause a denial of service (oops) via multiple ptrace task… | |
| CVE-2006-0050 | LOW | 1.2 | 2006-03-23 | snmptrapfmt in Debian 3.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary log file. | |
| CVE-2006-1231 | LOW | 1.2 | 2006-03-14 | CAPI4HylaFAX 1.3, when compiled with GENERATE_DEBUGSFFDATAFILE set, allows local users to modify arbitrary files via a symlink attack on the c2faxrecv_dbgdatafile.sff tempo… | |
| CVE-2006-0741 | LOW | Patched | 1.2 | 2006-03-07 | Linux kernel before 2.6.15.5, when running on Intel processors, allows local users to cause a denial of service ("endless recursive fault") via unknown attack vectors relat… |
| CVE-2006-0591 | LOW | 1.2 | 2006-02-08 | The crypt_gensalt functions for BSDI-style extended DES-based and FreeBSD-sytle MD5-based password hashes in crypt_blowfish 0.4.7 and earlier do not evenly and randomly dis… | |
| CVE-2005-4761 | LOW | 1.2 | 2005-12-31 | BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP5 and earlier, and 6.1 SP7 and earlier log the Java command line at server startup, which might include … | |
| CVE-2005-2527 | LOW | Patched | 1.2 | 2005-12-31 | Race condition in Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X allows local users to corrupt files or create arbitrary files via unspecified attack vectors related t… |