Search
17,826 CVEs · Low severity
CVEs (17,826, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 176–200 of 17,826 (capped at 500)
| CVE ID | Severity | Patch | CVSS ↑ | Published | Description |
|---|---|---|---|---|---|
| CVE-1999-0475 | LOW | 1.2 | 1999-04-05 | A race condition in how procmail handles .procmailrc files allows a local user to read arbitrary files available to the user who is running procmail. | |
| CVE-2000-0371 | LOW | 1.2 | 1999-03-01 | The libmediatool library used for the KDE mediatool allows local users to create arbitrary files via a symlink attack. | |
| CVE-1999-0371 | LOW | Patched | 1.2 | 1999-02-11 | Lynx allows a local user to overwrite sensitive files through /tmp symlinks. |
| CVE-1999-1480 | LOW | 1.2 | 1998-06-11 | (1) acledit and (2) aclput in AIX 4.3 allow local users to create or modify files via a symlink attack. | |
| CVE-1999-1486 | LOW | 1.2 | 1998-02-25 | sadc in IBM AIX 4.1 through 4.3, when called from programs such as timex that are setgid adm, allows local users to overwrite arbitrary files via a symlink attack. | |
| CVE-2026-90799 | LOW | Patched | — | 2026-10-20 | Unsafe binary deserialisation in chttpd in Apache CouchDB 3.5.2 and below on all platforms allows an authenticated user to cause a denial of service via memory exhaustion. … |
| CVE-2015-5464 | LOW | 1.3 | 2015-07-22 | The Gemalto SafeNet Luna HSM allows remote authenticated users to bypass intended key-export restrictions by leveraging (1) crypto-user or (2) crypto-officer access to an H… | |
| CVE-2011-2242 | LOW | 1.3 | 2011-07-20 | Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.2.0.1 and 11.2.0.2 allows local users to affect confidentiality, related to XML DB FTP. | |
| CVE-2016-0618 | LOW | 1.4 | 2016-01-21 | Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect confidentiality via unknown vectors related to Zones. | |
| CVE-2014-2485 | LOW | 1.4 | 2014-07-17 | Unspecified vulnerability in the Siebel Core - EAI component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows local users to affect confidentiality via unknown vectors related t… | |
| CVE-2016-0498 | LOW | 1.5 | 2016-01-21 | Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply Chain Products Suite 6.1.2.2, 6.1.3.0, and 6.2.0.0 allows local users t… | |
| CVE-2015-4878 | LOW | 1.5 | 2015-10-21 | Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows local users to affect availability via un… | |
| CVE-2015-4877 | LOW | 1.5 | 2015-10-21 | Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows local users to affect availability via un… | |
| CVE-2015-4811 | LOW | 1.5 | 2015-10-21 | Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows local users to affect availability via ve… | |
| CVE-2015-4809 | LOW | 1.5 | 2015-10-21 | Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows local users to affect availability via ve… | |
| CVE-2015-0493 | LOW | 1.5 | 2015-04-16 | Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.1, 8.5.0, and 8.5.1 allows local users to affect availability via un… | |
| CVE-2015-0474 | LOW | 1.5 | 2015-04-16 | Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.1, 8.5.0, and 8.5.1 allows local users to affect availability via un… | |
| CVE-2014-5029 | LOW | 1.5 | 2014-07-29 | The web interface in CUPS 1.7.4 allows local users in the lp group to read arbitrary files via a symlink attack on a file in /var/cache/cups/rss/ and language[0] set to nul… | |
| CVE-2013-5763 | LOW | 1.5 | 2013-12-12 | Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 allows context-dependent attackers to affect availability via unkn… | |
| CVE-2013-5791 | LOW | Patched | 1.5 | 2013-10-16 | Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.4.1 allows context-dependent attackers to affect availabilit… |
| CVE-2013-4829 | LOW | 1.5 | 2013-10-04 | HP LaserJet M4555, M525, and M725; LaserJet flow MFP M525c; LaserJet Enterprise color flow MFP M575c; Color LaserJet CM4540, M575, and M775; and ScanJet Enterprise 8500fn1 … | |
| CVE-2013-4355 | LOW | Patched | 1.5 | 2013-10-01 | Xen 4.3.x and earlier does not properly handle certain errors, which allows local HVM guests to obtain hypervisor stack memory via a (1) port or (2) memory mapped I/O write… |
| CVE-2013-2393 | LOW | 1.5 | 2013-04-17 | Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.7 and 8.4.0 allows context-dependent attackers to affect availabilit… | |
| CVE-2013-1546 | LOW | 1.5 | 2013-04-17 | Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 2.8.0 through 3.1.0 and 5.0.2 through 12.0.1 allows local us… | |
| CVE-2013-1502 | LOW | Patched | 1.5 | 2013-04-17 | Unspecified vulnerability in Oracle MySQL 5.5.30 and earlier and 5.6.9 and earlier allows local users to affect availability via unknown vectors related to Server Partition. |