Search
17,826 CVEs · Low severity
CVEs (17,826, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 201–225 of 17,826 (capped at 500)
| CVE ID | Severity | Patch | CVSS ↑ | Published | Description |
|---|---|---|---|---|---|
| CVE-2013-0525 | LOW | 1.5 | 2013-03-26 | Multiple cross-site scripting (XSS) vulnerabilities in IBM iNotes 8.5.x allow local users to inject arbitrary web script or HTML via a shared mail file, aka SPR DKEN8PDNTX. | |
| CVE-2012-5616 | LOW | Patched | 1.5 | 2013-01-22 | Apache CloudStack 4.0.0-incubating and Citrix CloudPlatform (formerly Citrix CloudStack) before 3.0.6 stores sensitive information in the log4j.conf log file, which allows … |
| CVE-2012-3145 | LOW | 1.5 | 2012-10-16 | Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 5.0.2, 5.0.5, 5.1.0, 5.2.0, 5.3.0 through 5.3.4, and 6.2.0 a… | |
| CVE-2011-1373 | LOW | Patched | 1.5 | 2011-11-09 | Unspecified vulnerability in IBM DB2 9.7 before FP5 on UNIX, when the Self Tuning Memory Manager (STMM) feature and the AUTOMATIC DATABASE_MEMORY setting are configured, al… |
| CVE-2011-2318 | LOW | 1.5 | 2011-10-18 | Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4.0, 10.0.2.0, 10.3.3.0, 10.3.4.0, and 10.3.5.0 allows local users to affe… | |
| CVE-2011-1637 | LOW | Patched | 1.5 | 2011-06-02 | Cisco Unified IP Phones 7900 devices (aka TNP phones) with software before 9.2.1 do not properly verify signatures for software images, which allows local users to gain pri… |
| CVE-2010-3321 | LOW | Patched | 1.5 | 2010-10-07 | RSA Authentication Client 2.0.x, 3.0, and 3.5.x before 3.5.3 does not properly handle a SENSITIVE or NON-EXTRACTABLE tag on a secret key object that is stored on a SecurID … |
| CVE-2009-2752 | LOW | 1.5 | 2010-02-05 | IBM WebSphere Commerce 7.0 does not properly encrypt data in a database, which makes it easier for local users to obtain sensitive information by defeating cryptographic pr… | |
| CVE-2009-2094 | LOW | Patched | 1.5 | 2009-08-13 | Unspecified vulnerability in IBM WebSphere Commerce 6.0 Enterprise before 6.0.0.8, when trace is enabled, allows local users to obtain sensitive information via unknown vectors. |
| CVE-2008-2587 | LOW | 1.5 | 2008-07-15 | Unspecified vulnerability in the Advanced Replication component in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 has unknown impact and local at… | |
| CVE-2007-4179 | LOW | 1.5 | 2007-08-08 | Unspecified vulnerability in the Address and Routing Parameter Area (ARPA) transport functionality in HP-UX B.11.11 and B.11.23 allows local users to cause an unspecified d… | |
| CVE-2007-3381 | LOW | Patched | 1.5 | 2007-08-07 | The GDM daemon in GNOME Display Manager (GDM) before 2.14.13, 2.16.x before 2.16.7, 2.18.x before 2.18.4, and 2.19.x before 2.19.5 does not properly handle NULL return valu… |
| CVE-2007-4126 | LOW | Patched | 1.5 | 2007-08-01 | Unspecified vulnerability in the dynamic tracing framework (DTrace) on Sun Solaris 10 before 20070730 allows local users with PRIV_DTRACE_USER privileges to cause a denial … |
| CVE-2007-0409 | LOW | Patched | 1.5 | 2007-01-23 | BEA WebLogic 7.0 through 7.0 SP6, 8.1 through 8.1 SP4, and 9.0 initial release does not encrypt passwords stored in the JDBCDataSourceFactory MBean Properties, which allows… |
| CVE-2006-0678 | LOW | Patched | 1.5 | 2006-02-14 | PostgreSQL 7.3.x before 7.3.14, 7.4.x before 7.4.12, 8.0.x before 8.0.7, and 8.1.x before 8.1.3, when compiled with Asserts enabled, allows local users to cause a denial of… |
| CVE-2025-9381 | LOW | 1.6 | 2025-08-24 | A security flaw has been discovered in FNKvision Y215 CCTV Camera 10.194.120.40. This affects an unknown part of the file /tmp/wpa_supplicant.conf. Performing manipulation … | |
| CVE-2025-7215 | LOW | 1.6 | 2025-07-09 | A vulnerability, which was classified as problematic, has been found in FNKvision FNK-GU2 up to 40.1.7. Affected by this issue is some unknown functionality of the file /ro… | |
| CVE-2025-7214 | LOW | 1.6 | 2025-07-09 | A vulnerability classified as problematic was found in FNKvision FNK-GU2 up to 40.1.7. Affected by this vulnerability is an unknown functionality of the file /etc/shadow of… | |
| CVE-2024-42181 | LOW | 1.6 | 2025-01-12 | HCL MyXalytics is affected by a cleartext transmission of sensitive information vulnerability. The application transmits sensitive or security-critical data in cleartext i… | |
| CVE-2024-42180 | LOW | 1.6 | 2025-01-12 | HCL MyXalytics is affected by a malicious file upload vulnerability. The application accepts invalid file uploads, including incorrect content types, double extensions, nu… | |
| CVE-2024-2365 | LOW | 1.6 | 2024-03-11 | A vulnerability classified as problematic was found in Musicshelf 1.0/1.1 on Android. Affected by this vulnerability is an unknown functionality of the file io\fabric\sdk\a… | |
| CVE-2020-8092 | LOW | Patched | 1.6 | 2020-01-30 | A privilege escalation vulnerability in BDLDaemon as used in Bitdefender Antivirus for Mac allows a local attacker to obtain authentication tokens for requests submitted to… |
| CVE-2019-15166 | LOW | Patched | 1.6 | 2019-10-03 | lmp_print_data_link_subobjs() in print-lmp.c in tcpdump before 4.9.3 lacks certain bounds checks. |
| CVE-2016-1584 | LOW | 1.6 | 2019-04-22 | In all versions of Unity8 a running but not active application on a large-screen device could talk with Maliit and consume keyboard input. | |
| CVE-2023-45716 | LOW | Patched | 1.7 | 2024-02-09 | Sametime is impacted by sensitive information passed in URL. |