CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 25/05/2005 |
| CVE-2005-0073 | MITTEL4.6 | Buffer overflow in queue.c in a support script for sympa 3.3.3, when running setuid, allows local users to execute arbitrary code. | 02/05/2005 |
| CVE-2005-0159 | MITTEL4.6 | The tpkg-* scripts in the toolchain-source 3.0.4 package on Debian GNU/Linux 3.0 allow local users to overwrite arbitrary files via a symlink attack on temporary files. | 27/04/2005 |
| CVE-2004-1001 | MITTEL4.6 | Unknown vulnerability in the passwd_check function in Shadow 4.0.4.1, and possibly other versions before 4.0.5, allows local users to conduct unauthorized activities when an error from a pam_chauthtok function call is not properly handled. | 01/03/2005 |
| CVE-2005-0625 | NIEDRIG2.1 | reportbug 3.2 includes settings from .reportbugrc in bug reports, which exposes sensitive information such as smtpuser and smtppasswd. | 28/02/2005 |
| CVE-2005-0624 | NIEDRIG2.1 | reportbug before 2.62 creates the .reportbugrc configuration file with world-readable permissions, which allows local users to obtain email smarthost passwords. | 28/02/2005 |
| CVE-2005-0107 | HOCH7.5 | bsmtpd 2.3 and earlier does not properly sanitize e-mail addresses, which allows remote attackers to execute arbitrary commands. | 25/02/2005 |
| CVE-2004-1179 | NIEDRIG2.1 | The debstd script in debmake 3.6.x before 3.6.10 and 3.7.x before 3.7.7 allows local users to overwrite arbitrary files via a symlink attack on temporary directories. | 31/12/2004 |
| CVE-2004-1336 | NIEDRIG2.1 | The xdvizilla script in tetex-bin 2.0.2 creates temporary files with predictable file names, which allows local users to overwrite arbitrary files via a symlink attack. | 23/12/2004 |
| CVE-2004-0911 | MITTEL5.0 | telnetd for netkit 0.17 and earlier, and possibly other versions, on Debian GNU/Linux allows remote attackers to cause a denial of service (free of an invalid pointer), a different vulnerability than CVE-2001-0554. | 03/11/2004 |
| CVE-2004-0793 | HOCH7.2 | The calendar program in bsdmainutils 6.0 through 6.0.14 does not drop root privileges when executed with the -a flag, which allows attackers to execute arbitrary commands via a calendar event file. | 20/10/2004 |
| CVE-2004-0011 | HOCH7.5 | Buffer overflow in fsp before 2.81.b18 allows remote users to execute arbitrary code. | 20/01/2004 |
| CVE-2003-1022 | HOCH7.5 | Directory traversal vulnerability in fsp before 2.81.b18 allows remote users to access files outside the FSP root directory. | 20/01/2004 |
| CVE-2004-1000 | NIEDRIG2.1 | lintian 1.23 and earlier removes the working directory even if it was not created by lintian, which may allow local users to delete arbitrary files or directories via a symlink attack. | 10/01/2004 |
| CVE-2003-0214 | MITTEL4.6 | run-mailcap in mime-support 3.22 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files. | 12/05/2003 |
| CVE-2002-1395 | NIEDRIG2.1 | Internet Message (IM) 141-18 and earlier uses predictable file and directory names, which allows local users to (1) obtain unauthorized directory permissions via a temporary directory used by impwagent, and (2) overwrite and create arbitrary files via immknmz. | 17/01/2003 |
| CVE-2002-0910 | HOCH7.5 | Buffer overflows in netstd 3.07-17 package allows remote DNS servers to execute arbitrary code via a long FQDN reply, as observed in the utilities (1) linux-ftpd, (2) pcnfsd, (3) tftp, (4) traceroute, or (5) from/to. | 04/10/2002 |