CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 25/05/2005 |
| CVE-2005-0073 | 中危4.6 | Buffer overflow in queue.c in a support script for sympa 3.3.3, when running setuid, allows local users to execute arbitrary code. | 02/05/2005 |
| CVE-2005-0159 | 中危4.6 | The tpkg-* scripts in the toolchain-source 3.0.4 package on Debian GNU/Linux 3.0 allow local users to overwrite arbitrary files via a symlink attack on temporary files. | 27/04/2005 |
| CVE-2004-1001 | 中危4.6 | Unknown vulnerability in the passwd_check function in Shadow 4.0.4.1, and possibly other versions before 4.0.5, allows local users to conduct unauthorized activities when an error from a pam_chauthtok function call is not properly handled. | 01/03/2005 |
| CVE-2005-0625 | 低危2.1 | reportbug 3.2 includes settings from .reportbugrc in bug reports, which exposes sensitive information such as smtpuser and smtppasswd. | 28/02/2005 |
| CVE-2005-0624 | 低危2.1 | reportbug before 2.62 creates the .reportbugrc configuration file with world-readable permissions, which allows local users to obtain email smarthost passwords. | 28/02/2005 |
| CVE-2005-0107 | 高危7.5 | bsmtpd 2.3 and earlier does not properly sanitize e-mail addresses, which allows remote attackers to execute arbitrary commands. | 25/02/2005 |
| CVE-2004-1179 | 低危2.1 | The debstd script in debmake 3.6.x before 3.6.10 and 3.7.x before 3.7.7 allows local users to overwrite arbitrary files via a symlink attack on temporary directories. | 31/12/2004 |
| CVE-2004-1336 | 低危2.1 | The xdvizilla script in tetex-bin 2.0.2 creates temporary files with predictable file names, which allows local users to overwrite arbitrary files via a symlink attack. | 23/12/2004 |
| CVE-2004-0911 | 中危5.0 | telnetd for netkit 0.17 and earlier, and possibly other versions, on Debian GNU/Linux allows remote attackers to cause a denial of service (free of an invalid pointer), a different vulnerability than CVE-2001-0554. | 03/11/2004 |
| CVE-2004-0793 | 高危7.2 | The calendar program in bsdmainutils 6.0 through 6.0.14 does not drop root privileges when executed with the -a flag, which allows attackers to execute arbitrary commands via a calendar event file. | 20/10/2004 |
| CVE-2004-0011 | 高危7.5 | Buffer overflow in fsp before 2.81.b18 allows remote users to execute arbitrary code. | 20/01/2004 |
| CVE-2003-1022 | 高危7.5 | Directory traversal vulnerability in fsp before 2.81.b18 allows remote users to access files outside the FSP root directory. | 20/01/2004 |
| CVE-2004-1000 | 低危2.1 | lintian 1.23 and earlier removes the working directory even if it was not created by lintian, which may allow local users to delete arbitrary files or directories via a symlink attack. | 10/01/2004 |
| CVE-2003-0214 | 中危4.6 | run-mailcap in mime-support 3.22 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files. | 12/05/2003 |
| CVE-2002-1395 | 低危2.1 | Internet Message (IM) 141-18 and earlier uses predictable file and directory names, which allows local users to (1) obtain unauthorized directory permissions via a temporary directory used by impwagent, and (2) overwrite and create arbitrary files via immknmz. | 17/01/2003 |
| CVE-2002-0910 | 高危7.5 | Buffer overflows in netstd 3.07-17 package allows remote DNS servers to execute arbitrary code via a long FQDN reply, as observed in the utilities (1) linux-ftpd, (2) pcnfsd, (3) tftp, (4) traceroute, or (5) from/to. | 04/10/2002 |