58.127 CVE tracked
788 Exploited now
188 Used by ransomware
Last sync
CVE Tracker
58.127 CVE
Ten vendors followed by CPE identifier, not by keyword: a CVE appears here once NVD says which products it affects — usually a few days after it is published.
| Identifier | Severity, sorted ascending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2004-1057 | HIGH 7.2 | linux linux_kernel Multiple drivers in Linux kernel 2.4.19 and earlier do not properly mark memory with the VM_IO flag, which causes incorrect reference counts and may lead to a denial of service (kernel panic) when accessing freed kernel pages. | 0.4% | — |
| CVE-2004-0894 | HIGH 7.2 | microsoft windows_2000 LSASS (Local Security Authority Subsystem Service) of Windows 2000 Server and Windows Server 2003 does not properly validate connection information, which allows local users to gain privileges via a specially-designed program. | 3.4% | — |
| CVE-2004-0893 | HIGH 7.2 | microsoft windows_2000 The Local Procedure Call (LPC) interface of the Windows Kernel for Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 does not properly validate the lengths of messages sent to the LPC port, which allows local users to gain privileges, aka "Wind | 1.5% | — |
| CVE-2004-0887 | HIGH 7.2 | linux linux_kernel SUSE Linux Enterprise Server 9 on the S/390 platform does not properly handle a certain privileged instruction, which allows local users to gain root privileges. | 0.4% | — |
| CVE-2004-0658 | HIGH 7.2 | linux linux_kernel Integer overflow in the hpsb_alloc_packet function (incorrectly reported as alloc_hpsb_packet) in IEEE 1394 (Firewire) driver 2.4 and 2.6 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via the functions (1) raw1394_ | 0.4% | — |
| CVE-2004-0496 | HIGH 7.2 | gentoo linux Multiple unknown vulnerabilities in Linux kernel 2.6 allow local users to gain privileges or access kernel memory, a different set of vulnerabilities than those identified in CVE-2004-0495, as found by the Sparse source code checking tool. | 0.4% | — |
| CVE-2004-0495 | HIGH 7.2 | avaya converged_communications_server Multiple unknown vulnerabilities in Linux kernel 2.4 and 2.6 allow local users to gain privileges or access kernel memory, as found by the Sparse source code checking tool. | 0.4% | — |
| CVE-2004-0447 | HIGH 7.2 | linux linux_kernel Unknown vulnerability in Linux before 2.4.26 for IA64 allows local users to cause a denial of service, with unknown impact. NOTE: due to a typo, this issue was accidentally assigned CVE-2004-0477. This is the proper candidate to use for the Linux local DoS. | 0.4% | — |
| CVE-2004-0424 | HIGH 7.2 | linux linux_kernel Integer overflow in the ip_setsockopt function in Linux kernel 2.4.22 through 2.4.25 and 2.6.1 through 2.6.3 allows local users to cause a denial of service (crash) or execute arbitrary code via the MCAST_MSFILTER socket option. | 1.2% | — |
| CVE-2004-0228 | HIGH 7.2 | linux linux_kernel Integer signedness error in the cpufreq proc handler (cpufreq_procctl) in Linux kernel 2.6 allows local users to gain privileges. | 0.8% | — |
| CVE-2004-0208 | HIGH 7.2 | microsoft windows_2000 The Virtual DOS Machine (VDM) subsystem of Microsoft Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows local users to access kernel memory and gain privileges via a malicious program that modified some system structures in a way that is | 1.5% | — |
| CVE-2004-0205 | HIGH 7.2 | avaya definity_one_media_server Buffer overflow in Microsoft Internet Information Server (IIS) 4.0 allows local users to execute arbitrary code via the redirect function. | 24.5% | — |
| CVE-2004-0186 | HIGH 7.2 | linux linux_kernel smbmnt in Samba 2.x and 3.x on Linux 2.6, when installed setuid, allows local users to gain root privileges by mounting a Samba share that contains a setuid root program, whose setuid attributes are not cleared when the share is mounted. | 1.6% | — |
| CVE-2004-0118 | HIGH 7.2 | microsoft windows_2000 The component for the Virtual DOS Machine (VDM) subsystem in Windows NT 4.0 and Windows 2000 does not properly validate system structures, which allows local users to access protected kernel memory and execute arbitrary code. | 22.3% | — |
| CVE-2004-0077 | HIGH 7.2 | linux linux_kernel The do_mremap function for the mremap system call in Linux 2.2 to 2.2.25, 2.4 to 2.4.24, and 2.6 to 2.6.2, does not properly check the return value from the do_munmap function when the maximum number of VMA descriptors is exceeded, which allows local users to | 2.4% | — |
| CVE-2004-0010 | HIGH 7.2 | linux linux_kernel Stack-based buffer overflow in the ncp_lookup function for ncpfs in Linux kernel 2.4.x allows local users to gain privileges. | 0.5% | — |
| CVE-2004-0001 | HIGH 7.2 | linux linux_kernel Unknown vulnerability in the eflags checking in the 32-bit ptrace emulation for the Linux kernel on AMD64 systems allows local users to gain privileges. | 0.4% | — |
| CVE-2003-1407 | HIGH 7.2 | microsoft windows_nt Buffer overflow in cmd.exe in Windows NT 4.0 may allow local users to execute arbitrary code via a long pathname argument to the cd command. | 3.4% | — |
| CVE-2003-1291 | HIGH 7.2 | vmware esx VMware ESX Server 1.5.2 before Patch 4 allows local users to execute arbitrary programs as root via certain modified VMware ESX Server environment variables. | 0.3% | — |
| CVE-2003-1161 | HIGH 7.2 | linux linux_kernel exit.c in Linux kernel 2.6-test9-CVS, as stored on kernel.bkbits.net, was modified to contain a backdoor, which could allow local users to elevate their privileges by passing __WCLONE|__WALL to the sys_wait4 function. | 0.5% | — |
| CVE-2003-0985 | HIGH 7.2 | linux linux_kernel The mremap system call (do_mremap) in Linux kernel 2.4.x before 2.4.21, and possibly other versions before 2.4.24, does not properly perform bounds checks, which allows local users to cause a denial of service and possibly gain privileges by causing a remappin | 1.2% | — |
| CVE-2003-0961 | HIGH 7.2 | linux linux_kernel Integer overflow in the do_brk function for the brk system call in Linux kernel 2.4.22 and earlier allows local users to gain root privileges. | 3.3% | — |
| CVE-2003-0910 | HIGH 7.2 | microsoft windows_2000 The NtSetLdtEntries function in the programming interface for the Local Descriptor Table (LDT) in Windows NT 4.0 and Windows 2000 allows local attackers to gain access to kernel memory and execute arbitrary code via an expand-down data segment descriptor descr | 26.1% | — |
| CVE-2003-0909 | HIGH 7.2 | microsoft windows_xp Windows XP allows local users to execute arbitrary programs by creating a task at an elevated privilege level through the eventtriggers.exe command-line tool or the Task Scheduler service, aka "Windows Management Vulnerability." | 20.9% | — |
| CVE-2003-0908 | HIGH 7.2 | microsoft windows_2000 The Utility Manager in Microsoft Windows 2000 executes winhlp32.exe with system privileges, which allows local users to execute arbitrary code via a "Shatter" style attack using a Windows message that accesses the context sensitive help button in the GUI, as d | 25.9% | — |