CVE & Exploit Intelligence Database

Updated 2h ago

Search and track vulnerabilities with real-time exploit intelligence. Cross-reference CVEs against public exploits from ExploitDB, Metasploit, GitHub, and Nuclei — with CVSS and EPSS scoring, CISA KEV monitoring, and AI-powered exploit analysis.

337,613 CVEs tracked 53,239 with exploits 4,709 exploited in wild 1,539 CISA KEV 3,918 Nuclei templates 37,790 vendors 42,464 researchers

12,131 results Clear all

CVE-2003-0418 EPSS 0.01

Linux 2.0 - Info Disclosure

The Linux 2.0 kernel IP stack does not properly calculate the size of an ICMP citation, which causes it to include portions of unauthorized memory in ICMP error responses.

CVE-2003-0246 EPSS 0.00

Linux kernel <2.4.20 - Privilege Escalation

The ioperm system call in Linux kernel 2.4.20 and earlier does not properly restrict privileges, which allows local users to gain read or write access to certain I/O ports.

CVE-2003-0244 EPSS 0.07

Linux 2.4 - DoS

The route cache implementation in Linux 2.4, and the Netfilter IP conntrack module, allows remote attackers to cause a denial of service (CPU consumption) via packets with forged source addresses that cause a large number of hash table collisions.

CVE-2003-0127 EXPLOITED 4 PoCs Analysis EPSS 0.01

Linux kernel <2.2.25-2.4.21 - Privilege Escalation

The kernel module loader in Linux kernel 2.2.x before 2.2.25, and 2.4.x before 2.4.21, allows local users to gain root privileges by using ptrace to attach to a child process that is spawned by the kernel.

CVE-2003-0018 EPSS 0.00

Linux kernel <2.4.22 - Info Disclosure

Linux kernel 2.4.10 through 2.4.21-pre4 does not properly handle the O_DIRECT feature, which allows local attackers with write privileges to read portions of previously deleted files, or cause file system corruption.

CVE-2003-0001 4 PoCs Analysis EPSS 0.04

Freebsd - Information Disclosure

Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previous packets or kernel memory by using malformed packets, as demonstrated by Etherleak.

CWE-200 Jan 17, 2003

CVE-2002-1571 EPSS 0.00

Linux 2.4 <2.4.19 - Info Disclosure

The linux 2.4 kernel before 2.4.19 assumes that the fninit instruction clears all registers, which could lead to an information leak on processors that do not clear all relevant SSE registers.

CVE-2002-1572 EPSS 0.00

Linux kernel <2.4.20 - Buffer Overflow

Signed integer overflow in the bttv_read function in the bttv driver (bttv-driver.c) in Linux kernel before 2.4.20 has unknown impact and attack vectors.

CVE-2002-1963 EPSS 0.00

Linux Kernel - Denial of Service

Linux kernel 2.4.1 through 2.4.19 sets root's NR_RESERVED_FILES limit to 10 files, which allows local users to cause a denial of service (resource exhaustion) by opening 10 setuid binaries.

CVE-2002-1976 EPSS 0.00

Linux kernel <2.2 - Info Disclosure

ifconfig, when used on the Linux kernel 2.2 and later, does not report when the network interface is in promiscuous mode if it was put in promiscuous mode using PACKET_MR_PROMISC, which could allow attackers to sniff the network without detection, as demonstrated using libpcap.

CVE-2002-2254 EPSS 0.00

Linux Kernel - Access Control

The experimental IP packet queuing feature in Netfilter / IPTables in Linux kernel 2.4 up to 2.4.19 and 2.5 up to 2.5.31, when a privileged process exits and network traffic is not being queued, may allow a later process with the same Process ID (PID) to access certain network traffic that would otherwise be restricted.

CWE-264 Dec 31, 2002

CVE-2002-1573 EPSS 0.00

Linux kernel <2.4.20 - Unknown Vuln

Unspecified vulnerability in the pcilynx ieee1394 firewire driver (pcilynx.c) in Linux kernel before 2.4.20 has unknown impact and attack vectors, related to "wrap handling."

CVE-2002-1380 1 PoC Analysis EPSS 0.00

Linux kernel <2.2.x - DoS

Linux kernel 2.2.x allows local users to cause a denial of service (crash) by using the mmap() function with a PROT_READ parameter to access non-readable memory pages through the /proc/pid/mem interface.

CVE-2002-1319 EPSS 0.00

Linux Kernel <2.4.20 - DoS

The Linux kernel 2.4.20 and earlier, and 2.5.x, when running on x86 systems, allows local users to cause a denial of service (hang) via the emulation mode, which does not properly clear TF and NT EFLAGs.

CVE-2002-0499 1 PoC Analysis EPSS 0.00

Linux kernel <2.2.20 & <2.4.18 - Path Traversal

The d_path function in Linux kernel 2.2.20 and earlier, and 2.4.18 and earlier, truncates long pathnames without generating an error, which could allow local users to force programs to perform inappropriate operations on the wrong directories.

CVE-2002-0510 EPSS 0.01

Linux 2.4.x - Info Disclosure

The UDP implementation in Linux 2.4.x kernels keeps the IP Identification field at 0 for all non-fragmented packets, which could allow remote attackers to determine that a target system is running Linux.

CVE-2002-0429 EPSS 0.00

Linux kernel <2.4.18 - Privilege Escalation

The iBCS routines in arch/i386/kernel/traps.c for Linux kernels 2.4.18 and earlier on x86 systems allow local users to kill arbitrary processes via a a binary compatibility interface (lcall).

CVE-2002-0704 7.5 HIGH EPSS 0.01

Netfilter <1.2.6a - Info Disclosure

The Network Address Translation (NAT) capability for Netfilter ("iptables") 1.2.6a and earlier leaks translated IP addresses in ICMP error messages.

CWE-212 Jul 26, 2002

CVE-2002-0570 EPSS 0.00

Linux kernel <2.4.10 - Info Disclosure

The encrypted loop device in Linux kernel 2.4.10 and earlier does not authenticate the entity that is encrypting data, which allows local users to modify encrypted data without knowing the key.

CVE-2002-0060 EPSS 0.02

Linux <2.4.18-pre9 - Privilege Escalation

IRC connection tracking helper module in the netfilter subsystem for Linux 2.4.18-pre9 and earlier does not properly set the mask for conntrack expectations for incoming DCC connections, which could allow remote attackers to bypass intended firewall restrictions.