Skip to contentGnome vulnerabilities
Newest
- gnome display managerGNOME Display Manager (gdm) before 2.21.1 allows local users to change permissions of arbitrary...CVE-2013-4169Fix available6.9 Medium
- gnome evolution, evolution data server, redhat enterprise linux desktop +2 more +4 moreThe gpg_ctx_add_recipient function in camel/camel-gpg-context.c in GNOME Evolution 3.8.4 and...CVE-2013-4166Fix available7.5 High
- gnome online accounts, canonical ubuntu linux +1 moreGnome Online Accounts (GOA) 3.6.x before 3.6.3 and 3.7.x before 3.7.91, does not properly...CVE-2013-17994.3 Medium
- gnome online accounts, canonical ubuntu linux +1 moreGnome Online Accounts (GOA) 3.4.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.5, does not properly...CVE-2013-0240Fix available4.3 Medium
- gnome screensaverThe default configuration in gnome-screensaver 3.5.4 through 3.6.0 sets the AutostartCondition...CVE-2013-10507.2 High
- gnome evolution, oracle solaris, redhat enterprise linux desktop +2 more +4 moreGNOME Evolution before 3.2.3 allows user-assisted remote attackers to read arbitrary files via...CVE-2011-3201Fix available4.3 Medium
- gnome display managervicious-extensions/ve-misc.c in GNOME Display Manager (gdm) 2.20.x before 2.20.11, when GDM debug...CVE-2010-2387Public exploit1.9 Low
- gnome libsocialwebservices/flickr/flickr.c in libsocialweb before 0.25.21 automatically connects to Flickr when no...CVE-2012-45115.8 Medium
- gnome gnome-keyringGNOME gnome-keyring 3.4.0 through 3.4.1, when gpg-cache-method is set to "idle" or "timeout,"...CVE-2012-3466Fix available4.4 Medium
- gnome libsocialweb(1) services/twitter/twitter-contact-view.c and (2) services/twitter/twitter-item-view.c in...CVE-2011-41295.8 Medium
- gnome gnome-shellThe gnome-shell plugin 3.4.1 in GNOME allows remote attackers to force the download and...CVE-2012-4427Fix available6.8 Medium
- gnome librsvglibrsvg before 2.34.1 uses the node name to identify the type of node, which allows context...CVE-2011-3146Fix available6.8 Medium
- gnome at-spi2-atkThe register_application function in atk-adaptor/bridge.c in GNOME at-spi2-atk 2.5.2 does not...CVE-2012-3378Fix available3.3 Low
- gnome libsouplibsoup 2.32.2 and earlier does not validate certificates or clear the trust flag when the ssl-ca...CVE-2012-21325.0 Medium
- gnome gdk-pixbufMultiple integer overflows in the read_bitmap_file_data function in io-xbm.c in gdk-pixbuf before...CVE-2012-2370Fix available5.0 Medium
- gnome screensavergnome-screensaver 3.4.x before 3.4.4 and 3.5.x before 3.5.4, when multiple screens are used, only...CVE-2012-34523.3 Low
- gnome rhythmbox(1) AlbumTab.py, (2) ArtistTab.py, (3) LinksTab.py, and (4) LyricsTab.py in the Context module in...CVE-2012-3355Fix available3.6 Low
- gnome gdk-pixbufThe gdk_pixbuf__gif_image_load function in gdk-pixbuf/io-gif.c in gdk-pixbuf before 2.23.5 does...CVE-2011-2485Fix available4.3 Medium
- gnome pango, qt, canonical ubuntu linux +5 more +7 moreHeap-based buffer overflow in the Lookup_MarkMarkPos function in the HarfBuzz module (harfbuzz...CVE-2011-3193Fix available9.3 High
- canonical ubuntu linux, gnome update-manager-core +1 moreDistUpgrade/DistUpgradeMain.py in Update Manager, as used by Ubuntu 12.04 LTS, 11.10, and 11.04,...CVE-2012-09482.1 Low
- gnome libgdatalibgdata before 0.10.2 and 0.11.x before 0.11.1 does not validate SSL certificates, which allows...CVE-2012-1177Fix available5.1 Medium
- gnome glib** DISPUTED ** GLib 2.31.8 and earlier, when the g_str_hash function is used, computes hash...CVE-2012-0039Disputed5.0 Medium
- gnome evince, t1lib, tetex +2 moreHeap-based buffer overflow in the linetoken function in afmparse.c in t1lib, as used in teTeX 3.0...CVE-2011-0433Fix available6.8 Medium
- gnome evince, t1lib, tetex +2 moreMultiple off-by-one errors in the (1) token and (2) linetoken functions in backend/dvi/mdvi-lib...CVE-2011-5244Fix available6.8 Medium
- gnome ifcfg-rh plug-inIncomplete blacklist vulnerability in the svEscape function in settings/plugins/ifcfg-rh/shvar.c...CVE-2011-3364Fix available6.9 Medium
- gnome empathyCross-site scripting (XSS) vulnerability in the theme_adium_append_message function in empathy...CVE-2011-4170Fix available4.3 Medium
- gnome empathyCross-site scripting (XSS) vulnerability in the theme_adium_append_message function in empathy...CVE-2011-3635Fix available4.3 Medium
- gnome gtkUntrusted search path vulnerability in modules/engines/ms-windows/xp_theme.c in GTK+ before 2.24...CVE-2010-48339.3 High
- gnome gtkUntrusted search path vulnerability in gdk/win32/gdkinput-win32.c in GTK+ before 2.21.8 allows...CVE-2010-48316.9 Medium
- gnome networkmanagerGNOME NetworkManager before 0.8.6 does not properly enforce the auth_admin element in PolicyKit,...CVE-2011-2176Fix available2.1 Low
- gnome libsoupDirectory traversal vulnerability in soup-uri.c in SoupServer in libsoup before 2.35.4 allows...CVE-2011-2524Fix available5.0 Medium
- fedoraproject fedora, gnome networkmanager +1 moreThe destroy_one_secret function in nm-setting-vpn.c in libnm-util in the NetworkManager package 0...CVE-2011-19432.1 Low
- gnome gdmGNOME Display Manager (gdm) before 2.32.2, when glib 2.28 is used, enables execution of a web...CVE-2011-17097.2 High
- gnome gdmGNOME Display Manager (gdm) 2.x before 2.32.1 allows local users to change the ownership of...CVE-2011-0727Fix available6.9 Medium
- gnome pango, mozilla firefox +1 moreThe hb_buffer_ensure function in hb-buffer.c in HarfBuzz, as used in Pango 1.28.3, Firefox, and...CVE-2011-0064Fix available6.8 Medium
- gnome pangoHeap-based buffer overflow in the pango_ft2_font_render_box_glyph function in pango/pangoft2...CVE-2011-0020Public exploitFix availableEPSS 18.9%7.6 High
- gnome tomboyThe (1) tomboy and (2) tomboy-panel scripts in GNOME Tomboy 1.5.2 and earlier place a zero-length...CVE-2010-40056.9 Medium
- gnome gnome-shellgnome-shell in GNOME Shell 2.31.5 places a zero-length directory name in the LD_LIBRARY_PATH,...CVE-2010-4000Fix available6.9 Medium
- gnome epiphanyEpiphany 2.28 and 2.29, when WebKit and LibSoup are used, unconditionally displays a closed-lock...CVE-2010-3312Fix available5.8 Medium
- gnome power managergnome-power-manager 2.27.92 does not properly implement the lock_on_suspend and lock_on_hibernate...CVE-2009-4997Fix available7.2 High
- gnome power managergnome-power-manager 2.14.0 does not properly implement the lock_on_suspend and lock_on_hibernate...CVE-2006-7240Fix available7.2 High
- gnome gtk, screensaver +1 moregdk/gdkwindow.c in GTK+ before 2.18.5, as used in gnome-screensaver before 2.28.1, performs...CVE-2010-0732Fix available6.2 Medium
- gnome pangoArray index error in the hb_ot_layout_build_glyph_classes function in pango/opentype/hb-ot-layout...CVE-2010-0421Fix available4.3 Medium
- gnome screensavergnome-screensaver 2.28.x before 2.28.3 does not properly synchronize the state of screen locking...CVE-2010-0422Fix available4.0 Medium
- gnome screensavergnome-screensaver 2.14.3, 2.22.2, 2.27.x, 2.28.0, and 2.28.3, when the X configuration enables...CVE-2010-0285Fix available5.6 Medium
- gnome screensavergnome-screensaver 2.26.1 relies on the gnome-session D-Bus interface to determine session idle...CVE-2009-4642Fix available7.2 High
- gnome screensavergnome-screensaver 2.28.0 does not resume adherence to its activation settings after an inhibiting...CVE-2009-4641Fix available7.2 High
- gnome screensavergnome-screensaver before 2.28.2 allows physically proximate attackers to bypass screen locking...CVE-2010-0414Fix available7.2 High
- gnome gmimeBuffer overflow in the GMIME_UUENCODE_LEN macro in gmime/gmime-encodings.h in GMime before 2.4.15...CVE-2010-0409Fix available7.5 High
- gnome networkmanagernm-connection-editor in NetworkManager (NM) 0.7.x exports connection objects over D-Bus upon...CVE-2009-4145Fix available2.1 Low
- Show moreLoading…