Skip to contentGnome vulnerabilities
Newest
- gnome libgfbgraph, fedoraproject fedora +1 moreIn GNOME libgfbgraph through 0.2.4, gfbgraph-photo.c does not enable TLS certificate verification...CVE-2021-39358Fix available5.9 Medium
- gnome libzapojit, fedoraproject fedora +1 moreIn GNOME libzapojit through 0.0.3, zpj-skydrive.c does not enable TLS certificate verification on...CVE-2021-39360Fix available5.9 Medium
- gnome evolution-rssIn GNOME evolution-rss through 0.3.96, network-soup.c does not enable TLS certificate...CVE-2021-393615.9 Medium
- gnome libgda, fedoraproject fedora +1 moreIn GNOME libgda through 6.0.0, gda-web-provider.c does not enable TLS certificate verification on...CVE-2021-39359Fix available5.9 Medium
- gnome gthumbGNOME gThumb before 3.10.1 allows an application crash via a malformed JPEG image.CVE-2020-36427Fix available5.5 Medium
- gnome caribouA flaw was found in Caribou due to a regression of CVE-2020-25712 fix. An attacker could use this...CVE-2021-3567Fix available7.5 High
- gnome evolution, ytnef +1 moreMultiple directory traversal and buffer overflow vulnerabilities were discovered in yTNEF, and in...CVE-2009-37217.8 High
- gnome libgrsslibgrss through 0.7.0 fails to perform TLS certificate verification when downloading feeds,...CVE-2016-20011Fix available7.5 High
- gnome gupnpAn issue was discovered in GUPnP before 1.0.7 and 1.1.x and 1.2.x before 1.2.5. It allows DNS...CVE-2021-33516Fix available8.1 High
- [red hat] networkmanager, fedoraproject fedora, redhat enterprise linux +1 more +3 moreA flaw was found in NetworkManager in versions before 1.30.0. Setting match.path and activating a...CVE-2021-20297Fix available5.5 Medium
- gnome libxml2, netapp active iq unified manager, cloud backup +19 more +21 moreA flaw was found in libxml2. Exponential entity expansion attack its possible bypassing all...CVE-2021-3541Fix available6.5 Medium
- gnome libxml2, debian linux, fedoraproject fedora +19 more +21 moreNokogiri Implements libxml2 version vulnerable to null pointer dereferencingCVE-2021-3537Fix available5.9 Medium
- gnome libxml2, debian linux, fedoraproject fedora +18 more +20 moreNokogiri Implements libxml2 version vulnerable to use-after-freeCVE-2021-3518Fix availableEPSS 21.9%8.8 High
- gnome libxml2, debian linux, fedoraproject fedora +28 more +30 moreNokogiri contains libxml Out-of-bounds Write vulnerabilityCVE-2021-3517Fix availableEPSS 17.0%8.6 High
- gnome libxml2, xmlsoft xmllint, debian linux +10 more +12 moreThere's a flaw in libxml2's xmllint in versions before 2.9.11. An attacker who is able to submit...CVE-2021-3516Fix available7.8 High
- gnome file-roller, fedoraproject fedora +1 morefr-archive-libarchive.c in GNOME file-roller through 3.38.0, as used by GNOME Shell and other...CVE-2020-36314Fix available3.9 Low
- gnome gnome-autoar, fedoraproject fedora +1 moreautoar-extractor.c in GNOME gnome-autoar before 0.3.1, as used by GNOME Shell, Nautilus, and...CVE-2021-28650Fix available5.5 Medium
- gnome glib, broadcom brocade fabric operating system firmware, debian linux +4 more +6 moreAn issue was discovered in GNOME GLib before 2.66.8. When g_file_replace() is used with...CVE-2021-28153Fix available5.3 Medium
- gnome gdk-pixbuf, fedoraproject fedora +1 moreA flaw was found in gdk-pixbuf in versions before 2.42.0. An integer wraparound leading to an out...CVE-2021-20240Fix available8.8 High
- gnome glib, broadcom brocade fabric operating system firmware, debian linux +7 more +9 moreAn issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The function...CVE-2021-27219Fix available7.5 High
- gnome glib, broadcom brocade fabric operating system firmware, debian linux +7 more +9 moreAn issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before 2.67.4. If...CVE-2021-27218Fix available7.5 High
- gnome gnome-autoar, fedoraproject fedora +1 moreautoar-extractor.c in GNOME gnome-autoar through 0.2.4, as used by GNOME Shell, Nautilus, and...CVE-2020-36241Fix available5.5 Medium
- gnome evolution** DISPUTED ** GNOME Evolution through 3.38.3 produces a "Valid signature" message for an unknown...CVE-2021-3349Fix availableDisputed3.3 Low
- the gnome projectr gdm, gnome display manager +1 moreA flaw was found in GDM in versions prior to 3.38.2.1. A race condition in the handling of...CVE-2020-27837Fix available6.4 Medium
- gnome glib** DISPUTED ** GNOME GLib before 2.65.3 has an integer overflow, that might lead to an out-of...CVE-2020-35457Fix availableDisputed7.8 High
- gnome gdk-pixbuf, canonical ubuntu linux, fedoraproject fedora +2 moreGNOME gdk-pixbuf (aka GdkPixbuf) before 2.42.2 allows a denial of service (infinite loop) in lzw...CVE-2020-29385Fix available5.5 Medium
- gnome control centerA flaw was found in the GNOME Control Center in Red Hat Enterprise Linux 8 versions prior to 8.2,...CVE-2020-14391Fix available5.5 Medium
- gnome gdm3, display manager +1 moregdm3 would start gnome-initial-setup if it cannot contact accountserviceCVE-2020-16125Public exploitFix available7.2 High
- gnome geary, fedoraproject fedora +1 moreGNOME Geary before 3.36.3 mishandles pinned TLS certificate verification for IMAP and SMTP...CVE-2020-24661Fix available5.9 Medium
- gnome gnome-shell, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in certain configurations of GNOME gnome-shell through 3.36.4. When...CVE-2020-17489Fix available4.3 Medium
- gnome evolution-data-server, debian linux +1 moreIn GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client with...CVE-2020-16117Fix available5.9 Medium
- gnome balsa, opensuse backports sle, leap +2 moreIn GNOME Balsa before 2.6.0, a malicious server operator or man in the middle can trigger a NULL...CVE-2020-16118Fix available7.5 High
- gnome evolution-data-server, canonical ubuntu linux, debian linux +1 more +3 moreevolution-data-server (eds) through 3.36.3 has a STARTTLS buffering issue that affects SMTP and...CVE-2020-14928Fix available5.9 Medium
- [red hat] networkmanager, fedoraproject fedora +1 moreIt was found that nmcli, a command line interface to NetworkManager did not honour 802-1x.ca-path...CVE-2020-10754Fix available4.3 Medium
- gnome balsa, glib-networking, broadcom fabric operating system +3 more +5 moreIn GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips...CVE-2020-13645Fix available6.5 Medium
- gnome libcrocolibcroco through 0.6.13 has excessive recursion in cr_parser_parse_any_core in cr-parser.c,...CVE-2020-12825Fix available7.1 High
- gnome evolutionAn issue was discovered in GNOME Evolution before 3.35.91. By using the proprietary (non-RFC6068)...CVE-2020-11879Fix available6.5 Medium
- gnome file-roller, canonical ubuntu linux, debian linux +2 morefr-archive-libarchive.c in GNOME file-roller through 3.36.1 allows Directory Traversal during...CVE-2020-11736Fix available3.9 Low
- [red hat] networkmanager, debian linux +1 moreNetworkManager 0.9 and earlier allows local users to use other users' certificates or private...CVE-2012-1096Public exploit5.5 Medium
- xchat, xchat xchat-wdk, gnome gtk +2 moreHeap-based buffer overflow in Xchat-WDK before 1499-4 (2012-01-18) xchat 2.8.6 on Maemo...CVE-2012-08289.8 Critical
- gnome librsvg, canonical ubuntu linux, debian linux +3 more +5 moreIn xml.rs in GNOME librsvg before 2.46.2, a crafted SVG file with nested patterns can cause...CVE-2019-20446Fix available6.5 Medium
- gnome networkmanager, opensuse, suse linux enterprise desktop +1 more +3 moreNetworkManager 0.9.x does not pin a certificate's subject to an ESSID when 802.11X authentication...CVE-2006-7246Fix available6.8 Medium
- debian linux, gnome gthumb, linuxmint pix +2 moregthumb - security updateCVE-2019-20326Public exploitFix available7.8 High
- gnome glib, fedoraproject fedora +1 moreGSocketClient in GNOME GLib through 2.62.4 may occasionally connect directly to a target address...CVE-2020-6750Fix available5.9 Medium
- gnome networkmanager, canonical ubuntu linux, debian linux +2 more +4 moreIn NetworkManager 0.9.2.0, when a new wireless network was created with WPA/WPA2 security in...CVE-2012-2736Fix available4.4 Medium
- gnome keyring, gnome-keyring, debian linux +2 moregnome-keyring does not discard stored secrets when using gnome_keyring_lock_all_sync functionCVE-2012-6111Fix available7.5 High
- gnome dia, fedoraproject fedora, opensuse leap +2 moreWhen GNOME Dia before 2019-11-27 is launched with a filename argument that is not a valid...CVE-2019-19451Fix available5.5 Medium
- gnome gnome-font-viewerIn text_to_glyphs in sushi-font-widget.c in gnome-font-viewer 3.34.0, there is a NULL pointer...CVE-2019-19308Fix available5.5 Medium
- evolution-data-server3evolution-data-server3 3.0.3 through 3.2.1 used insecure (non-SSL) connection when attempting to...CVE-2011-33557.3 High
- gnome gnome-system-log, fedoraproject fedora +1 moregnome-system-log polkit policy allows arbitrary files on the system to be readCVE-2012-55357.5 High
- Show moreLoading…