Skip to contentGnu vulnerabilities
Products
Show 28 moreShow less
Newest
- gnu fileutils, washington university wu-ftpd +1 moreAn integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a...CVE-2003-0853Public exploitFix availableEPSS 11.1%5.0 Medium
- gnu cfengineBuffer overflow in net.c for cfengine 2.x before 2.0.8 allows remote attackers to execute...CVE-2003-0849Public exploitEPSS 10.9%7.5 High
- gnu lshlsh daemon (lshd) does not properly return from certain functions in (1) read_line.c, (2)...CVE-2003-0826Public exploitFix availableEPSS 12.1%7.5 High
- gnu gzip, debian linux +1 moreznew in the gzip package allows local users to overwrite arbitrary files via a symlink attack on...CVE-2003-0367Fix available2.1 Low
- gnu privacy guardThe key validation code in GnuPG before 1.2.2 does not properly determine the validity of keys...CVE-2003-025510.0 High
- gnu glibc, cray unicos, freebsd +10 more +12 moreInteger overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR ...CVE-2003-0028Fix availableEPSS 15.0%7.5 High
- gnu mailmanMailman Cross-site scripting (XSS) vulnerabilityCVE-2003-0038Public exploitFix available4.3 Medium
- gnu data display debuggerBuffer overflow in the GNU DataDisplay Debugger (DDD) 3.3.1 allows local users to execute...CVE-2002-20997.2 High
- gnu wget, sun cobalt raq xtr +1 moreDirectory traversal vulnerability in wget before 1.8.2-4 allows a remote FTP server to create or...CVE-2002-1344Fix available5.0 Medium
- apple mac os x, mac os x server, gnu glibc +1 more +3 moreThe Sun RPC functionality in multiple libc implementations does not provide a time-out mechanism...CVE-2002-12655.0 Medium
- gnu tarGNU tar 1.13.19 and other versions before 1.13.25 allows remote attackers to overwrite arbitrary...CVE-2002-1216Fix available5.0 Medium
- gnu glibcThe BIND 4 and BIND 8.2.x stub resolver libraries, and other libraries such as glibc 2.2.5 and...CVE-2002-1146Fix available5.0 Medium
- gnu tarDirectory traversal vulnerability in GNU tar 1.13.19 through 1.13.25, and possibly later versions...CVE-2002-03995.0 Medium
- gnu mailmanCross-site scripting vulnerability in Mailman before 2.0.12 allows remote attackers to execute...CVE-2002-0855Public exploit7.5 High
- gnu glibc, isc bind +1 moreBuffer overflow in DNS resolver functions that perform lookup of network names and addresses, as...CVE-2002-0684Fix available7.5 High
- gnu fileutilsRace condition in the recursive (1) directory deletion and (2) directory move in GNU File...CVE-2002-04351.2 Low
- gnu mailmanPipermail in Mailman stores private mail messages with predictable filenames in a world...CVE-2002-03892.1 Low
- gnu mailmanCross-site scripting vulnerabilities in Mailman before 2.0.11 allow remote attackers to execute...CVE-2002-0388Public exploit7.5 High
- gnu sharutilsuudecode, as available in the sharutils package before 4.2.1, does not check whether the filename...CVE-2002-01787.2 High
- gnu chessBuffer overflow in GNU Chess (gnuchess) 5.02 and earlier, if modified or used in a networked...CVE-2002-02047.5 High
- gnu screenBuffer overflow in the Braille module for GNU screen 3.9.11, when HAVE_BRAILLE is defined, allows...CVE-2002-1602Public exploit4.6 Medium
- gnu radius, freeradius, icradius +3 more +5 moreMultiple RADIUS implementations do not properly validate the Vendor-Length of the Vendor-Specific...CVE-2001-13775.0 Medium
- ascend radius, freeradius, icradius +3 more +5 moreBuffer overflow in digest calculation function of multiple RADIUS implementations allows remote...CVE-2001-13767.5 High
- gnu groffBuffer overflow in the preprocessor in groff 1.16 and earlier allows remote attackers to gain...CVE-2002-00037.5 High
- gnu enscript, debian linux +1 moreGNU Enscript 1.6.1 and earlier allows local users to overwrite arbitrary files of the Enscript...CVE-2002-00443.6 Low
- gnu mailmanCross-site scripting vulnerability in Mailman email archiver before 2.08 allows attackers to...CVE-2001-08845.1 Medium
- gnu gzipBuffer overflows in gzip 1.3x, 1.2.4, and other versions might allow attackers to execute code...CVE-2001-12287.5 High
- gnu mailmanMailman 2.0.x before 2.0.6 allows remote attackers to gain access to list administrative pages...CVE-2001-11327.5 High
- gnu findutils, slackware linux +1 moreGNU locate in findutils 4.1 on Slackware 7.1 and 8.0 allows local users to gain privileges via an...CVE-2001-1036Public exploit7.2 High
- gnu privacy guardFormat string vulnerability in Gnu Privacy Guard (aka GnuPG or gpg) 1.05 and earlier can allow an...CVE-2001-0522Public exploitEPSS 13.7%7.5 High
- gnu emacs, xemacs +1 morercs2log, as used in Emacs 20.4, xemacs 21.1.10 and other versions before 21.4, and possibly other...CVE-2001-13011.2 Low
- gnu groff, jgroff +1 moreFormat string vulnerability in pic utility in groff 1.16.1 and other versions, and jgroff before...CVE-2001-1022Public exploitEPSS 11.4%7.5 High
- gnu tarDirectory traversal vulnerability in GNU tar 1.13.19 and earlier allows local users to overwrite...CVE-2001-12672.1 Low
- gnu mailmanVulnerability in Mailman 2.0.1 and earlier allows list administrators to obtain user passwords.CVE-2001-02904.6 Medium
- gnu privacy guardgpg (aka GnuPG) 1.0.4 and other versions imports both public and private keys from public key...CVE-2001-00725.0 Medium
- gnu privacy guardgpg (aka GnuPG) 1.0.4 and other versions does not properly verify detached signatures, which...CVE-2001-00712.1 Low
- gnu edGNU ed before 0.2-18.1 allows local users to overwrite the files of other users via a symlink...CVE-2000-11374.6 Medium
- gnu privacy guardGnuPG (gpg) 1.0.3 does not properly check all signatures of a file containing multiple documents,...CVE-2000-09747.5 High
- gnu glibcglibc2 does not properly clear the LD_DEBUG_OUTPUT and LD_DEBUG environmental variables when a...CVE-2000-09591.2 Low
- gnu cfengineFormat string vulnerability in cfd daemon in GNU CFEngine before 1.6.0a11 allows attackers to...CVE-2000-094710.0 High
- gnu groffGNU Groff uses the current working directory to find a device description file, which allows a...CVE-2000-080310.0 High
- gnu mailmanMailman 1.1 allows list administrators to execute arbitrary commands via shell metacharacters in...CVE-2000-08617.2 High
- gnu glibcThe unsetenv function in glibc 2.1.1 does not properly unset an environmental variable if the...CVE-2000-0824Public exploit7.2 High
- gnu gcc, g\+\+ +1 moreThe -ftrapv compiler option in gcc and g++ 3.3.3 and earlier does not handle all types of integer...CVE-2000-1219Fix available7.5 High
- gnu uservGNU userv 1.0.0 and earlier does not properly perform file descriptor swapping, which can corrupt...CVE-2000-07864.6 Medium
- gnu mailman, conectiva linux +1 moreThe wrapper program in mailman 2.0beta3 and 2.0beta4 does not properly cleanse untrusted format...CVE-2000-07014.6 Medium
- gnu glibc, isc bind +1 moreThe resolver in glibc 2.1.3 uses predictable IDs, which allows a local attacker to spoof DNS...CVE-2000-03357.5 High
- gnu emacsread-passwd and other Lisp functions in Emacs 20 do not properly clear the history of recently...CVE-2000-02714.6 Medium
- gnu emacsThe make-temp-name Lisp function in Emacs 20 creates temporary files with predictable names,...CVE-2000-02703.6 Low
- gnu emacsEmacs 20 does not properly set permissions for a slave PTY device when starting a new subprocess,...CVE-2000-02692.1 Low
- Show moreLoading…