Skip to contentGnu vulnerabilities
Products
Show 28 moreShow less
Newest
- gnu gdbBuffer overflow in the (1) DWARF (dwarfread.c) and (2) DWARF2 (dwarf2read.c) debugging code in...CVE-2006-4146Fix available5.1 Medium
- gnu binutilsBuffer overflow in getsym in tekhex.c in libbfd in Free Software Foundation GNU Binutils before...CVE-2006-2362Public exploitFix availableEPSS 14.5%7.5 High
- gnu gccfold_binary in fold-const.c in GNU Compiler Collection (gcc) 4.1 improperly handles pointer...CVE-2006-19022.1 Low
- gnu mailmanCross-site scripting (XSS) vulnerability in the private archive script (private.py) in GNU...CVE-2006-17122.6 Low
- gnu mailmanThe attachment scrubber (Scrubber.py) in Mailman 2.1.5 and earlier, when using Python's library...CVE-2006-0052Fix available5.0 Medium
- gnu privacy guardgpg in GnuPG before 1.4.2.2 does not properly verify non-detached signatures, which allows...CVE-2006-0049Fix available5.0 Medium
- gnu tarBuffer overflow in tar 1.14 through 1.15.90 allows user-assisted attackers to cause a denial of...CVE-2006-0300Fix available5.1 Medium
- gnu privacy guardgpgv in GnuPG before 1.4.2.1, when using unattended signature verification, returns a 0 exit code...CVE-2006-0455Public exploitFix available4.6 Medium
- gnu lshunix_random.c in lshd for lsh 2.0.1 leaks file descriptors related to the randomness generator,...CVE-2006-0353Fix available3.6 Low
- gnu phpbookDirect static code injection vulnerability in phpBook 1.3.2 and earlier allows remote attackers...CVE-2006-0075Public exploit7.5 High
- gnu binutils, canonical ubuntu linux +1 moreBuffer overflow in reset_vars in config/tc-crx.c in the GNU as (gas) assembler in Free Software...CVE-2005-4808Fix available7.6 High
- gnu binutils, canonical ubuntu linux +1 moreStack-based buffer overflow in the as_bad function in messages.c in the GNU as (gas) assembler in...CVE-2005-4807Public exploitFix availableEPSS 12.1%7.5 High
- gnu tar, redhat enterprise linux, enterprise linux desktop +1 more +3 moreThe original patch for a GNU tar directory traversal vulnerability (CVE-2002-0399) in Red Hat...CVE-2005-1918Fix available2.6 Low
- gnu cpioBuffer overflow in cpio 2.6-8.FC4 on 64-bit platforms, when creating a cpio archive, allows local...CVE-2005-4268Fix available3.7 Low
- gnu mailmanMailman 2.1.4 through 2.1.6 allows remote attackers to cause a denial of service via a message...CVE-2005-41537.8 High
- gnu gnump3dDirectory traversal vulnerability in GNU Gnump3d before 2.9.8 has unknown impact via "CGI...CVE-2005-33556.4 Medium
- gnu gnump3dGNU Gnump3d before 2.9.8 allows local users to modify or delete arbitrary files via a symlink...CVE-2005-33491.9 Low
- gnu mailmanScrubber.py in Mailman 2.1.5-8 does not properly handle UTF8 character encodings in filenames of...CVE-2005-35735.0 Medium
- gnu gnump3dCross-site scripting (XSS) vulnerability in GNUMP3D before 2.9.6 allows remote attackers to...CVE-2005-34254.3 Medium
- gnu gnump3dCross-site scripting (XSS) vulnerability in GNUMP3D before 2.9.5 allows remote attackers to...CVE-2005-34244.3 Medium
- gnu gnump3dDirectory traversal vulnerability in GNUMP3D before 2.9.6 allows remote attackers to read...CVE-2005-31235.0 Medium
- gnu cfengineThe (1) cfmailfilter and (2) cfcron.in files for cfengine 1.6.5 allow local users to overwrite...CVE-2005-31372.1 Low
- gnu cfengine, debian linux +1 morecfengine 1.6.5 and 2.1.16 allows local users to overwrite arbitrary files via a symlink attack on...CVE-2005-29602.1 Low
- gnu texinfoThe sort_offline function for texindex in texinfo 4.8 and earlier allows local users to overwrite...CVE-2005-3011Fix available1.2 Low
- gnu mailutilsFormat string vulnerability in search.c in the imap4d server in GNU Mailutils 0.6 allows remote...CVE-2005-2878Public exploitFix availableEPSS 14.6%7.5 High
- gnu tarTar 1.15.1 does not properly warn the user when extracting setuid or setgid files, which may...CVE-2005-2541Fix available10.0 High
- gnu phpbookCross-site scripting (XSS) vulnerability in guestbook.php in phpBook 1.46 allows remote attackers...CVE-2005-2397Public exploit4.3 Medium
- gnu gnatsgen-index in GNATS 4.0, 4.1.0, and possibly earlier versions, when installed setuid, does not...CVE-2005-21802.1 Low
- gnu mailutilsThe sql_escape_string function in auth/sql.c for the mailutils SQL authentication module does not...CVE-2005-1824Fix available7.5 High
- gnu mailutilsFormat string vulnerability in imap4d server in GNU Mailutils 0.5 and 0.6, and other versions...CVE-2005-1523Public exploitFix available7.5 High
- gnu mailutilsThe imap4d server for GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows...CVE-2005-1522Fix available5.0 Medium
- gnu mailutilsInteger overflow in the fetch_io function of the imap4d server in GNU Mailutils 0.5 and 0.6, and...CVE-2005-1521Fix available7.5 High
- gnu mailutilsBuffer overflow in the header_get_field_name function in header.c for GNU Mailutils 0.5 and 0.6,...CVE-2005-1520Public exploitFix available7.5 High
- gnu gdbgdb before 6.3 searches the current working directory to load the .gdbinit configuration file,...CVE-2005-1705Fix available7.2 High
- gnu gdbInteger overflow in the Binary File Descriptor (BFD) library for gdb before 6.3, binutils,...CVE-2005-1704Fix available4.6 Medium
- gnu gzip, canonical ubuntu linux +1 morezgrep in gzip before 1.3.5 does not properly sanitize arguments, which allows local users to...CVE-2005-0758Fix available4.6 Medium
- gnu gnutlsThe "record packet parsing" in GnuTLS 1.2 before 1.2.3 and 1.0 before 1.0.25 allows remote...CVE-2005-1431Fix available5.0 Medium
- gnu cpioDirectory traversal vulnerability in cpio 2.6 and earlier allows remote attackers to write to...CVE-2005-1229Fix available4.6 Medium
- gnu gzipDirectory traversal vulnerability in gunzip -N in gzip 1.2.4 through 1.3.5 allows remote...CVE-2005-1228Fix available5.0 Medium
- gnu cpio, canonical ubuntu linux, debian linux +2 moreRace condition in cpio 2.6 and earlier allows local users to modify permissions of arbitrary...CVE-2005-1111Fix available4.7 Medium
- gnu coreutilsRace condition in Core Utilities (coreutils) 5.2.1, when (1) mkdir, (2) mknod, or (3) mkfifo is...CVE-2005-1039Fix available3.7 Low
- gnu sharutilsunshar (unshar.c) in sharutils 4.2.1 allows local users to overwrite arbitrary files via a...CVE-2005-0990Fix available2.1 Low
- gnu gzip, freebsd, gentoo linux +9 more +11 moreRace condition in gzip 1.2.4, 1.3.3, and earlier, when decompressing a gzipped file, allows local...CVE-2005-0988Fix available3.7 Low
- gnu wgetwget 1.8.x and 1.9.x does not filter or quote control characters when displaying HTTP responses...CVE-2004-1488Public exploitFix availableEPSS 11.9%5.0 Medium
- gnu wgetwget 1.8.x and 1.9.x allows a remote malicious web server to overwrite certain files via a...CVE-2004-1487Fix available5.0 Medium
- gnu mailmanDirectory traversal vulnerability in the true_path function in private.py for Mailman 2.1.5 and...CVE-2005-0202Fix available5.0 Medium
- gnu emacs, xemacs +1 moreFormat string vulnerability in the movemail utility in (1) Emacs 20.x, 21.3, and possibly other...CVE-2005-0100Fix available7.5 High
- gnu enscriptEnscript 1.6.3 does not sanitize filenames, which allows remote attackers or local users to...CVE-2004-1185Fix available7.5 High
- gnu enscript, redhat fedora core, sgi propack +1 more +3 moreThe EPSF pipe support in enscript 1.6.3 allows remote attackers or local users to execute...CVE-2004-1184Fix available4.6 Medium
- gnu mailman, ubuntu linux +1 moreThe 55_options_traceback.dpatch patch for mailman 2.1.5 in Ubuntu 4.10 displays a different error...CVE-2005-00805.0 Medium
- Show moreLoading…