Skip to contentGnu vulnerabilities
Products
Show 28 moreShow less
Newest
- gnu screenGNU screen 4.0.3 creates the /tmp/screen-exchange temporary file with world-readable permissions,...CVE-2009-1214Fix available4.9 Medium
- gnu classpathThe gnu.java.security.util.PRNG class in GNU Classpath 0.97.2 and earlier uses a predictable seed...CVE-2008-5659Public exploit7.5 High
- gnu escriptMultiple buffer overflows in the (1) recognize_eps_file function (src/psgen.c) and (2)...CVE-2008-5078Fix available6.8 Medium
- gnu gnutls, canonical ubuntu linux, debian linux +4 more +6 moreThe _gnutls_x509_verify_certificate function in lib/x509/verify.c in libgnutls in GnuTLS before 2...CVE-2008-4989Fix available5.9 Medium
- gnu enscriptStack-based buffer overflow in the read_special_escape function in src/psgen.c in GNU Enscript 1...CVE-2008-3863Fix available7.6 High
- gnu ibackupibackup 2.27 allows local users to overwrite arbitrary files via a symlink attack on temporary...CVE-2008-44757.2 High
- gnu adnsGNU adns 1.4 and earlier uses a fixed source port and sequential transaction IDs for DNS requests...CVE-2008-4100Fix available6.4 Medium
- gnu edHeap-based buffer overflow in the strip_escapes function in signal.c in GNU ed before 1.0 allows...CVE-2008-3916Fix available9.3 High
- gnu grub legacyGrub Legacy 0.97 and earlier stores pre-boot authentication passwords in the BIOS Keyboard buffer...CVE-2008-38962.1 Low
- gnu gnutlsUse-after-free vulnerability in the _gnutls_handshake_hash_buffers_clear function in lib...CVE-2008-23777.6 High
- gnu coreutilsThe default configuration of su in /etc/pam.d/su in GNU coreutils 5.2.1 allows local users to...CVE-2008-1946Fix available4.4 Medium
- gnu gnutlsInteger signedness error in the _gnutls_ciphertext2compressed function in lib/gnutls_cipher.c in...CVE-2008-19505.0 Medium
- gnu gnutlsThe _gnutls_recv_client_kx_message function in lib/gnutls_kx.c in libgnutls in gnutls-serv in...CVE-2008-19499.3 High
- gnu gnutlsThe _gnutls_server_name_recv_params function in lib/ext_server_name.c in libgnutls in gnutls-serv...CVE-2008-1948EPSS 12.0%10.0 High
- gnu emacs, xemacs +1 moreEmacs 21 and XEmacs automatically load and execute .flc (fast lock) files that are associated...CVE-2008-2142Fix available6.8 Medium
- gnu emacs, sccs +1 morevcdiff in Emacs 20.7 to 22.1.50, when used with SCCS, allows local users to overwrite arbitrary...CVE-2008-1694Fix available4.6 Medium
- gnu m4Unspecified vulnerability in GNU m4 before 1.4.11 might allow context-dependent attackers to...CVE-2008-1688Fix available7.5 High
- gnu m4The (1) maketemp and (2) mkstemp builtin functions in GNU m4 before 1.4.11 do not quote their...CVE-2008-1687Fix available7.5 High
- gnu gcc** DISPUTED ** gcc 4.2.0 through 4.3.0 in GNU Compiler Collection, when casts are not used,...CVE-2008-1685Disputed6.8 Medium
- gnu gccgcc 4.3.x does not generate a cld instruction while compiling functions used for string...CVE-2008-1367Fix available7.5 High
- gnu libcdioStack-based buffer overflow in the print_iso9660_recurse function in iso-info (src/iso-info.c) in...CVE-2007-6613Public exploitFix availableEPSS 12.7%5.0 Medium
- gnu emacsStack-based buffer overflow in emacs allows user-assisted attackers to cause a denial of service ...CVE-2007-6109Fix available10.0 High
- gnu gnump3dgnump3d 2.9final does not apply password protection to its plugins, which might allow remote...CVE-2007-6130Fix available5.0 Medium
- gnu emacsThe hack-local-variables function in Emacs before 22.2, when enable-local-variables is set to ...CVE-2007-5795Public exploitFix available6.3 Medium
- gnu trampThe (1) tramp-make-temp-file and (2) tramp-make-tramp-temp-file functions in Tramp 2.1.10...CVE-2007-53776.9 Medium
- gnu tar, canonical ubuntu linux, debian linux +2 moreBuffer overflow in the safer_name_suffix function in GNU tar has unspecified attack vectors and...CVE-2007-4476Public exploitFix availableEPSS 14.9%7.5 High
- gnu gimpThe (1) psp (aka .tub), (2) bmp, (3) pcx, and (4) psd plugins in gimp allow user-assisted remote...CVE-2007-3741Fix available4.3 Medium
- gnu tarDirectory traversal vulnerability in the contains_dot_dot function in src/names.c in GNU tar...CVE-2007-4131Fix available6.8 Medium
- gnu emacs, debian linux +1 moreEmacs 21 allows user-assisted attackers to cause a denial of service (crash) via certain crafted...CVE-2007-2833Fix available7.8 High
- gnu screen** DISPUTED ** GNU screen 4.0.3 allows local users to unlock the screen via a CTRL-C sequence at...CVE-2007-3048Public exploitDisputed7.2 High
- gnu findutilsHeap-based buffer overflow in the visit_old_format function in locate/locate.c in locate in GNU...CVE-2007-2452Fix available6.0 Medium
- gnu gnats, yngve svendsen gnatsweb +1 moreCross-site scripting (XSS) vulnerability in gnatsweb.pl in Gnatsweb 4.00 and Gnats 4.1.99 allows...CVE-2007-2808Fix available4.3 Medium
- gnu flash playerserver/parser/sprite_definition.cpp in GNU Gnash (aka GNU Flash Player) 0.7.2 allows remote...CVE-2007-2500Fix available10.0 High
- gnu iceweasel, mozilla firefox +1 more(1) Mozilla Firefox 2.0.0.3 and (2) GNU IceWeasel 2.0.0.3 allow remote attackers to cause a...CVE-2007-21627.8 High
- gnu libtool-ltdlUntrusted search path vulnerability in the libtool-ltdl library (libltdl.so) 1.5.22-2.3 in Fedora...CVE-2006-71516.6 Medium
- gnu gnumailGNUMail 1.1.2 and earlier does not properly use the --status-fd argument when invoking GnuPG,...CVE-2007-12695.0 Medium
- gnu gpgme, gnupg +1 moreGnuPG 1.4.6 and earlier and GPGME before 1.1.4, when run from the command line, does not visually...CVE-2007-1263Public exploitFix available5.0 Medium
- gnu edGNU ed before 0.3 allows local users to overwrite arbitrary files via a symlink attack on...CVE-2006-6939Fix available4.6 Medium
- gnu wgetThe ftp_syst function in ftp-basic.c in Free Software Foundation (FSF) GNU wget 1.10.2 allows...CVE-2006-6719Public exploitFix available5.0 Medium
- gnu privacy guard, gpg4win, redhat enterprise linux +4 more +6 moreA "stack overwrite" vulnerability in GnuPG (gpg) 1.x before 1.4.6, 2.x before 2.0.2, and 1.9.0...CVE-2006-6235Fix available10.0 High
- gnu radiusFormat string vulnerability in the sqllog function in the SQL accounting code for radiusd in GNU...CVE-2006-418110.0 High
- gnu tarGNU tar 1.16 and 1.15.1, and possibly other versions, allows user-assisted attackers to overwrite...CVE-2006-6097Public exploitFix availableEPSS 11.7%4.0 Medium
- gnu gvStack-based buffer overflow in the ps_gettext function in ps.c for GNU gv 3.6.2, and possibly...CVE-2006-5864Public exploitFix availableEPSS 16.1%5.1 Medium
- gnu texinfoBuffer overflow in the readline function in util/texindex.c, as used by the (1) texi2dvi and (2)...CVE-2006-4810Fix available4.6 Medium
- gnu screenMultiple unspecified vulnerabilities in the "utf8 combining characters handling" ...CVE-2006-4573Fix available2.6 Low
- gnu mailman** DISPUTED ** Format string vulnerability in Mailman before 2.1.9 allows attackers to execute...CVE-2006-2191Disputed7.5 High
- gnu gnutlsverify.c in GnuTLS before 1.4.4, when using an RSA key with exponent 3, does not properly handle...CVE-2006-4790Fix available5.0 Medium
- gnu mailmanCRLF injection vulnerability in Utils.py in Mailman before 2.1.9rc1 allows remote attackers to...CVE-2006-4624Fix available2.6 Low
- gnu mailmanMultiple cross-site scripting (XSS) vulnerabilities in Mailman before 2.1.9rc1 allow remote...CVE-2006-3636Public exploit6.8 Medium
- gnu mailmanMailman before 2.1.9rc1 allows remote attackers to cause a denial of service via unspecified...CVE-2006-29415.0 Medium
- Show moreLoading…