Skip to contentGnu vulnerabilities
Products
Show 28 moreShow less
Newest
- gnu libredwgGNU LibreDWG BMP Image dwg.c dwg_bmp heap-based overflowCVE-2026-151824.8 Medium
- gnu patchLoop with Unreachable Exit Condition in GNU patchCVE-2026-56289Fix available4.6 Medium
- gnu patchNULL Pointer Dereference in GNU patchCVE-2026-56288Fix available4.6 Medium
- gnu wgetGNU Wget 1.25.0 Heap Buffer Overflow via HTML Attribute EncodingCVE-2026-58472Fix available6.0 Medium
- gnu wgetGNU Wget 1.25.0 Heap Buffer Overflow via convert_fname() in url.cCVE-2026-58471Fix available6.0 Medium
- gnu wgetGNU Wget 1.25.0 Integer Overflow via Content-Range Header ParsingCVE-2026-58470Fix available6.9 Medium
- gnu wgetGNU Wget 1.25.0 Heap Buffer Underread via Metalink URL ParsingCVE-2026-58469Fix available8.7 High
- gnu gzipGlobal Buffer Overflow in GNU gzipCVE-2026-41992Fix available6.9 Medium
- gnu gzipPredictable Temporary File in GNU gzipCVE-2026-41991Fix available2.0 Low
- gnu sed, rapid7 insightconnect sed plugin +1 moreArbitrary File Read in Rapid7 InsightConnect Sed PluginCVE-2026-91536.5 Medium
- gnu sed, rapid7 insightconnect sed plugin +1 moreArbitrary File Write in Rapid7 InsightConnect Sed PluginCVE-2026-91547.1 High
- gnu sed, rapid7 insightconnect sed plugin +1 moreOS Command Injection in Rapid7 InsightConnect Sed Plugin via expression parameter.CVE-2026-91558.8 High
- gnu libidnGNU libidn before 1.44 is prone to out-of-bounds reads of uninitialized memory in the ToUnicode...CVE-2026-57053Fix available4.0 Medium
- gnu sasl, debian linux +1 moreGNU SASL before 2.2.4 lacks sanitization of a short challenge in _gsasl_ntlm_client_step in the...CVE-2026-56968Fix available3.7 Low
- gnu savaneGNU Savannah Administration Savane through 3.17 uses untrusted data as part of authorization.CVE-2026-563553.7 Low
- gnu libredwgGNU libredwg Dwgbmp Utility bits.c bit_read_RC heap-based overflowCVE-2026-96056.9 Medium
- gnu libredwgGNU LibreDWG Dwgbmp Utility decode.c read_2004_compressed_section out-of-boundsCVE-2026-95304.8 Medium
- gnu libredwgGNU LibreDWG Dwggrep Utility dwggrep.c match_BLOCK_HEADER null pointer dereferenceCVE-2026-95294.8 Medium
- gnu libredwgGNU LibreDWG Dwggrep Utility dwggrep.c bit_convert_TU out-of-boundsCVE-2026-95044.8 Medium
- gnu libredwgGNU LibreDWG DWG File decode.c dwg_next_entity null pointer dereferenceCVE-2026-95034.8 Medium
- gnu libredwgGNU LibreDWG Dwgread Utility decode.c decompress_R2004_section heap-based overflowCVE-2026-95024.8 Medium
- gnu libredwgGNU LibreDWG Dwgread Utility decode.c decompress_R2004_section assertionCVE-2026-95014.8 Medium
- gnu libredwgGNU LibreDWG Dwgread Utility decode.c read_2004_compressed_section heap-based overflowCVE-2026-95004.8 Medium
- gnu saslIn GNU SASL before 2.2.3, DIGEST-MD5 has a NULL pointer dereference affecting both clients and...CVE-2026-48829Fix available7.5 High
- gnu gnutls, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +36 more +38 moreGnutls: gnutls: authentication bypass via nul character in usernameCVE-2026-42010Fix available7.1 High
- gnu gnutls, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +32 more +34 moreGnutls: gnutls: denial of service via dtls zero-length fragmentCVE-2026-33845Fix available7.5 High
- gnu gnutls, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +13 more +15 moreGnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp responseCVE-2026-3832Fix available3.7 Low
- gnu gnutls, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +31 more +33 moreGnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparisonCVE-2026-3833Fix available6.5 Medium
- gnu gnutls, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +46 more +48 moreGnutls: gnutls: denial of service via dtls packet reordering vulnerabilityCVE-2026-42009Fix available7.5 High
- gnu wget2wget2 Improper Certificate ValidationCVE-2026-18584.8 Medium
- gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreBuffer overread in ns_printrrf with corrupted RDATA fieldCVE-2026-6238Fix available6.5 Medium
- gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 morePotential buffer overflow in ns_sprintrrf TSIG handling pathCVE-2026-5435Fix available7.3 High
- gnu emacs, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreEmacs: emacs: memory corruption vulnerability when processing svg cssCVE-2026-6861Fix available6.1 Medium
- gnu binutils, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreBinutils: binutils: arbitrary code execution via malformed xcoff object file processingCVE-2026-6846Fix available7.8 High
- gnu binutils, red hat enterprise linux 10, enterprise linux 7 +7 more +9 moreBinutils: binutils: denial of service vulnerabilities in readelf via crafted elf filesCVE-2026-6844Fix available5.5 Medium
- gnu nano, red hat enterprise linux 10, enterprise linux 6 +6 more +8 moreNano: nano: format string vulnerability leads to denial of serviceCVE-2026-6843Fix available5.5 Medium
- gnu binutils, red hat enterprise linux 10, enterprise linux 6 +8 more +10 moreBinutils: binutils: denial of service via crafted elf fileCVE-2026-6845Fix available5.0 Medium
- gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 morescanf %mc off-by-one heap buffer overflowCVE-2026-5450Fix available9.8 Critical
- gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 morePotential buffer under-read in ungetwcCVE-2026-5928Fix available7.5 High
- gnu sedRace Condition in GNU SedCVE-2026-5958Fix available2.1 Low
- gnu tar, red hat discovery 2, enterprise linux 10 +7 more +9 moreTar: tar: hidden file injection via crafted archivesCVE-2026-5704Fix available5.0 Medium
- gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreiconv crash due to assertion failure with untrusted inputCVE-2026-4046Fix available7.5 High
- gnu binutils, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreBinutils: out-of-bounds read in xcoff relocation processing in gnu binutils bfd libraryCVE-2026-4647Fix available6.1 Medium
- gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moregethostbyaddr and gethostbyaddr_r return invalid DNS hostnamesCVE-2026-4438Fix available5.4 Medium
- gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moregethostbyaddr and gethostbyaddr_r may incorrectly handle DNS responseCVE-2026-4437Fix available7.5 High
- gnu ncurses, siemens ruggedcom rst2428p +1 morencurses v6.5 and v6.4 are vulnerable to Buffer Overflow in progs/infocmp.c, function...CVE-2025-69720Public exploitFix available7.3 High
- gnu inetutilstelnet in GNU inetutils through 2.7 allows servers to read arbitrary environment variables from...CVE-2026-32772Fix available3.4 Low
- gnu inetutilstelnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Set Local...CVE-2026-32746Public exploitFix availableEPSS 45.3%9.8 Critical
- gnu libredwgHeap buffer overflow vulnerability in LibreDWG versions v0.13.3.7571 up to v0.13.3.7835 allows a...CVE-2025-611546.5 Medium
- gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreCalling NSS-backed functions that support caching via nscd may call the
nscd client side code...CVE-2026-3904Fix available6.2 Medium
- Show moreLoading…