Skip to content
Noroxi

gentoo records

198 published records for vendor gentoo.

Researcher profile

Entered KEV
0 · 0%
Weaponized
5 · 2.5%
Pre-auth RCE
52
With a fix record
57.6%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 18
  3. 20
  4. 22
  5. 23
  6. 24
  7. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

198 records
  • CVE-2004-0608
    62This week

    The Unreal Engine, as used in DeusEx 1.112fm and earlier, Devastation 390 and earlier, Mobile Forces 20000 and earlier, Nerf Arena Blast 1.2

    CriticalCVSS 10.0WeaponizedEPSS 73%

    nerf arena blast · nerf arena blastDec 6, 2004

  • CVE-2002-1337
    62This week

    Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related t

    CriticalCVSS 10.0Proof of conceptEPSS 72%

    sendmail · sendmailMar 7, 2003

  • CVE-2024-12084
    61This week

    Rsync: heap buffer overflow in rsync due to improper checksum length handling

    CriticalCVSS 9.8Proof of conceptEPSS 72%

    samba · rsyncJan 15, 2025

  • CVE-2003-0694
    60This week

    The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using

    CriticalCVSS 10.0WeaponizedEPSS 66%

    sendmail · advanced message serverOct 6, 2003

  • CVE-2004-1037
    59Plan

    The search function in TWiki 20030201 allows remote attackers to execute arbitrary commands via shell metacharacters in a search string.

    CriticalCVSS 10.0WeaponizedEPSS 61%

    twiki · twikiMar 1, 2005

  • CVE-2023-48795
    51Plan

    The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypas

    MediumCVSS 5.9Proof of conceptEPSS 93%

    ssh · sshDec 18, 2023

  • CVE-2004-0493
    50Plan

    The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memory exhaustion), and p

    MediumCVSS 6.4Proof of conceptEPSS 84%

    apache · http serverAug 6, 2004

  • CVE-2004-0932
    49Plan

    McAfee Anti-Virus Engine DATS drivers before 4398 released on Oct 13th 2004 and DATS Driver before 4397 October 6th 2004 allows remote attac

    HighCVSS 7.5Proof of conceptEPSS 63%

    ca · etrust antivirusJan 27, 2005

  • CVE-2004-0990
    48Plan

    Integer overflow in GD Graphics Library libgd 2.0.28 (libgd2), and possibly other versions, allows remote attackers to cause a denial of ser

    CriticalCVSS 10.0Proof of conceptEPSS 28%

    gd graphics library · gdlibMar 1, 2005

  • CVE-2004-0386
    48Plan

    Buffer overflow in the HTTP parser for MPlayer 1.0pre3 and earlier, 0.90, and 0.91 allows remote attackers to execute arbitrary code via a l

    CriticalCVSS 10.0Proof of conceptEPSS 26%

    mplayer · mplayerMay 4, 2004

  • CVE-2004-0557
    48Plan

    Multiple buffer overflows in the st_wavstartread function in wav.c for Sound eXchange (SoX) 12.17.2 through 12.17.4 allow remote attackers t

    CriticalCVSS 10.0Proof of conceptEPSS 25%

    sox · soxAug 6, 2004

  • CVE-2004-0333
    47Plan

    Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other packages, allows remote attackers

    CriticalCVSS 10.0Proof of conceptEPSS 24%

    uudeview · uudeviewNov 23, 2004

  • CVE-2007-2194
    46Plan

    Stack-based buffer overflow in XnView 1.90.3 allows user-assisted remote attackers to execute arbitrary code via a crafted XPM file with a l

    CriticalCVSS 10.0Proof of conceptEPSS 18%

    gentoo · xnviewApr 24, 2007

  • CVE-2012-2982
    45Plan

    file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary commands via an invalid character in a path

    MediumCVSS 6.5WeaponizedEPSS 61%

    gentoo · webminSep 11, 2012

  • CVE-2004-0416
    44Plan

    Double free vulnerability for the error_prog_name string in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attacker

    CriticalCVSS 10.0Proof of conceptEPSS 13%

    cvs · cvsAug 6, 2004

  • CVE-2004-1304
    43Plan

    Stack-based buffer overflow in the ELF header parsing code in file before 4.12 allows attackers to execute arbitrary code via a crafted ELF

    CriticalCVSS 10.0Proof of conceptEPSS 11%

    file · fileJan 10, 2005

  • CVE-2004-0888
    43Plan

    Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote atta

    CriticalCVSS 10.0No exploitEPSS 9%

    kde · kofficeJan 27, 2005

  • CVE-2004-0914
    43Plan

    Multiple vulnerabilities in libXpm for 6.8.1 and earlier, as used in XFree86 and other packages, include (1) multiple integer overflows, (2)

    CriticalCVSS 10.0No exploitEPSS 8%

    lesstif · lesstifJan 10, 2005

  • CVE-2004-1029
    42Plan

    The Sun Java Plugin capability in Java 2 Runtime Environment (JRE) 1.4.2_01, 1.4.2_04, and possibly earlier versions, does not properly rest

    CriticalCVSS 9.3Proof of conceptEPSS 17%

    sun · jdkMar 1, 2005

  • CVE-2004-0947
    42Plan

    Buffer overflow in unarj before 2.63a-r2 allows remote attackers to execute arbitrary code via an arj archive that contains long filenames.

    CriticalCVSS 10.0No exploitEPSS 7%

    arj software inc. · unarjFeb 9, 2005

  • CVE-2004-0891
    42Plan

    Buffer overflow in the MSN protocol handler for gaim 0.79 to 1.0.1 allows remote attackers to cause a denial of service (application crash)

    CriticalCVSS 10.0No exploitEPSS 6%

    rob flynn · gaimJan 27, 2005

  • CVE-2004-0889
    42Plan

    Multiple integer overflows in xpdf 3.0, and other packages that use xpdf code such as CUPS, allow remote attackers to cause a denial of serv

    CriticalCVSS 10.0No exploitEPSS 6%

    xpdf · xpdfJan 27, 2005

  • CVE-2004-0981
    42Plan

    Buffer overflow in the EXIF parsing routine in ImageMagick before 6.1.0 allows remote attackers to execute arbitrary code via a certain imag

    CriticalCVSS 10.0No exploitEPSS 5%

    imagemagick · imagemagickFeb 9, 2005

  • CVE-2004-1034
    42Plan

    Buffer overflow in the http_open function in Kaffeine before 0.5, whose code is also used in gxine before 0.3.3, allows remote attackers to

    CriticalCVSS 10.0No exploitEPSS 5%

    kaffeine · kaffeine playerMar 1, 2005

  • CVE-2004-0418
    42Plan

    serve_notify in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle empty data lines, which may allow remote att

    CriticalCVSS 10.0No exploitEPSS 5%

    cvs · cvsAug 6, 2004