Skip to content
Noroxi

GNOME records

367 published records for vendor gnome.

Researcher profile

Entered KEV
0 · 0%
Weaponized
3 · 0.8%
Pre-auth RCE
53
With a fix record
83.1%
Median publish → KEV
No record has entered KEV

Records by year

  1. 16
  2. 17
  3. 18
  4. 19
  5. 20
  6. 21
  7. 22
  8. 23
  9. 24
  10. 25
  11. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

367 records
  • CVE-2017-1000083
    46Plan

    backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1 allows remote attackers to execute arbitrary com

    HighCVSS 7.8WeaponizedEPSS 51%

    gnome · evinceSep 5, 2017

  • CVE-2017-2885
    46Plan

    An exploitable stack based buffer overflow vulnerability exists in the GNOME libsoup 2.58.

    CriticalCVSS 9.8No exploitEPSS 23%

    gnome · libsoupApr 24, 2018

  • CVE-2008-3533
    46Plan

    Format string vulnerability in the window_error function in yelp-window.c in yelp in Gnome after 2.19.90 and before 2.24 allows remote attac

    CriticalCVSS 10.0Proof of conceptEPSS 19%

    gnome · yelpAug 18, 2008

  • CVE-2000-0491
    45Plan

    Buffer overflow in the XDMCP parsing code of GNOME gdm, KDE kdm, and wdm allows remote attackers to execute arbitrary commands or cause a de

    CriticalCVSS 10.0Proof of conceptEPSS 17%

    gnome · gdmMay 24, 2000

  • CVE-2003-0407
    45Plan

    Buffer overflow in gbnserver for Gnome Batalla Naval 1.0.4 allows remote attackers to execute arbitrary code via a long connection string.

    CriticalCVSS 10.0Proof of conceptEPSS 16%

    gnome · batalla navalJun 30, 2003

  • CVE-2004-0888
    43Plan

    Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote atta

    CriticalCVSS 10.0No exploitEPSS 9%

    kde · kofficeJan 27, 2005

  • CVE-2004-0889
    42Plan

    Multiple integer overflows in xpdf 3.0, and other packages that use xpdf code such as CUPS, allow remote attackers to cause a denial of serv

    CriticalCVSS 10.0No exploitEPSS 6%

    xpdf · xpdfJan 27, 2005

  • CVE-2019-1010238
    41Plan

    Gnome Pango 1.42 and later is affected by: Buffer Overflow.

    CriticalCVSS 9.8No exploitEPSS 6%

    gnome · pangoJul 19, 2019

  • CVE-2009-3608
    40Plan

    Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdf

    CriticalCVSS 9.3No exploitEPSS 10%

    poppler · popplerOct 21, 2009

  • CVE-2009-3604
    40Plan

    The Splash::drawImage function in Splash.cc in Xpdf 2.x and 3.x before 3.02pl4, and Poppler 0.x, as used in GPdf and kdegraphics KPDF, does

    CriticalCVSS 9.3No exploitEPSS 8%

    kde · kpdfOct 21, 2009

  • CVE-2017-5885
    40Plan

    Multiple integer overflows in the (1) vnc_connection_server_message and (2) vnc_color_map_set functions in gtk-vnc before 0.7.0 allow remote

    CriticalCVSS 9.8No exploitEPSS 4%

    fedoraproject · fedoraFeb 28, 2017

  • CVE-2018-16428
    40Plan

    In GNOME GLib 2.56.1, g_markup_parse_context_end_parse() in gmarkup.c has a NULL pointer dereference.

    CriticalCVSS 9.8No exploitEPSS 4%

    gnome · glibSep 3, 2018

  • CVE-2012-0828
    40Plan

    Heap-based buffer overflow in Xchat-WDK before 1499-4 (2012-01-18) xchat 2.8.6 on Maemo architecture could allow remote attackers to cause a

    CriticalCVSS 9.8No exploitEPSS 4%

    xchat · xchatFeb 21, 2020

  • CVE-2018-12910
    40Plan

    The get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have unspecified impact via an empty hostname.

    CriticalCVSS 9.8No exploitEPSS 4%

    gnome · libsoupJul 5, 2018

  • CVE-2022-27811
    40Plan

    GNOME OCRFeeder before 0.8.4 allows OS command injection via shell metacharacters in a PDF or image filename.

    CriticalCVSS 9.8No exploitEPSS 3%

    gnome · ocrfeederMar 23, 2022

  • CVE-2005-0102
    40Plan

    Integer overflow in camel-lock-helper in Evolution 2.0.2 and earlier allows local users or remote malicious POP3 servers to execute arbitrar

    CriticalCVSS 9.8No exploitEPSS 3%

    gnome · evolutionJan 24, 2005

  • CVE-2016-10727
    40Plan

    camel/providers/imapx/camel-imapx-server.c in the IMAPx component in GNOME evolution-data-server before 3.21.2 proceeds with cleartext data

    CriticalCVSS 9.8No exploitEPSS 2%

    gnome · evolutionJul 20, 2018

  • CVE-2019-17266
    40Plan

    libsoup from versions 2.65.1 until 2.68.1 have a heap-based buffer over-read because soup_ntlm_parse_challenge() in soup-auth-ntlm.c does no

    CriticalCVSS 9.8No exploitEPSS 2%

    gnome · libsoupOct 6, 2019

  • CVE-2019-12450
    40Plan

    file_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file permissions while a copy operation is

    CriticalCVSS 9.8No exploitEPSS 2%

    gnome · glibMay 29, 2019

  • CVE-2011-2897
    40Plan

    gdk-pixbuf through 2.31.1 has GIF loader buffer overflow when initializing decompression tables due to an input validation flaw

    CriticalCVSS 9.8No exploitEPSS 1%

    gnome · gdk-pixbufNov 12, 2019

  • CVE-2018-12422
    40Plan

    addressbook/backends/ldap/e-book-backend-ldap.c in Evolution-Data-Server in GNOME Evolution through 3.29.2 might allow attackers to trigger

    CriticalCVSS 9.8No exploitEPSS 1%

    gnome · evolutionJun 15, 2018

  • CVE-2011-3193
    39Monitor

    Heap-based buffer overflow in the Lookup_MarkMarkPos function in the HarfBuzz module (harfbuzz-gpos.c), as used by Qt before 4.7.4 and Pango

    CriticalCVSS 9.3No exploitEPSS 7%

    qt · qtJun 15, 2012

  • CVE-2008-1109
    39Monitor

    Heap-based buffer overflow in Evolution 2.22.1 allows user-assisted remote attackers to execute arbitrary code via a long DESCRIPTION proper

    CriticalCVSS 9.3No exploitEPSS 5%

    gnome · evolutionJun 4, 2008

  • CVE-2017-1000044
    39Monitor

    gtk-vnc 0.4.2 and older doesn't check framebuffer boundaries correctly when updating framebuffer which may lead to memory corruption when re

    CriticalCVSS 9.8No exploitEPSS 1%

    gnome · gtk-vncJul 17, 2017

  • CVE-2024-52533
    39Monitor

    gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not suf

    CriticalCVSS 9.8No exploitEPSS 1%

    gnome · glibNov 11, 2024