gnucash records
2 published records for vendor gnucash.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Records by year
Bar: total · dark part: CISA KEV.
Attack profile
All records
2 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
27Monitor | CVE-2010-3999No exploit | gnc-test-env in GnuCash 2.3.15 and earlier places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privgnucash · gnucash | Medium6.9 | — | 0.3% | Nov 5, 2010 |
14Monitor | CVE-2007-0007No exploit | gnucash 2.0.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on the (1) gnucash.trace, (2) qof.trace, and gnucash · gnucash | Low3.6 | — | 0.3% | Feb 19, 2007 |
- CVE-2010-399927Monitor
gnc-test-env in GnuCash 2.3.15 and earlier places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain priv
MediumCVSS 6.9No exploitEPSS 0%gnucash · gnucashNov 5, 2010
- CVE-2007-000714Monitor
gnucash 2.0.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on the (1) gnucash.trace, (2) qof.trace, and
LowCVSS 3.6No exploitEPSS 0%gnucash · gnucashFeb 19, 2007