İçeriğe atla
Noroxi

GNOME kayıtları

GNOME üreticisine ait 369 yayımlanmış kayıt. Bunların 0 tanesi sahada sömürüldü (CISA KEV listesinde), 3 tanesi için hazır saldırı aracı var.

Ürüne göre süzün ↓

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
3 · %0,8
Pre-auth RCE
53
Düzeltme kaydı olan
%84
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Pre-auth RCE: saldırganın hesabı olmadan, ağ üzerinden kod çalıştırabildiği açıklar. Yayından KEV’e ortanca: sahada sömürülen kayıtların yayımlanmasıyla CISA listesine girmesi arasındaki tipik süre.

Yıllara göre kayıt

  1. 16
  2. 17
  3. 18
  4. 19
  5. 20
  6. 21
  7. 22
  8. 23
  9. 24
  10. 25
  11. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

369 kayıt
  • CVE-2017-1000083
    46Planlayın

    backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1 allows remote attackers to execute arbitrary com

    YüksekCVSS 7,8SilahlaştırılmışEPSS %51

    gnome · evince5 Eyl 2017

  • CVE-2017-2885
    46Planlayın

    An exploitable stack based buffer overflow vulnerability exists in the GNOME libsoup 2.58.

    KritikCVSS 9,8İstismar yokEPSS %23

    gnome · libsoup24 Nis 2018

  • CVE-2008-3533
    46Planlayın

    Format string vulnerability in the window_error function in yelp-window.c in yelp in Gnome after 2.19.90 and before 2.24 allows remote attac

    KritikCVSS 10,0Kavram kanıtıEPSS %19

    gnome · yelp18 Ağu 2008

  • CVE-2000-0491
    45Planlayın

    Buffer overflow in the XDMCP parsing code of GNOME gdm, KDE kdm, and wdm allows remote attackers to execute arbitrary commands or cause a de

    KritikCVSS 10,0Kavram kanıtıEPSS %17

    gnome · gdm24 May 2000

  • CVE-2003-0407
    45Planlayın

    Buffer overflow in gbnserver for Gnome Batalla Naval 1.0.4 allows remote attackers to execute arbitrary code via a long connection string.

    KritikCVSS 10,0Kavram kanıtıEPSS %16

    gnome · batalla naval30 Haz 2003

  • CVE-2004-0888
    43Planlayın

    Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote atta

    KritikCVSS 10,0İstismar yokEPSS %9

    kde · koffice27 Oca 2005

  • CVE-2004-0889
    42Planlayın

    Multiple integer overflows in xpdf 3.0, and other packages that use xpdf code such as CUPS, allow remote attackers to cause a denial of serv

    KritikCVSS 10,0İstismar yokEPSS %6

    xpdf · xpdf27 Oca 2005

  • CVE-2019-1010238
    41Planlayın

    Gnome Pango 1.42 and later is affected by: Buffer Overflow.

    KritikCVSS 9,8İstismar yokEPSS %6

    gnome · pango19 Tem 2019

  • CVE-2009-3608
    40Planlayın

    Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdf

    KritikCVSS 9,3İstismar yokEPSS %10

    poppler · poppler21 Eki 2009

  • CVE-2009-3604
    40Planlayın

    The Splash::drawImage function in Splash.cc in Xpdf 2.x and 3.x before 3.02pl4, and Poppler 0.x, as used in GPdf and kdegraphics KPDF, does

    KritikCVSS 9,3İstismar yokEPSS %8

    kde · kpdf21 Eki 2009

  • CVE-2017-5885
    40Planlayın

    Multiple integer overflows in the (1) vnc_connection_server_message and (2) vnc_color_map_set functions in gtk-vnc before 0.7.0 allow remote

    KritikCVSS 9,8İstismar yokEPSS %4

    fedoraproject · fedora28 Şub 2017

  • CVE-2018-16428
    40Planlayın

    In GNOME GLib 2.56.1, g_markup_parse_context_end_parse() in gmarkup.c has a NULL pointer dereference.

    KritikCVSS 9,8İstismar yokEPSS %4

    gnome · glib3 Eyl 2018

  • CVE-2012-0828
    40Planlayın

    Heap-based buffer overflow in Xchat-WDK before 1499-4 (2012-01-18) xchat 2.8.6 on Maemo architecture could allow remote attackers to cause a

    KritikCVSS 9,8İstismar yokEPSS %4

    xchat · xchat21 Şub 2020

  • CVE-2018-12910
    40Planlayın

    The get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have unspecified impact via an empty hostname.

    KritikCVSS 9,8İstismar yokEPSS %4

    gnome · libsoup5 Tem 2018

  • CVE-2018-10900
    40Planlayın

    Network Manager VPNC plugin (aka networkmanager-vpnc) before version 1.2.6 is vulnerable to a privilege escalation attack.

    YüksekCVSS 7,8SilahlaştırılmışEPSS %3

    gnome · network manager vpnc26 Tem 2018

  • CVE-2022-27811
    40Planlayın

    GNOME OCRFeeder before 0.8.4 allows OS command injection via shell metacharacters in a PDF or image filename.

    KritikCVSS 9,8İstismar yokEPSS %3

    gnome · ocrfeeder23 Mar 2022

  • CVE-2005-0102
    40Planlayın

    Integer overflow in camel-lock-helper in Evolution 2.0.2 and earlier allows local users or remote malicious POP3 servers to execute arbitrar

    KritikCVSS 9,8İstismar yokEPSS %3

    gnome · evolution24 Oca 2005

  • CVE-2016-10727
    40Planlayın

    camel/providers/imapx/camel-imapx-server.c in the IMAPx component in GNOME evolution-data-server before 3.21.2 proceeds with cleartext data

    KritikCVSS 9,8İstismar yokEPSS %2

    gnome · evolution20 Tem 2018

  • CVE-2019-17266
    40Planlayın

    libsoup from versions 2.65.1 until 2.68.1 have a heap-based buffer over-read because soup_ntlm_parse_challenge() in soup-auth-ntlm.c does no

    KritikCVSS 9,8İstismar yokEPSS %2

    gnome · libsoup6 Eki 2019

  • CVE-2019-12450
    40Planlayın

    file_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file permissions while a copy operation is

    KritikCVSS 9,8İstismar yokEPSS %2

    gnome · glib29 May 2019

  • CVE-2011-2897
    40Planlayın

    gdk-pixbuf through 2.31.1 has GIF loader buffer overflow when initializing decompression tables due to an input validation flaw

    KritikCVSS 9,8İstismar yokEPSS %1

    gnome · gdk-pixbuf12 Kas 2019

  • CVE-2018-12422
    40Planlayın

    addressbook/backends/ldap/e-book-backend-ldap.c in Evolution-Data-Server in GNOME Evolution through 3.29.2 might allow attackers to trigger

    KritikCVSS 9,8İstismar yokEPSS %1

    gnome · evolution15 Haz 2018

  • CVE-2018-20781
    40Planlayın

    In pam/gkr-pam-module.c in GNOME Keyring before 3.27.2, the user's password is kept in a session-child process spawned from the LightDM daem

    YüksekCVSS 7,8SilahlaştırılmışEPSS %1

    gnome · gnome keyring12 Şub 2019

  • CVE-2011-3193
    39İzleyin

    Heap-based buffer overflow in the Lookup_MarkMarkPos function in the HarfBuzz module (harfbuzz-gpos.c), as used by Qt before 4.7.4 and Pango

    KritikCVSS 9,3İstismar yokEPSS %7

    qt · qt15 Haz 2012

  • CVE-2008-1109
    39İzleyin

    Heap-based buffer overflow in Evolution 2.22.1 allows user-assisted remote attackers to execute arbitrary code via a long DESCRIPTION proper

    KritikCVSS 9,3İstismar yokEPSS %5

    gnome · evolution4 Haz 2008