nongnu kayıtları
nongnu üreticisine ait 9 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %77,8
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer2
- CWE-125 Out-of-bounds Read1
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-23 Relative Path Traversal1
- CWE-264 Permissions, Privileges, and Access Controls1
- CWE-287 Improper Authentication1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
9 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2019-17455İstismar yok | Libntlm through 1.5 relies on a fixed buffer size for tSmbNtlmAuthRequest, tSmbNtlmAuthChallenge, and tSmbNtlmAuthResponse read and write opnongnu · libntlm · CWE-125 | Kritik9,8 | — | %3,1 | 10 Eki 2019 |
32İzleyin | CVE-2018-1000637İstismar yok | zutils version prior to version 1.8-pre2 contains a Buffer Overflow vulnerability in zcat that can result in Potential denial of service or nongnu · zutils · CWE-119 | Yüksek7,8 | — | %1,6 | 20 Ağu 2018 |
31İzleyin | CVE-2007-3209İstismar yok | Mail Notification 4.0, when WITH_SSL is set to 0 at compile time, uses unencrypted connections for accounts configured with SSL/TLS, which anongnu · mail notification | Yüksek7,8 | — | %1,5 | 14 Haz 2007 |
28İzleyin | CVE-2014-2886İstismar yok | GKSu 2.0.2, when sudo-mode is not enabled, uses " (double quote) characters in a gksu-run-helper argument, which allows attackers to executenongnu · gksu · CWE-264 | Orta6,8 | — | %2,1 | 18 Eyl 2014 |
28İzleyin | CVE-2023-30630İstismar yok | Dmidecode before 3.5 allows -dump-bin to overwrite a local file.nongnu · dmidecode · CWE-23 | Yüksek7,1 | — | %0,5 | 13 Nis 2023 |
28İzleyin | CVE-2024-47191İstismar yok | pam_oath.so in oath-toolkit 2.6.7 through 2.6.11 before 2.6.12 allows root privilege escalation because, in the context of PAM code running CWE-22 | Yüksek7,1 | — | %0,3 | 9 Eki 2024 |
27İzleyin | CVE-2010-3846İstismar yok | Array index error in the apply_rcs_change function in rcs.c in CVS 1.11.23 allows local users to gain privileges via an RCS file containing nongnu · cvs · CWE-119 | Orta6,9 | — | %0,3 | 5 Kas 2010 |
19İzleyin | CVE-2013-7322İstismar yok | usersfile.c in liboath in OATH Toolkit before 2.4.1 does not properly handle lines containing an invalid one-time-password (OTP) type and a nongnu · oath toolkit · CWE-287 | Orta4,9 | — | %0,8 | 9 Mar 2014 |
14İzleyin | CVE-2009-0359İstismar yok | Multiple cross-site scripting (XSS) vulnerabilities in Samizdat before 0.6.2 allow remote authenticated users to inject arbitrary web scriptnongnu · samizdat · CWE-79 | Düşük3,5 | — | %1,0 | 17 Şub 2009 |
- CVE-2019-1745540Planlayın
Libntlm through 1.5 relies on a fixed buffer size for tSmbNtlmAuthRequest, tSmbNtlmAuthChallenge, and tSmbNtlmAuthResponse read and write op
KritikCVSS 9,8İstismar yokEPSS %3nongnu · libntlm10 Eki 2019
- CVE-2018-100063732İzleyin
zutils version prior to version 1.8-pre2 contains a Buffer Overflow vulnerability in zcat that can result in Potential denial of service or
YüksekCVSS 7,8İstismar yokEPSS %1nongnu · zutils20 Ağu 2018
- CVE-2007-320931İzleyin
Mail Notification 4.0, when WITH_SSL is set to 0 at compile time, uses unencrypted connections for accounts configured with SSL/TLS, which a
YüksekCVSS 7,8İstismar yokEPSS %1nongnu · mail notification14 Haz 2007
- CVE-2014-288628İzleyin
GKSu 2.0.2, when sudo-mode is not enabled, uses " (double quote) characters in a gksu-run-helper argument, which allows attackers to execute
OrtaCVSS 6,8İstismar yokEPSS %2nongnu · gksu18 Eyl 2014
- CVE-2023-3063028İzleyin
Dmidecode before 3.5 allows -dump-bin to overwrite a local file.
YüksekCVSS 7,1İstismar yokEPSS %0nongnu · dmidecode13 Nis 2023
- CVE-2024-4719128İzleyin
pam_oath.so in oath-toolkit 2.6.7 through 2.6.11 before 2.6.12 allows root privilege escalation because, in the context of PAM code running
YüksekCVSS 7,1İstismar yokEPSS %09 Eki 2024
- CVE-2010-384627İzleyin
Array index error in the apply_rcs_change function in rcs.c in CVS 1.11.23 allows local users to gain privileges via an RCS file containing
OrtaCVSS 6,9İstismar yokEPSS %0nongnu · cvs5 Kas 2010
- CVE-2013-732219İzleyin
usersfile.c in liboath in OATH Toolkit before 2.4.1 does not properly handle lines containing an invalid one-time-password (OTP) type and a
OrtaCVSS 4,9İstismar yokEPSS %0nongnu · oath toolkit9 Mar 2014
- CVE-2009-035914İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in Samizdat before 0.6.2 allow remote authenticated users to inject arbitrary web script
DüşükCVSS 3,5İstismar yokEPSS %1nongnu · samizdat17 Şub 2009