gnu
1,238 tracked vulnerabilities.
CVE-2022-48339
HIGH
GNU Emacs < 28.2 - OS Command Injection in htmlfontify.el
Feb 20, 2023
CVSS 7.8
EPSS 0.01
CVE-2022-48338
HIGH
GNU Emacs < 28.2 - Command Injection via ruby-find-library-file Function
Feb 20, 2023
CVSS 7.3
EPSS 0.02
CVE-2022-48337
CRITICAL
GNU Emacs < 28.2 - OS Command Injection via etags Source-Code Filename
Feb 20, 2023
CVSS 9.8
EPSS 0.02
CVE-2022-46663
HIGH
GNU Less 566-608 - ANSI Escape Sequence Filter Bypass
Feb 07, 2023
CVSS 7.5
EPSS 0.01
CVE-2022-48303
MEDIUM
GNU Tar <= 1.34 - Out-of-bounds Read in V7 Archive Header Parser
Jan 30, 2023
CVSS 5.5
EPSS 0.05
CVE-2022-4285
MEDIUM
binutils 2.35-2.39-6 - Denial of Service via Corrupt ELF Symbol Version Parsing
Jan 27, 2023
CVSS 5.5
EPSS 0.00
CVE-2022-3715
HIGH
GNU Bash 5.1-5.1.7 - Heap-Based Buffer Overflow in Parameter Transform
Jan 05, 2023
CVSS 7.8
EPSS 0.00
CVE-2022-3775
HIGH
GRUB2 < 2.06 - Out-of-bounds Write via Unicode Glyph Rendering
Dec 19, 2022
CVSS 7.1
EPSS 0.01
CVE-2022-2601
HIGH
GRUB2 < 2.06 - Heap-based Buffer Overflow via Crafted PF2 Font
Dec 14, 2022
CVSS 8.6
EPSS 0.01
CVE-2022-45332
HIGH
LibreDWG v0.12.4.4643 - Heap Buffer Overflow in decode_preR13_section_hdr
Nov 30, 2022
CVSS 7.8
EPSS 0.00
CVE-2022-45939
HIGH
GNU Emacs <= 28.2 - OS Command Injection via ctags Source-Code Filename
Nov 28, 2022
CVSS 7.8
EPSS 0.01
CVE-2022-41550
MEDIUM
GNU oSIP v5.3.0 - Integer Overflow in osip_body_parse_header
Oct 11, 2022
CVSS 6.5
EPSS 0.01
CVE-2022-25310
MEDIUM
Fribidi < 1.0.12 - Denial of Service via fribidi_remove_bidi_marks()
Sep 06, 2022
CVSS 5.5
EPSS 0.00
CVE-2022-25309
MEDIUM
Fribidi < 1.0.12 - Heap-based Buffer Overflow in fribidi_cap_rtl_to_unicode
Sep 06, 2022
CVSS 5.5
EPSS 0.00
CVE-2022-25308
HIGH
Fribidi < 1.0.12 - Stack-based Buffer Overflow
Sep 06, 2022
CVSS 7.8
EPSS 0.01
CVE-2022-39832
HIGH
PSPP 1.6.2 - Heap-Based Buffer Overflow in read_string Function
Sep 05, 2022
CVSS 7.8
EPSS 0.00
CVE-2022-39831
HIGH
PSPP 1.6.2 - Heap-Based Buffer Overflow in read_bytes_internal
Sep 05, 2022
CVSS 7.8
EPSS 0.00
CVE-2022-1271
HIGH
GNU gzip - Arbitrary File Write via Crafted Multi-Line Filename
Aug 31, 2022
CVSS 8.8
EPSS 0.04
CVE-2022-39046
HIGH
GNU C Library <2.36 - Info Disclosure
Aug 31, 2022
CVSS 7.5
EPSS 0.02
CVE-2022-39028
HIGH
GNU Inetutils <2.3 - Buffer Overflow
Aug 30, 2022
CVSS 7.5
EPSS 0.02
CVE-2022-38533
MEDIUM
GNU Binutils <2.40 - Buffer Overflow
Aug 26, 2022
CVSS 5.5
EPSS 0.00
CVE-2022-35164
CRITICAL
LibreDWG < 0.12.4.4608 - Use-After-Free via bit_copy_chain
Aug 18, 2022
CVSS 9.8
EPSS 0.01
CVE-2022-2509
HIGH
GnuTLS - Double Free in PKCS7 Signature Verification
Aug 01, 2022
CVSS 7.5
EPSS 0.01
CVE-2022-2469
LOW
GNU SASL < 2.0.1 - Authenticated Out-of-bounds Read via GSS-API Client
Jul 19, 2022
CVSS 3.8
EPSS 0.01
CVE-2022-33034
HIGH
LibreDWG v0.12.4.4608 - Buffer Overflow
Jun 23, 2022
CVSS 7.8
EPSS 0.01
Products
binutils 276
glibc 163
libredwg 89
gnutls 74
grub2 53
mailman 47
emacs 35
ncurses 29
wget 24
bash 18
tar 18
pspp 16
Binutils 15
patch 15
gcc 14
recutils 14
gzip 13
libextractor 13
libtasn1 13
cpio 12
LibreDWG 10
coreutils 10
groff 10
libiberty 10
privacy_guard 10
gdb 9
screen 9
adns 8
inetutils 8
mailutils 8
Quick Filters