Login Request a demo
GN
Vendor
GNU
127 products with CVEs on record
1,263
CVEs
9
On KEV
8
New 30D
Products
AS
Aspell
GNU
9.1
8 CVEs0 on KEV4 new
LI
libredwg
GNU
9.8
101 CVEs0 on KEV1 new
EM
Emacs
GNU
9.8
42 CVEs0 on KEV1 new
GR
grub2
GNU
8.8
49 CVEs0 on KEV1 new
MT
mtools
GNU
6.1
1 CVEs0 on KEV1 new
BA
Bash
Gnu
9.8
18 CVEs3 on KEV0 new
BS
Bourne-Again Shell (Bash)
GNU
9.8
2 CVEs2 on KEV0 new
GL
Glibc
Gnu
9.8
163 CVEs1 on KEV0 new
IN
Inetutils
GNU
9.8
8 CVEs1 on KEV0 new
GB
GNU Bash
GNU
8.8
1 CVEs1 on KEV0 new
GC
GNU C Library
GNU
7.8
1 CVEs1 on KEV0 new
BI
Binutils
GNU
9.8
288 CVEs0 on KEV0 new
GN
Gnutls
Gnu
9.8
74 CVEs0 on KEV0 new
MA
Mailman
Gnu
8.8
47 CVEs0 on KEV0 new
WG
wget
GNU
9.8
24 CVEs0 on KEV0 new
TA
Tar
Gnu
7.5
20 CVEs0 on KEV0 new
PS
Pspp
Gnu
9.8
16 CVEs0 on KEV0 new
CP
cpio
GNU
7.8
15 CVEs0 on KEV0 new
LI
libextractor
GNU
8.8
15 CVEs0 on KEV0 new
PA
patch
GNU
7.8
15 CVEs0 on KEV0 new
GC
GCC
GNU
8.1
14 CVEs0 on KEV0 new
RE
Recutils
Gnu
8.8
14 CVEs0 on KEV0 new
GZ
gzip
GNU
8.8
13 CVEs0 on KEV0 new
LI
Libtasn1
Gnu
9.1
13 CVEs0 on KEV0 new
CO
coreutils
GNU
9.8
12 CVEs0 on KEV0 new
GR
Groff
Gnu
6.5
10 CVEs0 on KEV0 new
LI
Libiberty
Gnu
7.8
10 CVEs0 on KEV0 new
PG
Privacy Guard
Gnu
–
10 CVEs0 on KEV0 new
GD
gdb
GNU
7.8
9 CVEs0 on KEV0 new
SC
Screen
Gnu
9.8
9 CVEs0 on KEV0 new
AD
Adns
Gnu
9.8
8 CVEs0 on KEV0 new
MA
Mailutils
Gnu
7.8
8 CVEs0 on KEV0 new
GN
Gnump3d
Gnu
7.8
7 CVEs0 on KEV0 new
CF
Cfengine
Gnu
–
6 CVEs0 on KEV0 new
LI
libidn
GNU
7.5
6 CVEs0 on KEV0 new
LI
Libmicrohttpd
Gnu
9.8
6 CVEs0 on KEV0 new
RA
Radius
Gnu
–
6 CVEs0 on KEV0 new
A2
A2ps
Gnu
7.8
5 CVEs0 on KEV0 new
EN
Enscript
Gnu
–
5 CVEs0 on KEV0 new
GA
gawk
GNU
9.1
5 CVEs0 on KEV0 new
LI
Libcdio
Gnu
9.8
5 CVEs0 on KEV0 new
OM
Org Mode
Gnu
7.8
5 CVEs0 on KEV0 new
OS
Osip
Gnu
9.8
5 CVEs0 on KEV0 new
SA
Savane
GNU
8.8
5 CVEs0 on KEV0 new
SH
Sharutils
Gnu
7.8
5 CVEs0 on KEV0 new
BI
Bison
GNU
8.6
4 CVEs0 on KEV0 new
CF
Cflow
Gnu
7.5
4 CVEs0 on KEV0 new
CH
Chess
Gnu
9.8
4 CVEs0 on KEV0 new
ED
ED
Gnu
7.5
4 CVEs0 on KEV0 new
FR
Fribidi
Gnu
7.8
4 CVEs0 on KEV0 new
HU
Hurd
Gnu
8.8
4 CVEs0 on KEV0 new
IN
Inet
Gnu
5.4
4 CVEs0 on KEV0 new
LI
Libidn2
Gnu
9.8
4 CVEs0 on KEV0 new
NA
Nano
Gnu
6.7
4 CVEs0 on KEV0 new
SE
Sed
GNU
8.8
4 CVEs0 on KEV0 new
EG
Eglibc
Gnu
–
3 CVEs0 on KEV0 new
FI
Fileutils
Gnu
–
3 CVEs0 on KEV0 new
FI
Fingerd
Gnu
–
3 CVEs0 on KEV0 new
GN
Gnash
Gnu
–
3 CVEs0 on KEV0 new
GN
Gnats
Gnu
–
3 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-118384
New
MT
mtools
GNU
6.1–Oct 28GNU mtools through 4.0.49 has an out-of-bounds write in parse_vses in vfat.c
CVE-2026-111167
LI
LibreDWG
GNU
6.1
0%
Oct 15GNU LibreDWG through 0.14.8612 Out-of-Bounds Read in acds_private AcDs Decoder
CVE-2026-103658
AS
Aspell
GNU
5.9
0%
Oct 12GNU Aspell 0.60.8.2 (first vulnerable version is not known) contains a heap-based buffer overflow write (CWE-122) in its read-only dictionary loader
CVE-2026-108976
EM
Emacs
GNU
7.8
1%
Oct 11GNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS command injection via a filename because tramp-user-regexp has an incomplete list of disallowed inputs
CVE-2026-75820
AS
Aspell
GNU
1.8
0%
Oct 6Integer Truncation Leading to Heap Corruption in GNU Aspell
CVE-2026-75819
AS
Aspell
GNU
1.8
0%
Oct 6Out-of-bounds Read in GNU Aspell
CVE-2026-75818
AS
Aspell
GNU
1.8
0%
Oct 6Heap Buffer Overflow in GNU Aspell's prezip utility
CVE-2026-97876
GR
grub2
GNU
6.4
0%
Oct 2Bypass of GRUB lockdown restriction in Secure Boot mode via serial command MMIO base address
CVE-2026-100310
LI
libextractor
GNU
7.0
0%
Sep 25GNU libextractor before 1.16 Privilege Escalation via LIBEXTRACTOR_PREFIX
CVE-2026-96269
EM
Emacs
GNU
7.5
0%
Sep 22GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file, because an untrusted value of read-symbol-shorthands affects the intern and unintern functions
CVE-2026-91782
BI
Binutils
GNU
3.3
0%
Sep 15GNU Binutils Dynamic Relocation Allocation elfxx-x86.c elf_x86_allocate_dynrelocs null pointer dereference
CVE-2026-91781
BI
Binutils
GNU
3.3
0%
Sep 15GNU Binutils ELF Section elf64-x86-64.c elf_x86_64_common_section_index null pointer dereference
CVE-2026-91780
BI
Binutils
GNU
3.3
0%
Sep 15GNU Binutils elflink.c elf_link_add_object_symbols null pointer dereference
CVE-2026-91779
BI
Binutils
GNU
3.3
0%
Sep 15GNU Binutils Eh Frame elf-eh-frame.c _bfd_elf_eh_frame_section_offset null pointer dereference
CVE-2026-91752
LI
libextractor
GNU
7.5
1%
Sep 15GNU libextractor before 1.15 Stack Overflow via OLE2
CVE-2026-90831
BI
Binutils
GNU
5.3
0%
Sep 14GNU Binutils ELF String Table elf-strtab.c _bfd_elf_strtab_delref memory corruption
CVE-2026-90830
BI
Binutils
GNU
5.3
0%
Sep 14GNU Binutils Section Merge merge.c _bfd_write_merged_section null pointer dereference
CVE-2026-90829
BI
Binutils
GNU
5.3
0%
Sep 14GNU Binutils SHT_GROUP Section elf.c bfd_elf_set_group_contents null pointer dereference
CVE-2026-90828
BI
Binutils
GNU
6.6
0%
Sep 14GNU Binutils ELF Orphan Section ldelf.c elf_orphan_compatible null pointer dereference
CVE-2026-90804
BI
Binutils
GNU
6.1
0%
Sep 14GNU Binutils Eh Frame Section elf-eh-frame.c _bfd_elf_write_section_eh_frame buffer overflow
CVE-2026-90803
BI
Binutils
GNU
6.8
0%
Sep 14GNU Binutils ld elf64-x86-64.c elf_x86_64_relocate_section buffer overflow
CVE-2026-90802
BI
Binutils
GNU
4.4
0%
Sep 14GNU Binutils ld libbfd.c bfd_putl64 null pointer dereference
CVE-2026-90801
BI
Binutils
GNU
6.6
0%
Sep 14GNU Binutils ld cache.c cache_bwrite buffer overflow
CVE-2026-90622
LI
libredwg
GNU
3.3
0%
Sep 14GNU libredwg Layer Encoding dwg.spec DWG_TABLE null pointer dereference
CVE-2026-16599
WG
wget
GNU
5.1
0%
Aug 25Denial of Service in GNU wget
CVE-2026-77219
EM
Emacs
GNU
7.1
0%
Aug 21GNU Emacs < 31.0.91 Heap Over-Read via PBM/PPM/PGM Image Loader
CVE-2026-66486
CP
cpio
GNU
4.6
0%
Aug 10Improper Output Encoding in GNU cpio
CVE-2026-66485
CP
cpio
GNU
4.6
0%
Aug 10Uncontrolled Memory Allocation in GNU cpio
CVE-2026-66484
CP
cpio
GNU
4.6
0%
Aug 10Path Traversal in GNU cpio
CVE-2026-71394
EM
Emacs
GNU
5.3
0%
Aug 10Heap Use of Uninitialized Memory in GNU Emacs for Android
CVE-2026-71393
EM
Emacs
GNU
5.3
1%
Aug 10Heap Buffer Overflow in GNU Emacs for Android
CVE-2026-71392
EM
Emacs
GNU
5.3
1%
Aug 10Integer Overflow in GNU Emacs for Android
CVE-2026-71391
EM
Emacs
GNU
5.3
1%
Aug 10Off-by-One Error in GNU Emacs for Android
CVE-2026-18477
TA
Tar
Gnu
4.4
0%
Aug 3Tar: tar: toctou in incremental dumpdir 'x' rename handling allows restore path escape
CVE-2026-18508
TA
Tar
Gnu
4.4
0%
Aug 3Tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite
CVE-2026-56390
BI
Bison
GNU
6.3
0%
Jul 29Arbitrary Output Location Change in GNU Bison
CVE-2026-56389
BI
Bison
GNU
8.6
0%
Jul 29Arbitrary Command Execution in GNU Bison
CVE-2026-56392
CO
coreutils
GNU
6.1
0%
Jul 24Heap-based Buffer Overflow in GNU coreutils
CVE-2026-56391
CO
coreutils
GNU
6.1
0%
Jul 24Out‑of‑bounds Read in GNU coreutils
CVE-2026-53910
DI
diffutils
GNU
2.1
0%
Jul 22Heap-based Buffer Overflow in GNU diffutils
CVE-2026-40553
GA
gawk
GNU
7.5
0%
Jul 13Stack-based buffer overflow in gawk
CVE-2026-40469
GA
gawk
GNU
9.1
0%
Jul 13Heap buffer overflow in gawk
CVE-2026-40468
GA
gawk
GNU
9.1
0%
Jul 13Heap buffer overflow in gawk
CVE-2026-40467
GA
gawk
GNU
7.5
0%
Jul 13Use after free in gawk
CVE-2026-15520
LI
LibreDWG
GNU
5.3
0%
Jul 13GNU LibreDWG R2004 Section Decompression decode.c decompress_R2004_section heap-based overflow
CVE-2026-15184
LI
LibreDWG
GNU
3.3
0%
Jul 9GNU LibreDWG DWG File dwg.c dwg_next_entity null pointer dereference
CVE-2026-15182
LI
LibreDWG
GNU
5.3
0%
Jul 9GNU LibreDWG BMP Image dwg.c dwg_bmp heap-based overflow
CVE-2026-56289
PA
patch
GNU
5.5
0%
Jul 9Loop with Unreachable Exit Condition in GNU patch
CVE-2026-56288
PA
patch
GNU
5.5
0%
Jul 9NULL Pointer Dereference in GNU patch
CVE-2026-58472
WG
Wget
Gnu
7.1
0%
Jul 7GNU Wget 1.25.0 Heap Buffer Overflow via HTML Attribute Encoding
CVE-2026-58471
WG
Wget
Gnu
7.1
0%
Jul 7GNU Wget 1.25.0 Heap Buffer Overflow via convert_fname() in url.c
CVE-2026-58470
WG
Wget
Gnu
5.3
0%
Jul 7GNU Wget 1.25.0 Integer Overflow via Content-Range Header Parsing
CVE-2026-58469
WG
Wget
Gnu
7.5
0%
Jul 7GNU Wget 1.25.0 Heap Buffer Underread via Metalink URL Parsing
CVE-2026-41992
GZ
gzip
GNU
7.5
1%
Jun 29Global Buffer Overflow in GNU gzip
CVE-2026-41991
GZ
gzip
GNU
4.7
0%
Jun 29Predictable Temporary File in GNU gzip
CVE-2026-9153
SE
Sed
Gnu
6.5
0%
Jun 25Arbitrary File Read in Rapid7 InsightConnect Sed Plugin
CVE-2026-9154
SE
Sed
Gnu
6.5
0%
Jun 25Arbitrary File Write in Rapid7 InsightConnect Sed Plugin
CVE-2026-9155
SE
Sed
Gnu
8.8
2%
Jun 25OS Command Injection in Rapid7 InsightConnect Sed Plugin via expression parameter.
CVE-2026-57053
LI
libidn
GNU
2.5
0%
Jun 23GNU libidn before 1.44 is prone to out-of-bounds reads of uninitialized memory in the ToUnicode APIs because of mishandling in idna_to_unicode_internal
CVE-2026-56968
GS
GNU SASL
GNU
5.3
0%
Jun 23GNU SASL before 2.2.4 lacks sanitization of a short challenge in _gsasl_ntlm_client_step in the NTLM client, which could result in memory disclosure via a crafted server