NO
Vendor
Nongnu
8
CVEs
0
On KEV
0
New 30D
Products
CV–
Cvs
Nongnu
1 CVEs0 on KEV0 new
DM7.1
Dmidecode
Nongnu
1 CVEs0 on KEV0 new
GK–
Gksu
Nongnu
1 CVEs0 on KEV0 new
LI9.8
Libntlm
Nongnu
1 CVEs0 on KEV0 new
MN–
Mail Notification
Nongnu
1 CVEs0 on KEV0 new
OT–
Oath Toolkit
Nongnu
1 CVEs0 on KEV0 new
SA–
Samizdat
Nongnu
1 CVEs0 on KEV0 new
ZU7.8
Zutils
Nongnu
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2023-30630 | DM Dmidecode Nongnu | 7.1 | Apr 13 | Dmidecode before 3.5 allows -dump-bin to overwrite a local file |
| CVE-2019-17455 | LI Libntlm Nongnu | 9.8 | Oct 10 | Libntlm through 1.5 relies on a fixed buffer size for tSmbNtlmAuthRequest, tSmbNtlmAuthChallenge, and tSmbNtlmAuthResponse read and write operations, as demonstrated by a… |
| CVE-2018-1000637 | ZU Zutils Nongnu | 7.8 | Aug 20 | zutils version prior to version 1.8-pre2 contains a Buffer Overflow vulnerability in zcat that can result in Potential denial of service or arbitrary code execution |
| CVE-2014-2886 | GK Gksu Nongnu | – | Sep 18 | GKSu 2.0.2, when sudo-mode is not enabled, uses " (double quote) characters in a gksu-run-helper argument, which allows attackers to execute arbitrary commands in certain… |
| CVE-2013-7322 | OT Oath Toolkit Nongnu | – | Mar 9 | usersfile.c in liboath in OATH Toolkit before 2.4.1 does not properly handle lines containing an invalid one-time-password (OTP) type and a user name in /etc/users.oath, which… |
| CVE-2010-3846 | CV Cvs Nongnu | – | Nov 5 | Array index error in the apply_rcs_change function in rcs.c in CVS 1.11.23 allows local users to gain privileges via an RCS file containing crafted delta fragment changes that… |
| CVE-2009-0359 | SA Samizdat Nongnu | – | Feb 17 | Multiple cross-site scripting (XSS) vulnerabilities in Samizdat before 0.6.2 allow remote authenticated users to inject arbitrary web script or HTML via the (1) message title or… |
| CVE-2007-3209 | MN Mail Notification Nongnu | – | Jun 14 | Mail Notification 4.0, when WITH_SSL is set to 0 at compile time, uses unencrypted connections for accounts configured with SSL/TLS, which allows remote attackers to obtain… |