Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2007-2808

Cross-site scripting (XSS) vulnerability in gnatsweb.pl in Gnatsweb 4.00 and Gnats 4.1.99 allows remote attackers to inject arbitrary web script or HTML via the database parameter.

CVSS 2.0 · 4.3 Medium EPSS 1.3% KEV · Not listed
Vendors
Gnu Yngve Svendsen
Products
Gnats Gnatsweb
CVE-2004-0623

Format string vulnerability in misc.c in GNU GNATS 4.00 may allow remote attackers to execute arbitrary code via format string specifiers in a string that gets logged by syslog.

CVSS 2.0 · 10.0 Critical EPSS 4.5% KEV · Not listed
Vendors
Gnu
Products
Gnats
CVE-2005-2180

gen-index in GNATS 4.0, 4.1.0, and possibly earlier versions, when installed setuid, does not properly check files passed to the -o argument and opens the file with write access, which allows local users to overwrite arbitrary files.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Gnu
Products
Gnats