Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2005-2958

Multiple format string vulnerabilities in the GNOME Data Access library for GNOME2 (libgda2) 1.2.1 and earlier allow attackers to execute arbitrary code.

CVSS 2.0 · 7.5 High EPSS 3.6% KEV · Not listed
Vendors
Gnome
Products
Libgda2
CVE-2012-1177

libgdata: Absent validation of SSL certificates

libgdata before 0.10.2 and 0.11.x before 0.11.1 does not validate SSL certificates, which allows remote attackers to obtain user names and passwords via a man-in-the-middle (MITM) attack with a spoofed certificate.

CVSS 2.0 · 5.1 Medium EPSS 1.9% KEV · Not listed
Vendors
Gnome
Products
Libgdata
CVE-2021-39359

In GNOME libgda through 6.0.0, gda-web-provider.c does not enable TLS certificate verification on the SoupSessionSync objects it creates, leaving users vulnerable to network MITM attacks. NOTE: this is similar to CVE-2016-20011.

CVSS 3.1 · 5.9 Medium EPSS 1.1% KEV · Not listed
Vendors
Fedoraproject Gnome
Products
Fedora Libgda