Access Control

Every one of the 34 is a mark on the map. Named now: 1 to 26, most at risk first.

1. ld.so in the GNU C Library (aka glibc or libc6) before 2.11.3, and 2.12.x before 2.12.2, does not properly restrict use of the LD_AUDIT environment variable to reference dynamic s…CVE-2010-3856Gnu · 12% likely

   CWE-264

2. The REPL server (--listen) in GNU Guile 2.0.12 allows an attacker to execute arbitrary code via an HTTP inter-protocol attack.CVE-2016-8606Gnu · 4.2% likely

   CWE-284

3. The makecontext function in the GNU C Library (aka glibc or libc6) before 2.25 creates execution contexts incompatible with the unwinder on ARM EABI (32-bit) platforms, which migh…CVE-2016-6323Gnu · 3.9% likely

   CWE-284

4. lib/x509/verify.c in GnuTLS before 3.1.21 and 3.2.x before 3.2.11 treats version 1 X.509 certificates as intermediate CAs, which allows remote attackers to bypass intended restric…CVE-2014-1959Gnu · 3.4% likely

   CWE-264

5. The vfprintf function in stdio-common/vfprintf.c in GNU C Library (aka glibc) 2.5, 2.12, and probably other versions does not "properly restrict the use of" the alloca function wh…CVE-2012-3406Gnu · 3.2% likely

   CWE-264

6. The mkdir procedure of GNU Guile temporarily changed the process' umask to zero. During that time window, in a multithreaded application, other threads could end up creating files…CVE-2016-8605Gnu · 2.8% likely

   CWE-275

7. An issue was discovered in disable_priv_mode in shell.c in GNU Bash through 5.0 patch 11. By default, if Bash is run with its effective UID not equal to its real UID, it will drop…CVE-2019-18276Gnu · CVSS 7.8 · 2.6% likely

   CWE-273

8. The gnutls_ocsp_resp_check_crt function in lib/x509/ocsp.c in GnuTLS before 3.4.15 and 3.5.x before 3.5.4 does not verify the serial length of an OCSP response, which might allow…CVE-2016-7444Gnu · 2.4% likely

   CWE-264

9. plugin/npapi/plugin.cpp in Gnash before 0.8.10 uses weak permissions (world readable) for cookie files with predictable names in /tmp, which allows local users to obtain sensitive…CVE-2011-4328Gnu · 2.1% likely

   CWE-264

10. GnuTLS before 2.7.6, when the GNUTLS_VERIFY_ALLOW_X509_V1_CA_CRT flag is not enabled, treats version 1 X.509 certificates as intermediate CAs, which allows remote attackers to byp…CVE-2009-5138Gnu · 1.8% likely

    CWE-264

11. GNU screen before 4.5.1 allows local users to modify arbitrary files and consequently gain root privileges by leveraging improper checking of logfile permissions.CVE-2017-5618Gnu · 1.1% likely

    CWE-863

12. gzip before 1.3 in Solaris 8, when called with the -f or -force flags, will change the permissions of files that are hard linked to the target files, which allows local users to v…CVE-2004-1349Gnu · 0.6% likely

    CWE-269

13. socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and FreeBSD), allows local users to send a privileged SIGHUP sig…CVE-2023-24626Gnu · CVSS 6.5 · 0.5% likely

    CWE-732

14. ldd in the GNU C Library (aka glibc or libc6) 2.13 and earlier allows local users to gain privileges via a Trojan horse executable file linked with a modified loader that omits ce…CVE-2009-5064Gnu · 0.5% likely

    CWE-264

15. locale/programs/locale.c in locale in the GNU C Library (aka glibc or libc6) before 2.13 does not quote its output, which might allow local users to gain privileges via a crafted…CVE-2011-1095Gnu · 0.5% likely

    CWE-264

16. GNU Mailman 2.1.39, as bundled in cPanel (and WHM), allows unauthenticated attackers to create lists via the /mailman/create endpoint. NOTE: multiple third parties report that the…CVE-2025-43921GNU · CVSS 5.3 · 0.5% likely

    CWE-863

17. GNU Rush 1.7 does not properly drop privileges, which allows local users to read arbitrary files via the --lint option.CVE-2013-6889Gnu · 0.5% likely

    CWE-264

18. In Emacs before 29.3, LaTeX preview is enabled by default for e-mail attachments.CVE-2024-30204Gnu · CVSS 2.8 · 0.5% likely

    CWE-276

19. If certificates that signed grub are installed into db, grub can be booted directly. It will then boot any kernel without signature validation. The booted kernel will think it was…CVE-2021-3418Gnu · 0.5% likely

    CWE-281

20. rbash in Bash before 4.4-beta2 did not prevent the shell user from modifying BASH_CMDS, thus allowing the user to execute any command with the permissions of the shell.CVE-2019-9924Gnu · 0.4% likely

    CWE-862

21. A flaw was found in grub2 in versions prior to 2.06. The cutmem command does not honor secure boot locking allowing an privileged attacker to remove address ranges from memory cre…CVE-2020-27779Gnu · 0.4% likely

    CWE-285

22. A certain Debian patch for GNU GRUB uses world-readable permissions for grub.cfg, which allows local users to obtain password hashes, as demonstrated by reading the password_pbkdf…CVE-2013-4577Gnu · 0.4% likely

    CWE-264

23. GNU Project Debugger (GDB) before 7.5, when .debug_gdb_scripts is defined, automatically loads certain files from the current working directory, which allows local users to gain p…CVE-2011-4355Gnu · 0.4% likely

    CWE-264

24. pt_chown in GNU C Library (aka glibc or libc6) before 2.18 does not properly check permissions for tty files, which allows local users to change the permission on the files and ob…CVE-2013-2207Gnu · 0.4% likely

    CWE-264

25. GNU Guix 1.0.1 allows local users to gain access to an arbitrary user's account because the parent directory of the user-profile directories is world writable, a similar issue to…CVE-2019-18192Gnu · 0.3% likely

    CWE-732

26. GNU screen 4.0.3 creates the /tmp/screen-exchange temporary file with world-readable permissions, which might allow local users to obtain sensitive session information.CVE-2009-1214Gnu · 0.3% likely

    CWE-264

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.