Skip to content

GNU · no weakness in the record

No weakness recorded

193 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

likely to be exploited
16

Every one of the 193 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. Land IP denial of service.CVE-1999-0016Gnu · 96% likely
  2. A version of finger is running that exposes valid user information to any entity on the network.CVE-1999-0612Gnu · 68% likely
  3. GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted FTP resource.CVE-2016-4971Gnu · 46% likely
  4. The regcomp implementation in the GNU C Library (aka glibc or libc6) through 2.11.3, and 2.12.x through 2.12.2, allows context-dependent attackers to cause a denial of service (ap…CVE-2010-4051Gnu · 40% likely
  5. Heap-based buffer overflow in the AuthenticationDialogue function in cfservd for Cfengine 2.0.0 to 2.1.7p1 allows remote attackers to execute arbitrary code via a long SAUTH comma…CVE-2004-1701Gnu · 20% likely
  6. Double free vulnerability in GnuTLS before 3.3.17 and 3.4.x before 3.4.4 allows remote attackers to cause a denial of service via a long DistinguishedName (DN) entry in a certific…CVE-2015-6251Gnu · 19% likely
  7. a2ps 4.13 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename.CVE-2004-1170Gnu · 16% likely
  8. Multiple format string vulnerabilities in GNU Anubis 3.6.0 through 3.6.2, 3.9.92 and 3.9.93 allow remote attackers to execute arbitrary code via format string specifiers in string…CVE-2004-0354Gnu · 16% likely
  9. Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, including libnsl, libc, glib…CVE-2003-0028Gnu · 15% likely
  10. Format string vulnerability in search.c in the imap4d server in GNU Mailutils 0.6 allows remote authenticated users to execute arbitrary code via format string specifiers in the S…CVE-2005-2878Gnu · 15% likely
  11. Format string vulnerability in Gnu Privacy Guard (aka GnuPG or gpg) 1.05 and earlier can allow an attacker to gain privileges via format strings in the original filename that is s…CVE-2001-0522Gnu · 14% likely
  12. lsh daemon (lshd) does not properly return from certain functions in (1) read_line.c, (2) channel_commands.c, or (3) client_keyexchange.c when long input is provided, which could…CVE-2003-0826Gnu · 12% likely
  13. wget 1.8.x and 1.9.x does not filter or quote control characters when displaying HTTP responses to the terminal, which may allow remote malicious web servers to inject terminal es…CVE-2004-1488Gnu · 12% likely
  14. GNU tar 1.16 and 1.15.1, and possibly other versions, allows user-assisted attackers to overwrite arbitrary files via a tar file that contains a GNUTYPE_NAMES record with a symbol…CVE-2006-6097Gnu · 12% likely
  15. An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a denial of service or execute arbitrary code via a large -w value, which could be…CVE-2003-0853Gnu · 11% likely
  16. Buffer overflow in net.c for cfengine 2.x before 2.0.8 allows remote attackers to execute arbitrary code via certain packets with modified length values, which is trusted by the R…CVE-2003-0849Gnu · 11% likely
  17. Format string vulnerability in imap4d server in GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows remote attackers to execute arbitrary code via format string sp…CVE-2005-1523Gnu · 9.8% likely
  18. Buffer overflow in NLS (Natural Language Service).CVE-1999-0041Gnu · 9.1% likely
  19. The parse_datetime function in GNU coreutils allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted date string, as demonstr…CVE-2014-9471Gnu · 7.1% likely
  20. Multiple cross-site scripting (XSS) vulnerabilities in Mailman before 2.1.9rc1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.CVE-2006-3636Gnu · 6.9% likely
  21. Multiple unspecified vulnerabilities in the DER decoder in GNU Libtasn1 before 3.6, as used in GnuTLS, allow remote attackers to cause a denial of service (out-of-bounds read) via…CVE-2014-3467Gnu · 6.8% likely
  22. Buffer overflow in the header_get_field_name function in header.c for GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows remote attackers to execute arbitrary cod…CVE-2005-1520Gnu · 6.7% likely
  23. CVS 1.12.x, when configured to use SSH for remote repositories, might allow remote attackers to execute arbitrary code via a repository URL with a crafted hostname, as demonstrate…CVE-2017-12836Gnu · 6.6% likely
  24. The key validation code in GnuPG before 1.2.2 does not properly determine the validity of keys with multiple user IDs and assigns the greatest validity of the most valid user ID,…CVE-2003-0255Gnu · 6.6% likely
  25. Cross-site scripting vulnerabilities in Mailman before 2.0.11 allow remote attackers to execute script via (1) the admin login page, or (2) the Pipermail index summaries.CVE-2002-0388Gnu · 6.3% likely
  26. A "stack overwrite" vulnerability in GnuPG (gpg) 1.x before 1.4.6, 2.x before 2.0.2, and 1.9.0 through 1.9.95 allows attackers to execute arbitrary code via crafted OpenPGP packet…CVE-2006-6235Gnu · 6.2% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.