CVEs
Every published CVE. Without a filter the list holds those exploited, with a public check, or likely to be exploited; pick a year and month or a vendor for the rest.
| CVE | Vendor · product | Exploitation | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2014-4877Absolute path traversal vulnerability in GNU Wget before 1.16, when recursion is enabled, allows remote FTP servers to write to arbitrary files, and consequently execute arbitrary… | Gnu · Wget | Likely | – | 40% | 2014-10-29 |
| CVE-2016-6321Directory traversal vulnerability in the safer_name_suffix function in GNU tar 1.14 through 1.29 might allow remote attackers to bypass an intended protection mechanism and write… | Gnu · Tar | Likely | 7.5 | 16% | 2016-12-09 |
| CVE-2015-1395Directory traversal vulnerability in GNU patch versions which support Git-style patching before 2.7.3 allows remote attackers to write to arbitrary files with the permissions of t… | Gnu · Patch | Likely | – | 11% | 2017-08-25 |
| CVE-2010-3847elf/dl-load.c in ld.so in the GNU C Library (aka glibc or libc6) through 2.11.2, and 2.12.x through 2.12.1, does not properly handle a value of $ORIGIN for the LD_AUDIT environmen… | Gnu · Glibc | Likely | – | 10% | 2011-01-07 |
| CVE-2015-2775Directory traversal vulnerability in GNU Mailman before 2.1.20, when not using a static alias, allows remote attackers to execute arbitrary files via a .. (dot dot) in a list name. | Gnu · Mailman | Possible | – | 7.9% | 2015-04-13 |
| CVE-2015-1196GNU patch 2.7.1 allows remote attackers to write to arbitrary files via a symlink attack in a patch file. | Gnu · Patch | Possible | – | 6.1% | 2015-01-21 |
| CVE-2010-4651Directory traversal vulnerability in util.c in GNU patch 2.6.1 and earlier allows user-assisted remote attackers to create or overwrite arbitrary files via a filename that is spec… | Gnu · Gnu Patch | Possible | – | 4.9% | 2011-03-11 |
| CVE-2019-13636In GNU patch through 2.7.6, the following of symlinks is mishandled in certain cases other than input files. This affects inp.c and util.c. | Gnu · Patch | Possible | – | 3.9% | 2019-07-17 |
| CVE-2015-1396A Directory Traversal vulnerability exists in the GNU patch before 2.7.4. A remote attacker can write to arbitrary files via a symlink attack in a patch file. NOTE: this issue exi… | Gnu · Patch | Possible | – | 3.3% | 2019-11-25 |
| CVE-2010-4226cpio, as used in build 2007.05.10, 2010.07.28, and possibly other versions, allows remote attackers to overwrite arbitrary files via a symlink within an RPM package archive. | Gnu · Cpio | Possible | 7.2 | 2.9% | 2014-02-06 |
| CVE-2005-1918The original patch for a GNU tar directory traversal vulnerability (CVE-2002-0399) in Red Hat Enterprise Linux 3 and 2.1 uses an "incorrect optimization" that allows user-assisted… | Gnu · Tar | Possible | – | 2.9% | 2006-02-21 |
| CVE-2017-16997elf/dl-load.c in the GNU C Library (aka glibc or libc6) 2.19 through 2.26 mishandles RPATH and RUNPATH containing $ORIGIN for a privileged (setuid or AT_SECURE) program, which all… | Gnu · glibc 2.19 through 2.26 | Possible | – | 2.9% | 2017-12-18 |
| CVE-2014-0475Multiple directory traversal vulnerabilities in GNU C Library (aka glibc or libc6) before 2.20 allow context-dependent attackers to bypass ForceCommand restrictions and possibly h… | Gnu · Glibc | Possible | – | 2.8% | 2014-07-29 |
| CVE-2005-3355Directory traversal vulnerability in GNU Gnump3d before 2.9.8 has unknown impact via "CGI parameters, and cookie values". | Gnu · Gnump3d | Possible | – | 2.2% | 2005-11-18 |
| CVE-2025-43919GNU Mailman 2.1.39, as bundled in cPanel (and WHM), allows unauthenticated attackers to read arbitrary files via ../ directory traversal at /mailman/private/mailman (aka the priva… | GNU · Mailman | Possible | 5.8 | 1.4% | 2025-04-20 |
| CVE-2014-8737Multiple directory traversal vulnerabilities in GNU binutils 2.24 and earlier allow local users to delete arbitrary files via a .. (dot dot) or full path name in an archive to (1)… | Gnu · Binutils | Possible | – | 1.0% | 2014-12-09 |
| CVE-2025-69194Wget2: arbitrary file write via metalink path traversal in gnu wget2 | Gnu · Wget2 | Unlikely | 8.8 | 0.8% | 2026-01-09 |
| CVE-2005-3011The sort_offline function for texindex in texinfo 4.8 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files. | Gnu · Texinfo | Unlikely | – | 0.5% | 2005-09-21 |
| CVE-2025-45582GNU Tar through 1.35 allows file overwrite via directory traversal in crafted TAR archives, with a certain two-step process. First, the victim must extract an archive that contain… | GNU · Tar | Unlikely | 4.1 | 0.5% | 2025-07-11 |
| CVE-2014-2524The _rl_tropen function in util.c in GNU readline before 6.3 patch 3 allows local users to create or overwrite arbitrary files via a symlink attack on a /var/tmp/rltrace.[PID] fil… | Gnu · Readline | Unlikely | – | 0.4% | 2014-08-20 |
| CVE-2008-1694vcdiff in Emacs 20.7 to 22.1.50, when used with SCCS, allows local users to overwrite arbitrary files via a symlink attack on temporary files. | Gnu · Emacs | Unlikely | – | 0.4% | 2008-04-21 |
| CVE-2001-1593The tempname_ensure function in lib/routines.h in a2ps 4.14 and earlier, as used by the spy_user function and possibly other functions, allows local users to modify arbitrary file… | Gnu · A2ps | Unlikely | – | 0.4% | 2014-04-05 |
| CVE-2009-4135The distcheck rule in dist-check.mk in GNU coreutils 5.2.1 through 8.1 allows local users to gain privileges via a symlink attack on a file in a directory tree under /tmp. | Gnu · Coreutils | Unlikely | – | 0.4% | 2009-12-11 |
| CVE-2015-4155GNU Parallel before 20150422, when using (1) --pipe, (2) --tmux, (3) --cat, (4) --fifo, or (5) --compress, allows local users to write to arbitrary files via a symlink attack on a… | Gnu · Parallel | Unlikely | – | 0.4% | 2015-06-02 |
| CVE-2009-5044contrib/pdfmark/pdfroff.sh in GNU troff (aka groff) before 1.21 allows local users to overwrite arbitrary files via a symlink attack on a pdf#####.tmp temporary file. | Gnu · Groff | Unlikely | – | 0.4% | 2011-06-24 |
| CVE-2015-4156GNU Parallel before 20150522 (Nepal), when using (1) --cat or (2) --fifo with --sshlogin, allows local users to write to arbitrary files via a symlink attack on a temporary file. | Gnu · Parallel | Unlikely | – | 0.4% | 2015-06-02 |
| CVE-2010-1160GNU nano before 2.2.4 does not verify whether a file has been changed before it is overwritten in a file-save operation, which allows local user-assisted attackers to overwrite ar… | Gnu · Nano | Unlikely | – | 0.4% | 2010-04-16 |
| CVE-2005-3349GNU Gnump3d before 2.9.8 allows local users to modify or delete arbitrary files via a symlink attack on the index.lok temporary file. | Gnu · Gnump3d | Unlikely | – | 0.4% | 2005-11-18 |
| CVE-2014-3424lisp/net/tramp-sh.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on a /tmp/tramp.##### temporary file. | Gnu · Emacs | Unlikely | – | 0.4% | 2014-05-08 |
| CVE-2009-5080The (1) contrib/eqn2graph/eqn2graph.sh, (2) contrib/grap2graph/grap2graph.sh, and (3) contrib/pic2graph/pic2graph.sh scripts in GNU troff (aka groff) 1.21 and earlier do not prope… | Gnu · Groff | Unlikely | – | 0.4% | 2011-06-30 |
| CVE-2014-3423lisp/net/browse-url.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on a /tmp/Mosaic.##### temporary file. | Gnu · Emacs | Unlikely | – | 0.4% | 2014-05-08 |
| CVE-2008-4475ibackup 2.27 allows local users to overwrite arbitrary files via a symlink attack on temporary files. | Gnu · Ibackup | Unlikely | – | 0.3% | 2008-10-07 |
| CVE-2014-3422lisp/emacs-lisp/find-gc.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file under /tmp/esrc/. | Gnu · Emacs | Unlikely | – | 0.3% | 2014-05-08 |
| CVE-2014-3421lisp/gnus/gnus-fun.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on the /tmp/gnus.face.ppm temporary file. | Gnu · Emacs | Unlikely | – | 0.3% | 2014-05-08 |
| CVE-2010-4337The configure script in gnash 0.8.8 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/gnash-configure-errors.$$, (2) /tmp/gnash-configure-warnin… | Gnu · Gnash | Unlikely | – | 0.3% | 2011-01-14 |
| CVE-2010-2056GNU gv before 3.7.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary file. | Gnu · Gv | Unlikely | – | 0.3% | 2010-07-22 |
| CVE-2009-5082The (1) configure and (2) config.guess scripts in GNU troff (aka groff) 1.20.1 on Openwall GNU/*/Linux (aka Owl) improperly create temporary files upon a failure of the mktemp fun… | Gnu · Groff | Unlikely | – | 0.3% | 2011-06-30 |
| CVE-2005-1111Race condition in cpio 2.6 and earlier allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissio… | Gnu · Cpio | Unlikely | – | 0.3% | 2005-04-16 |
| CVE-2007-5377The (1) tramp-make-temp-file and (2) tramp-make-tramp-temp-file functions in Tramp 2.1.10 extension for Emacs, and possibly earlier 2.1.x versions, allows local users to overwrite… | Gnu · Tramp | Unlikely | – | 0.3% | 2007-10-12 |
| CVE-2021-20197There is an open race window when writing output in the following utilities in GNU binutils version 2.35 and earlier:ar, objcopy, strip, ranlib. When these utilities are run as a… | Gnu · binutils | Unlikely | 6.3 | 0.3% | 2021-03-26 |
| CVE-2009-5079The (1) gendef.sh, (2) doc/fixinfo.sh, and (3) contrib/gdiffmk/tests/runtests.in scripts in GNU troff (aka groff) 1.21 and earlier allow local users to overwrite arbitrary files v… | Gnu · Groff | Unlikely | – | 0.3% | 2011-06-30 |
| CVE-2009-5081The (1) config.guess, (2) contrib/groffer/perl/groffer.pl, and (3) contrib/groffer/perl/roff2.pl scripts in GNU troff (aka groff) 1.21 and earlier use an insufficient number of X… | Gnu · Groff | Unlikely | – | 0.3% | 2011-06-30 |
| CVE-2026-66484Path Traversal in GNU cpio | GNU · cpio | Unlikely | 4.6 | 0.2% | 2026-08-10 |
| CVE-2026-100310GNU libextractor before 1.16 Privilege Escalation via LIBEXTRACTOR_PREFIX | GNU · libextractor | Unlikely | 7.0 | 0.1% | 2026-09-25 |
| CVE-2026-56390Arbitrary Output Location Change in GNU Bison | GNU · Bison | Unlikely | 4.6 | 0.1% | 2026-07-29 |
| CVE-2026-41991Predictable Temporary File in GNU gzip | GNU · gzip | Unlikely | 2.0 | 0.1% | 2026-06-29 |
Exploitation: exploited (CISA KEV), a public nuclei check, then EPSS: likely 10% or more, possible 1 to 10%, unlikely under 1%. Data as of 2026-11-15.