Vulnerabilities > GNU

DATE CVE VULNERABILITY TITLE RISK
2021-09-20 CVE-2021-39521 NULL Pointer Dereference vulnerability in GNU Libredwg
An issue was discovered in libredwg through v0.10.1.3751.
network
gnu CWE-476
4.3
2021-09-20 CVE-2021-39522 Out-of-bounds Write vulnerability in GNU Libredwg
An issue was discovered in libredwg through v0.10.1.3751.
network
gnu CWE-787
6.8
2021-09-20 CVE-2021-39523 NULL Pointer Dereference vulnerability in GNU Libredwg
An issue was discovered in libredwg through v0.10.1.3751.
network
gnu CWE-476
4.3
2021-09-20 CVE-2021-39525 Out-of-bounds Write vulnerability in GNU Libredwg
An issue was discovered in libredwg through v0.10.1.3751.
network
gnu CWE-787
6.8
2021-09-20 CVE-2021-39527 Out-of-bounds Write vulnerability in GNU Libredwg
An issue was discovered in libredwg through v0.10.1.3751.
network
gnu CWE-787
6.8
2021-09-20 CVE-2021-39528 Double Free vulnerability in GNU Libredwg
An issue was discovered in libredwg through v0.10.1.3751.
network
gnu CWE-415
6.8
2021-09-20 CVE-2021-39530 Out-of-bounds Write vulnerability in GNU Libredwg
An issue was discovered in libredwg through v0.10.1.3751.
network
gnu CWE-787
6.8
2021-09-20 CVE-2021-39537 Out-of-bounds Write vulnerability in multiple products
An issue was discovered in ncurses through v6.2-1.
network
low complexity
gnu apple CWE-787
8.8
2021-09-03 CVE-2021-40491 Insufficient Verification of Data Authenticity vulnerability in multiple products
The ftp client in GNU Inetutils before 2.2 does not validate addresses returned by PASV/LSPV responses to make sure they match the server address.
network
low complexity
gnu debian CWE-345
6.5
2021-08-12 CVE-2021-38604 NULL Pointer Dereference vulnerability in multiple products
In librt in the GNU C Library (aka glibc) through 2.34, sysdeps/unix/sysv/linux/mq_notify.c mishandles certain NOTIFY_REMOVED data, leading to a NULL pointer dereference.
network
low complexity
gnu fedoraproject oracle CWE-476
7.5