Vendor
GNATS
Products
3
CVEs
3
Across products
4
Status
Private
Products
3- 2 CVEs
- 2 CVEs
- 0 CVEs
Recent CVEs
3| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2007-2808 | 0.00 | — | 0.01 | May 22, 2007 | Cross-site scripting (XSS) vulnerability in gnatsweb.pl in Gnatsweb 4.00 and Gnats 4.1.99 allows remote attackers to inject arbitrary web script or HTML via the database parameter. | |||
| CVE-2005-2180 | 0.00 | — | 0.00 | Jul 11, 2005 | gen-index in GNATS 4.0, 4.1.0, and possibly earlier versions, when installed setuid, does not properly check files passed to the -o argument and opens the file with write access, which allows local users to overwrite arbitrary files. | |||
| CVE-2001-0808 | 0.00 | — | 0.04 | Dec 6, 2001 | gnatsweb.pl in GNATS GnatsWeb 2.7 through 3.95 allows remote attackers to execute arbitrary commands via certain characters in the help_file parameter. |
- CVE-2007-2808May 22, 2007risk 0.00cvss —epss 0.01
Cross-site scripting (XSS) vulnerability in gnatsweb.pl in Gnatsweb 4.00 and Gnats 4.1.99 allows remote attackers to inject arbitrary web script or HTML via the database parameter.
- CVE-2005-2180Jul 11, 2005risk 0.00cvss —epss 0.00
gen-index in GNATS 4.0, 4.1.0, and possibly earlier versions, when installed setuid, does not properly check files passed to the -o argument and opens the file with write access, which allows local users to overwrite arbitrary files.
- CVE-2001-0808Dec 6, 2001risk 0.00cvss —epss 0.04
gnatsweb.pl in GNATS GnatsWeb 2.7 through 3.95 allows remote attackers to execute arbitrary commands via certain characters in the help_file parameter.