Gnump3d (Gnu) - vulnerabilities (CVEs)

7 CVEs, 0 in the last 30 days, 21 known versions, newest CVE from 2020-01-24. Vendor: Gnu.

CVEs of Gnump3d

• CVE-2019-3697 - CVSS 7.8 (high), 2020-01-24: UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of gnump3d in openSUSE Leap 15.1 allows local attackers to escalate from user gnump3d to…
• CVE-2007-6130 - CVSS 5 (medium), 2007-11-26: gnump3d 2.9final does not apply password protection to its plugins, which might allow remote attackers to bypass intended access restrictions.
• CVE-2005-3355 - CVSS 6.4 (medium), 2005-11-18: Directory traversal vulnerability in GNU Gnump3d before 2.9.8 has unknown impact via "CGI parameters, and cookie values".
• CVE-2005-3349 - CVSS 1.9 (low), 2005-11-18: GNU Gnump3d before 2.9.8 allows local users to modify or delete arbitrary files via a symlink attack on the index.lok temporary file.
• CVE-2005-3425 - CVSS 4.3 (medium), 2005-11-01: Cross-site scripting (XSS) vulnerability in GNUMP3D before 2.9.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a…
• CVE-2005-3424 - CVSS 4.3 (medium), 2005-11-01: Cross-site scripting (XSS) vulnerability in GNUMP3D before 2.9.5 allows remote attackers to inject arbitrary web script or HTML via 404 error pages, a…
• CVE-2005-3123 - CVSS 5 (medium), 2005-10-30: Directory traversal vulnerability in GNUMP3D before 2.9.6 allows remote attackers to read arbitrary files via crafted sequences such as "/.//..//////././",…