GN
Product
Gnucash
2
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Gnucash to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2010-3999 | – | Nov 5 | gnc-test-env in GnuCash 2.3.15 and earlier places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared… Affected: through 2.3.15; 1.8.3; 1.8.4; 1.8.5; 2.0.0; 2.0.1; +25 more |
| CVE-2007-0007 | – | Feb 20 | gnucash 2.0.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on the (1) gnucash.trace, (2) qof.trace, and (3) qof.trace.[PID] temporary files Affected: through 2.0.4 |
Showing 2