Gnats

This hub aggregates every CVE we track for Gnats, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 3 most recently published vulnerabilities affecting Gnats.

• CVE-2007-2808Cross-site scripting (XSS) vulnerability in gnatsweb.pl in Gnatsweb 4.00 and Gnats 4.1.99 allows remote attackers to inject arbitrary web script or HTML via the database parameter.4.3May 22, 2007
• CVE-2005-2180gen-index in GNATS 4.0, 4.1.0, and possibly earlier versions, when installed setuid, does not properly check files passed to the -o argument and opens the file with write access, which allows local...2.1Jul 10, 2005
• CVE-2004-0623Format string vulnerability in misc.c in GNU GNATS 4.00 may allow remote attackers to execute arbitrary code via format string specifiers in a string that gets logged by syslog.10.0Jun 30, 2004