Bournal

Vendor:

First CVE: Feb 25, 2010 · Active for 16 years

2
Total CVEs
More Total CVEs than 49% of tracked products
2.0
Avg CVEs / Year
Higher CVE frequency than 60% of tracked products
2.7
Avg CVSS
Bottom 1%
0.0%
KEV Rate
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Bournal over time

Volume of CVEsAvg CVSS Base Score
First CVE
Feb 25, 2010
16 years ago
Most Recent CVE
Feb 25, 2010
5,994 days ago

CVE Severity & Scoring

Bournal2 CVEs
All CVEs352,427 CVEs
Low
Attack Vector
Local0 (0.0%)
Network0 (0.0%)
Unknown2 (100.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low0 (0.0%)
High0 (0.0%)
Unknown2 (100.0%)
User Interaction
None0 (0.0%)
Unknown2 (100.0%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None0 (0.0%)
Unknown2 (100.0%)

Top CVEs

Signals from CVEs in this product scope (2 CVEs).

2 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
Bournal before 1.4.1 allows local users to overwrite arbitrary files via a symlink attack on unspecified temporary files associated with a --hack_the_gibson update check.
Feb 25, 20103.316NONO
Bournal before 1.4.1 on FreeBSD 8.0, when the -K option is used, places a ccrypt key on the command line, which allows local users to obtain sensitive information by listing the pr
Feb 25, 20102.114NONO

Exploit Exposure

Signals from CVEs in this product scope (2 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (2 CVEs).

Media Mentions

Signals from CVEs in this product scope (2 CVEs).

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
1.322.70.3%00
1.222.70.3%00
1.122.70.3%00
1.022.70.3%00
0.922.70.3%00
0.822.70.3%00
0.722.70.3%00
0.622.70.3%00
0.4.522.70.3%00
0.422.70.3%00
0.322.70.3%00
0.222.70.3%00
0.122.70.3%00