Privacy Guard
Vendor:
First CVE: Dec 19, 2000 · Active for 25 years
10
Total CVEs
More Total CVEs than 88% of tracked products
2.0
Avg CVEs / Year
Higher CVE frequency than 60% of tracked products
6.4
Avg CVSS
Higher Avg CVSS than 28% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Privacy Guard over time
Volume of CVEsAvg CVSS Base Score
First CVE
Dec 19, 2000
25 years ago
Most Recent CVE
Dec 7, 2006
7,169 days ago
CVE Severity & Scoring
Privacy Guard10 CVEs
10%
40%
50%
All CVEs352,294 CVEs
45%
40%
11%
LowMediumHigh
Attack Vector
Local0 (0.0%)
Network0 (0.0%)
Unknown10 (100.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low0 (0.0%)
High0 (0.0%)
Unknown10 (100.0%)
User Interaction
None0 (0.0%)
Unknown10 (100.0%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None0 (0.0%)
Unknown10 (100.0%)
Top CVEs
Signals from CVEs in this product scope (10 CVEs).
10 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2001-0522HIGH Format string vulnerability in Gnu Privacy Guard (aka GnuPG or gpg) 1.05 and earlier can allow an attacker to gain privileges via format strings in the original filename that is st | Aug 14, 2001 | 7.5 | 34 | NO | YES |
CVE-2003-0255HIGH The key validation code in GnuPG before 1.2.2 does not properly determine the validity of keys with multiple user IDs and assigns the greatest validity of the most valid user ID, w | May 27, 2003 | 10.0 | 27 | NO | NO |
CVE-2006-6235HIGH A "stack overwrite" vulnerability in GnuPG (gpg) 1.x before 1.4.6, 2.x before 2.0.2, and 1.9.0 through 1.9.95 allows attackers to execute arbitrary code via crafted OpenPGP packets | Dec 7, 2006 | 10.0 | 26 | NO | NO |
CVE-2006-0455MEDIUM gpgv in GnuPG before 1.4.2.1, when using unattended signature verification, returns a 0 exit code in certain cases even when the detached signature file does not carry a signature, | Feb 15, 2006 | 4.6 | 23 | NO | YES |
CVE-2003-0978HIGH Format string vulnerability in gpgkeys_hkp (experimental HKP interface) for the GnuPG (gpg) client 1.2.3 and earlier, and 1.3.3 and earlier, allows remote attackers or a malicious | Jan 5, 2004 | 7.5 | 20 | NO | NO |
CVE-2000-0974HIGH GnuPG (gpg) 1.0.3 does not properly check all signatures of a file containing multiple documents, which allows an attacker to modify contents of all documents but the first without | Dec 19, 2000 | 7.5 | 20 | NO | NO |
CVE-2003-0971MEDIUM GnuPG (GPG) 1.0.2, and other versions up to 1.2.3, creates ElGamal type 20 (sign+encrypt) keys using the same key component for encryption as for signing, which allows attackers to | Dec 15, 2003 | 5.0 | 19 | NO | NO |
CVE-2001-0072MEDIUM gpg (aka GnuPG) 1.0.4 and other versions imports both public and private keys from public key servers without notifying the user about the private keys, which could allow an attack | Feb 12, 2001 | 5.0 | 19 | NO | NO |
CVE-2006-0049MEDIUM gpg in GnuPG before 1.4.2.2 does not properly verify non-detached signatures, which allows attackers to inject unsigned data via a data packet that is not associated with a control | Mar 13, 2006 | 5.0 | 16 | NO | NO |
gpg (aka GnuPG) 1.0.4 and other versions does not properly verify detached signatures, which allows attackers to modify the contents of a file without detection. | Feb 12, 2001 | 2.1 | 14 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (10 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
2 CVEs
20.0% of CVEs· 89th percentile
Social Chatter
Signals from CVEs in this product scope (10 CVEs).
Media Mentions
Signals from CVEs in this product scope (10 CVEs).
Top CNAs Publishing CVEs For Privacy Guard
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 8.0 | 1 | 7.5 | 13.7% | 0 | 1 |
| 7.2 | 1 | 7.5 | 13.7% | 0 | 1 |
| 7.1 | 1 | 7.5 | 13.7% | 0 | 1 |
| 2.0.1 | 1 | 10.0 | 5.7% | 0 | 0 |
| 2.0 | 1 | 10.0 | 5.7% | 0 | 0 |
| 1.9.20 | 1 | 10.0 | 5.7% | 0 | 0 |
| 1.9.15 | 1 | 10.0 | 5.7% | 0 | 0 |
| 1.9.10 | 1 | 10.0 | 5.7% | 0 | 0 |
| 1.4.5 | 1 | 10.0 | 5.7% | 0 | 0 |
| 1.4.4 | 1 | 10.0 | 5.7% | 0 | 0 |
| 1.4.3 | 1 | 10.0 | 5.7% | 0 | 0 |
| 1.4.2.2 | 1 | 10.0 | 5.7% | 0 | 0 |
| 1.4.2.1 | 2 | 7.5 | 4.0% | 0 | 0 |
| 1.4.2 | 3 | 6.5 | 3.1% | 0 | 1 |
| 1.4.1 | 3 | 6.5 | 3.1% | 0 | 1 |
| 1.4 | 3 | 6.5 | 3.1% | 0 | 1 |
| 1.3.4 | 3 | 6.5 | 3.1% | 0 | 1 |
| 1.3.3 | 4 | 6.8 | 3.0% | 0 | 1 |
| 1.2.7 | 3 | 6.5 | 3.1% | 0 | 1 |
| 1.2.6 | 3 | 6.5 | 3.1% | 0 | 1 |