Approved changes feed: RSS · Atom
cpe:2.3:a:cscope:cscope:15.4:*:*:*:*:*:*:*part: a version: 15.4 update: *
| Vendor | Cscope (eca0c697-4d6e-50ea-8449-39883925e1aa) |
|---|---|
| Product | Cscope (55e91938-df75-5cd5-b593-f245cfca5d86) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/cscope |
purl2cpe | 2026-06-01 10:16:34.464826 |
pkg:deb/ubuntu/cscope |
purl2cpe | 2026-06-01 10:16:34.464828 |
pkg:github/portante/cscope |
purl2cpe | 2026-06-01 10:16:34.464829 |
pkg:rpm/fedora/cscope |
purl2cpe | 2026-06-01 10:16:34.464830 |
pkg:rpm/opensuse/cscope |
purl2cpe | 2026-06-01 10:16:34.464832 |
pkg:sourceforge/cscope |
purl2cpe | 2026-06-01 10:16:34.464833 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2009-1577 |
vulnerable | 2026-06-08 04:51:24.069769 |
Details available
Multiple stack-based buffer overflows in the putstring function in find.c in Cscope before 15.6 allow user-assisted remote attackers to execute arbitrary code via a long (1) function name or (2) symbol in a source-code file.
Published: 2009-05-07T17:00:00.000Z
Updated: 2024-08-07T05:20:34.468Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-0148 |
vulnerable | 2026-06-08 04:51:07.843933 |
Details available
Multiple buffer overflows in Cscope before 15.7a allow remote attackers to execute arbitrary code via long strings in input such as (1) source-code tokens and (2) pathnames, related to integer overflows in some cases. NOTE: this issue exists because of an incomplete fix for CVE-2004-2541.
Published: 2009-05-05T17:00:00.000Z
Updated: 2024-08-07T04:24:17.619Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-0996 |
vulnerable | 2026-06-08 04:47:52.238747 |
Details available
main.c in cscope 15-4 and 15-5 creates temporary files with predictable filenames, which allows local users to overwrite arbitrary files via a symlink attack.
Published: 2004-12-01T05:00:00.000Z
Updated: 2024-08-08T00:39:00.654Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.