https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2012-3292.htmlhttps://patchthecve.com/cve/CVE-2012-3292.htmlTue, 16 Jun 2026 23:42:56 +0000HIGH 7.6: The GridFTP in Globus Toolkit (GT) before 5.2.2, when certain autoconf macros are defined, does not properly check the return value from the getpwnam_r function, which might allow remote attackers to gain privileges by logging in with a user that does not exist, which causes GridFTP to run as the lahttps://patchthecve.com/cve/CVE-2011-0738.htmlhttps://patchthecve.com/cve/CVE-2011-0738.htmlTue, 16 Jun 2026 23:27:59 +0000MEDIUM 4.3: MyProxy 5.0 through 5.2, as used in Globus Toolkit 5.0.0 through 5.0.2, does not properly verify the (1) hostname or (2) identity in the X.509 certificate for the myproxy-server, which allows remote attackers to spoof the server and conduct man-in-the-middle (MITM) attacks via a crafted certificate https://patchthecve.com/cve/CVE-2007-2784.htmlhttps://patchthecve.com/cve/CVE-2007-2784.htmlTue, 16 Jun 2026 22:40:18 +0000HIGH 7.8: Unspecified vulnerability in globus-job-manager in Globus Toolkit 4.1.1 and earlier (globus_nexus-6.6 and earlier) allows remote attackers to cause a denial of service (resource exhaustion and system crash) via certain requests to temporary TCP ports for a GRAM2 job or its MPICH-G2 applications.