Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2635▼ 214 respecto a la semana anterior
Críticas / altas1385▲ 153 respecto a la semana anterior
Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)56▼ 473 respecto a la semana anterior
–

6 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
ModificadaAlta (7.5)2.9%—Sillycycle XlockmoreFedoraproject Fedora21/11/201916/6/2026
xlockmore before 5.43 'dclock' security bypass vulnerability
ModificadaCrítica (9.8)1.5%—Sillycycle Xlockmore6/11/201916/6/2026
xlockmore 5.13 allows potential xlock bypass when FVWM switches to the same virtual desktop as a new Gaim window.
ModificadaCrítica (9.8)1.8%—Sillycycle Xlockmore6/11/201916/6/2026
xlockmore 5.13 and 5.22 segfaults when using libpam-opensc and returns the underlying xsession. This allows unauthorized users access to the X session.
ModificadaBaja (2.1)0.40%—David Bagley Xlockmore30/5/201416/6/2026
The (1) checkPasswd and (2) checkGroupXlockPasswds functions in xlockmore before 5.43 do not properly handle when a NULL value is returned upon an error by the crypt or dispcrypt function as implemented in glibc 2.17 and later, which allows attackers to bypass the screen lock via vectors related to invalid salts.
ModificadaAlta (7.2)1.2%—David Bagley Xlock20/10/200016/6/2026
xlockmore and xlockf do not properly cleanse user-injected format strings, which allows local users to gain root privileges via the -d option.
ModificadaBaja (2.1)0.40%—David Bagley Xlock29/5/200016/6/2026
Buffer overflow in xlockmore xlock program version 4.16 and earlier allows local users to read sensitive data from memory via a long -mode option.