Lucene search
+L

351 matches found

CVE
CVE
•added 2021/04/21 6:41 p.m.•70 views

CVE-2021-31523

The CVE-2021-31523 vulnerability affects the Debian xscreensaver package (5.42+dfsg1-1) for XScreenSaver, where cap_net_raw is enabled for the /usr/libexec/xscreensaver/sonar binary. This configuration could allow local users to gain privileges, as the behavior is described as potentially incompa...

7.8CVSS7.7AI score0.00318EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2021/04/21 12:00 a.m.•14 views

XScreenSaver 安全漏洞

XScreenSaver is an open source screen saver program written in C language. A security vulnerability exists in Debian xscreensaver 5.42+dfsg1-1, which can be exploited by attackers to gain privileges...

7.8CVSS5.6AI score0.00318EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/21 12:00 a.m.•4 views

CVE-2021-31523: Improper Privilege Management

The Debian xscreensaver 5.42+dfsg1-1 package for XScreenSaver has capnetraw enabled for the /usr/libexec/xscreensaver/sonar file, which allows local users to gain privileges because this is arguably incompatible with the design of the Mesa 3D Graphics library dependency...

7.8CVSS5.9AI score0.00318EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2021/04/19 12:00 a.m.•11 views

SUSE: Security Advisory (SUSE-SU-2015:2053-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

2.1CVSS5.9AI score0.00508EPSS
SaveExploits1References4
OpenVAS
OpenVAS
•added 2021/04/19 12:00 a.m.•16 views

SUSE: Security Advisory (SUSE-SU-2015:2053-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

2.1CVSS6.5AI score0.00508EPSS
SaveExploits1References4
Veracode
Veracode
•added 2020/04/10 12:15 a.m.•25 views

Denial Of Service (DoS)

XScreenSaver is vulnerable Denial of Service DoS. When a system is using a remote directory service for login credentials, a local attacker may be able to cause a network outage causing XScreenSaver to crash, unlocking the screen...

4.6CVSS2.2AI score0.00413EPSS
SaveExploits0References20Affected Software1
OSV
OSV
•added 2019/11/27 6:15 p.m.•13 views

DEBIAN-CVE-2011-2187

xscreensaver before 5.14 crashes during activation and leaves the screen unlocked when in Blank Only Mode and when DPMS is disabled, which allows local attackers to access resources without authentication...

7.8CVSS7.4AI score0.00482EPSS
SaveExploits1References1
NVD
NVD
•added 2019/11/27 6:15 p.m.•27 views

CVE-2011-2187

xscreensaver before 5.14 crashes during activation and leaves the screen unlocked when in Blank Only Mode and when DPMS is disabled, which allows local attackers to access resources without authentication...

7.8CVSS7.5AI score0.00482EPSS
SaveExploits1References6
OSV
OSV
•added 2019/11/27 6:15 p.m.•15 views

CVE-2011-2187

xscreensaver before 5.14 crashes during activation and leaves the screen unlocked when in Blank Only Mode and when DPMS is disabled, which allows local attackers to access resources without authentication...

7.8CVSS6.5AI score
SaveExploits0References10
Prion
Prion
•added 2019/11/27 6:15 p.m.•27 views

Authentication flaw

xscreensaver before 5.14 crashes during activation and leaves the screen unlocked when in Blank Only Mode and when DPMS is disabled, which allows local attackers to access resources without authentication...

4.6CVSS6.8AI score0.00482EPSS
SaveExploits1References6Affected Software2
UbuntuCve
UbuntuCve
•added 2019/11/27 6:15 p.m.•32 views

CVE-2011-2187

xscreensaver before 5.14 crashes during activation and leaves the screen unlocked when in Blank Only Mode and when DPMS is disabled, which allows local attackers to access resources without authentication...

7.8CVSS7.1AI score0.00482EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2019/11/27 5:28 p.m.•33 views

CVE-2011-2187

xscreensaver before 5.14 crashes during activation and leaves the screen unlocked when in Blank Only Mode and when DPMS is disabled, which allows local attackers to access resources without authentication...

7.5AI score0.00482EPSS
SaveExploits1References6
CVE
CVE
•added 2019/11/27 5:28 p.m.•82 views

CVE-2011-2187

XScreensaver (version prior to 5.14) crashes during activation and leaves the screen unlocked when Blank Only Mode is used and DPMS is disabled, enabling local attackers to access resources without authentication. The provided connected documents confirm the affected software and the unlock condi...

7.8CVSS7.4AI score0.00482EPSS
SaveExploits1References6Affected Software1
Debian CVE
Debian CVE
•added 2019/11/27 5:28 p.m.•35 views

CVE-2011-2187

xscreensaver before 5.14 crashes during activation and leaves the screen unlocked when in Blank Only Mode and when DPMS is disabled, which allows local attackers to access resources without authentication...

7.8CVSS4.9AI score0.00482EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/11/27 12:00 a.m.•2 views

CVE-2011-2187: Missing Authentication for Critical Function

xscreensaver before 5.14 crashes during activation and leaves the screen unlocked when in Blank Only Mode and when DPMS is disabled, which allows local attackers to access resources without authentication...

7.8CVSS7.3AI score0.00482EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
•added 2019/10/29 12:00 a.m.•17 views

The vulnerability of the XScreenSaver component in the Solaris operating system allows a hacker to gain full control over the system.

The vulnerability of the XScreenSaver component in the Solaris operating system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain full control over the system...

8.8CVSS7.9AI score0.13399EPSS
SaveExploits8References5Affected Software1
Packet Storm
Packet Storm
•added 2019/10/23 12:00 a.m.•221 views

Solaris xscreensaver Privilege Escalation

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Solaris xscreensaver log Privilege Escalation', 'Description' = %q This module exploits a vulnerability in xscreensaver versions since 5.06 on...

4.6CVSS7.7AI score0.13399EPSS
SaveExploits8
Exploit DB
Exploit DB
•added 2019/10/21 12:00 a.m.•663 views

Solaris 11.4 - xscreensaver Privilege Escalation

@Mediaservice.net Security Advisory 2019-02 last updated on 2019-10-16 Title: Local privilege escalation on Solaris 11.x via xscreensaver Application: Jamie Zawinski's xscreensaver 5.39 distributed with Solaris 11.4 Jamie Zawinski's xscreensaver 5.15 distributed with Solaris 11.3 Other versions...

8.8CVSS7.7AI score0.13399EPSS
SaveExploits8
exploitpack
exploitpack
•added 2019/10/21 12:00 a.m.•103 views

Solaris 11.4 - xscreensaver Privilege Escalation

Solaris 11.4 - xscreensaver Privilege Escalation @Mediaservice.net Security Advisory 2019-02 last updated on 2019-10-16 Title: Local privilege escalation on Solaris 11.x via xscreensaver Application: Jamie Zawinski's xscreensaver 5.39 distributed with Solaris 11.4 Jamie Zawinski's xscreensaver 5....

4.6CVSS7.7AI score0.13399EPSS
SaveExploits8
zdt
zdt
•added 2019/10/20 12:00 a.m.•155 views

Solaris xscreensaver 11.4 - Privilege Escalation Exploit

@Mediaservice.net Security Advisory 2019-02 last updated on 2019-10-16 Title: Local privilege escalation on Solaris 11.x via xscreensaver Application: Jamie Zawinski's xscreensaver 5.39 distributed with Solaris 11.4 Jamie Zawinski's xscreensaver 5.15 distributed with Solaris 11.3 Other versions...

8.8CVSS7.7AI score0.13399EPSS
SaveExploits8
Rows per page
Query Builder