Lucene search
+L

1340 matches found

CVE
CVE
added 2024/01/18 3:40 p.m.487 views

CVE-2024-0409

CVE-2024-0409 is part of multiple xorg-x11-server advisories (ALSA/ALAS2/CentOS) affecting X.Org X server components. Connected documents specify concrete CVEs and affected packages: CVE-2023-6816 (Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer), CVE-2024-0229 (reattaching to dif...

7.8CVSS8.1AI score0.00356EPSS
SaveExploits0References13Affected Software3
Cvelist
Cvelist
added 2024/01/18 3:40 p.m.47 views

CVE-2024-0409 Xorg-x11-server: selinux context corruption

A flaw was found in the X.Org server. The cursor code in both Xephyr and Xwayland uses the wrong type of private at creation. It uses the cursor bits type with the cursor as private, and when initiating the cursor, that overwrites the XSELINUX context...

7.8CVSS9AI score0.00356EPSS
SaveExploits0References7
AlpineLinux
AlpineLinux
added 2024/01/18 3:40 p.m.29 views

CVE-2024-0409

A flaw was found in the X.Org server. The cursor code in both Xephyr and Xwayland uses the wrong type of private at creation. It uses the cursor bits type with the cursor as private, and when initiating the cursor, that overwrites the XSELINUX context...

7.8CVSS9AI score0.00356EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2024/01/18 3:40 p.m.43 views

CVE-2024-0409

A flaw was found in the X.Org server. The cursor code in both Xephyr and Xwayland uses the wrong type of private at creation. It uses the cursor bits type with the cursor as private, and when initiating the cursor, that overwrites the XSELINUX context...

7.8CVSS7.5AI score0.00356EPSS
SaveExploits0
OSV
OSV
added 2024/01/18 3:40 p.m.21 views

CVE-2024-0409 Xorg-x11-server: selinux context corruption

A flaw was found in the X.Org server. The cursor code in both Xephyr and Xwayland uses the wrong type of private at creation. It uses the cursor bits type with the cursor as private, and when initiating the cursor, that overwrites the XSELINUX context...

7.8CVSS7.1AI score
SaveExploits0References17
RedhatCVE
RedhatCVE
added 2024/01/18 12:1 p.m.46 views

CVE-2024-0409

A flaw was found in the X.Org server. The cursor code in both Xephyr and Xwayland uses the wrong type of private at creation. It uses the cursor bits type with the cursor as private, and when initiating the cursor, that overwrites the XSELINUX context. Mitigation Mitigation for this issue is eith...

7.8CVSS8.7AI score0.00356EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2024/01/17 2:45 a.m.3 views

SUSE CVE-2024-0409

A flaw was found in the X.Org server. The cursor code in both Xephyr and Xwayland uses the wrong type of private at creation. It uses the cursor bits type with the cursor as private, and when initiating the cursor, that overwrites the XSELINUX context...

5.5CVSS6.9AI score0.00356EPSS
SaveExploits0References9
OSV
OSV
added 2024/01/16 12:0 a.m.4 views

UBUNTU-CVE-2024-0409

A flaw was found in the X.Org server. The cursor code in both Xephyr and Xwayland uses the wrong type of private at creation. It uses the cursor bits type with the cursor as private, and when initiating the cursor, that overwrites the XSELINUX context...

7.8CVSS7.1AI score0.00356EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2024/01/16 12:0 a.m.31 views

CVE-2024-0409

A flaw was found in the X.Org server. The cursor code in both Xephyr and Xwayland uses the wrong type of private at creation. It uses the cursor bits type with the cursor as private, and when initiating the cursor, that overwrites the XSELINUX context...

7.8CVSS7.1AI score0.00356EPSS
SaveExploits0References3
CNVD
CNVD
added 2024/01/12 12:0 a.m.15 views

IBM Db2 Denial of Service Vulnerability (CNVD-2025-03032)

IBM Db2 is a relational database management system from International Business Machines IBM. The system's execution environments are mainly UNIX, Linux, IBMi, z/OS, and Windows server versions. IBM Db2 suffers from a denial of service vulnerability that originates when a specially crafted cursor ...

7.5CVSS6.5AI score0.00809EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/01/09 12:0 a.m.7 views

IBM Db2 输入验证错误漏洞

IBM Db2 is a relational database management system from International Business Machines IBM. The system's execution environments are mainly UNIX, Linux, IBMi, z/OS, and Windows server versions. IBM Db2 suffers from a denial of service vulnerability that originates when a specially crafted cursor ...

7.5CVSS6.6AI score0.00809EPSS
SaveExploits0References4
NVD
NVD
added 2024/01/08 7:15 p.m.25 views

CVE-2023-5911

The WP Custom Cursors | WordPress Cursor Plugin WordPress plugin through 3.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in...

4.8CVSS4.7AI score0.00335EPSS
SaveExploits1References1
CVE
CVE
added 2024/01/08 7:0 p.m.85 views

CVE-2023-5911

The CVE-2023-5911 entry covers the WP Custom Cursors WordPress plugin (versions through 3.2). The issue is stored XSS caused by insufficient sanitization/escaping of certain settings, enabling high-privilege users (e.g., admins) to inject script even when unfiltered_html is disallowed (notably in...

4.8CVSS4.7AI score0.00335EPSS
SaveExploits1References1Affected Software1
Citrix
Citrix
added 2023/12/19 12:0 a.m.9 views

Mouse cursor flickers when dragging publish app Explorer

The mouse cursor flickers when dragging the publish app Explorer. The issue doesn't happen if using window mode...

7.2AI score
SaveExploits0
OSV
OSV
added 2023/12/04 1:15 a.m.5 views

CVE-2023-46167

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 11.5 federated server is vulnerable to a denial of service when a specially crafted cursor is used. IBM X-Force ID: 269367...

7.5CVSS7.6AI score0.01089EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2023/12/04 12:4 a.m.25 views

CVE-2023-46167 IBM Db2 denial of service

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 11.5 federated server is vulnerable to a denial of service when a specially crafted cursor is used. IBM X-Force ID: 269367...

5.9CVSS7.3AI score0.01089EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2023/11/14 3:46 p.m.5 views

kernel: Linux kernel: Denial of Service in vmwgfx due to invalid DMA surface copies

A flaw was discovered in the Linux kernel’s DRM vmwgfx driver related to how cursor images are snooped and copied. When the dimensions of a DMA surface copybox were derived from untrusted userspace data without proper validation against the expected snooped cursor size, an invalid size could caus...

7.8CVSS7.4AI score0.00156EPSS
SaveExploits0References5
NVD
NVD
added 2023/11/09 9:15 p.m.10 views

CVE-2023-32739

Cross-Site Request Forgery CSRF vulnerability in WebTrendy WP Custom Cursors | WordPress Cursor Plugin plugin 3.2 versions...

8.8CVSS0.0028EPSS
SaveExploits0References1
OSV
OSV
added 2023/11/09 9:15 p.m.7 views

CVE-2023-32739

Cross-Site Request Forgery CSRF vulnerability in WebTrendy WP Custom Cursors | WordPress Cursor Plugin plugin 3.2 versions...

8.8CVSS5.8AI score0.0028EPSS
SaveExploits0References1
Prion
Prion
added 2023/11/09 9:15 p.m.17 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in WebTrendy WP Custom Cursors | WordPress Cursor Plugin plugin 3.2 versions...

6.8CVSS7.2AI score0.0028EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder