Lucene search
K

19 matches found

Zero Day Initiative
Zero Day Initiative
added 2 days ago4 views

X.Org Server CheckKeyActions Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling...

6.1CVSS4.9AI score0.00027EPSS
Exploits0References1
OSV
OSV
added 2026/03/15 5:55 a.m.5 views

OESA-2026-1588 libX11 security update

Core X11 protocol client library. Security Fixes: A buffer overflow flaw was found in X.Org and Xwayland. If XkbChangeTypesOfKey is called with a 0 group, it will resize the key symbols table to 0 but leave the key actions unchanged. If the same function is later called with a non-zero value of...

7.8CVSS6AI score0.00029EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-5382

Malicious code in bioql PyPI...

7.8CVSS7.7AI score0.00029EPSS
Exploits0References17
RedHat Linux
RedHat Linux
added 2025/05/13 8:28 a.m.4 views

xorg: xwayland: Buffer overflow in XkbChangeTypesOfKey()

A buffer overflow flaw was found in X.Org and Xwayland. If XkbChangeTypesOfKey is called with a 0 group, it will resize the key symbols table to 0 but leave the key actions unchanged. If the same function is later called with a non-zero value of groups, this will cause a buffer overflow because t...

7.8CVSS6AI score0.00029EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2025/04/17 6:39 a.m.4 views

xorg: xwayland: Buffer overflow in XkbChangeTypesOfKey()

A buffer overflow flaw was found in X.Org and Xwayland. If XkbChangeTypesOfKey is called with a 0 group, it will resize the key symbols table to 0 but leave the key actions unchanged. If the same function is later called with a non-zero value of groups, this will cause a buffer overflow because t...

7.8CVSS7.2AI score0.00029EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2025/03/17 1:39 a.m.3 views

xorg: xwayland: Buffer overflow in XkbChangeTypesOfKey()

A buffer overflow flaw was found in X.Org and Xwayland. If XkbChangeTypesOfKey is called with a 0 group, it will resize the key symbols table to 0 but leave the key actions unchanged. If the same function is later called with a non-zero value of groups, this will cause a buffer overflow because t...

7.8CVSS6AI score0.00029EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2025/03/17 1:32 a.m.3 views

xorg: xwayland: Buffer overflow in XkbChangeTypesOfKey()

A buffer overflow flaw was found in X.Org and Xwayland. If XkbChangeTypesOfKey is called with a 0 group, it will resize the key symbols table to 0 but leave the key actions unchanged. If the same function is later called with a non-zero value of groups, this will cause a buffer overflow because t...

7.8CVSS6AI score0.00029EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/03/14 4:22 a.m.10 views

CVE-2025-1285 Resido - Real Estate WordPress Theme <= 3.6 - Missing Authorization to Unauthenticated Server-Side Request Forgery and API Key Settings Update

The Resido - Real Estate WordPress Theme theme for WordPress is vulnerable to unauthorized access due to a missing capability check on the deleteapikey and saveapikey AJAX actions in all versions up to, and including, 3.6. This makes it possible for unauthenticated attackers to issue requests to...

5.3CVSS5.2AI score0.00153EPSS
Exploits0References2
CVE
CVE
added 2025/03/14 4:22 a.m.87 views

CVE-2025-1285

CVE-2025-1285 affects the Resido – Real Estate WordPress Theme. The vulnerability arises from a missing capability check on the delete_api_key and save_api_key AJAX actions in all versions up to and including 3.6, enabling unauthenticated attackers to issue requests to internal services and updat...

5.3CVSS5.2AI score0.00153EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/03/06 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2025-26597

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A buffer overflow flaw was found in X.Org and Xwayland. If XkbChangeTypesOfKey is called with a 0 group, it will resize the key symbols table to 0 but leave the...

7.8CVSS7.3AI score0.00029EPSS
Exploits0References3
SUSE Linux
SUSE Linux
added 2025/02/28 4:40 p.m.1 views

Security update for libX11

This update for libX11 fixes the following issues: CVE-2025-26597: improper resizing of key actions when nGroups is 0 can lead to buffer overflows in XkbChangeTypesOfKey bsc1237431. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdat...

6.8CVSS7.4AI score0.00029EPSS
Exploits0References4
NVD
NVD
added 2025/02/25 4:15 p.m.7 views

CVE-2025-26597

A buffer overflow flaw was found in X.Org and Xwayland. If XkbChangeTypesOfKey is called with a 0 group, it will resize the key symbols table to 0 but leave the key actions unchanged. If the same function is later called with a non-zero value of groups, this will cause a buffer overflow because t...

7.8CVSS0.00029EPSS
Exploits0References19
OSV
OSV
added 2025/02/25 4:15 p.m.2 views

AZL-57383 CVE-2025-26597 affecting package xorg-x11-server-Xwayland for versions less than 24.1.6-1

A buffer overflow flaw was found in X.Org and Xwayland. If XkbChangeTypesOfKey is called with a 0 group, it will resize the key symbols table to 0 but leave the key actions unchanged. If the same function is later called with a non-zero value of groups, this will cause a buffer overflow because t...

7.8CVSS7.4AI score0.00029EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/02/25 3:54 p.m.22 views

CVE-2025-26597 Xorg: xwayland: buffer overflow in xkbchangetypesofkey()

A buffer overflow flaw was found in X.Org and Xwayland. If XkbChangeTypesOfKey is called with a 0 group, it will resize the key symbols table to 0 but leave the key actions unchanged. If the same function is later called with a non-zero value of groups, this will cause a buffer overflow because t...

7.8CVSS7.8AI score0.00029EPSS
Exploits0References17
Debian CVE
Debian CVE
added 2025/02/25 3:54 p.m.3 views

CVE-2025-26597

A buffer overflow flaw was found in X.Org and Xwayland. If XkbChangeTypesOfKey is called with a 0 group, it will resize the key symbols table to 0 but leave the key actions unchanged. If the same function is later called with a non-zero value of groups, this will cause a buffer overflow because t...

7.8CVSS7.8AI score0.00029EPSS
Exploits0
Cvelist
Cvelist
added 2025/02/25 3:54 p.m.9 views

CVE-2025-26597 Xorg: xwayland: buffer overflow in xkbchangetypesofkey()

A buffer overflow flaw was found in X.Org and Xwayland. If XkbChangeTypesOfKey is called with a 0 group, it will resize the key symbols table to 0 but leave the key actions unchanged. If the same function is later called with a non-zero value of groups, this will cause a buffer overflow because t...

7.8CVSS0.00029EPSS
Exploits0References17
AlpineLinux
AlpineLinux
added 2025/02/25 3:54 p.m.5 views

CVE-2025-26597

A buffer overflow flaw was found in X.Org and Xwayland. If XkbChangeTypesOfKey is called with a 0 group, it will resize the key symbols table to 0 but leave the key actions unchanged. If the same function is later called with a non-zero value of groups, this will cause a buffer overflow because t...

7.8CVSS7.8AI score0.00029EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2024/10/26 12:0 a.m.3 views

PT-2024-16020 · WordPress · Download Monitor

Name of the Vulnerable Software and Affected Versions: Download Monitor plugin for WordPress versions up to, and including, 5.0.12 Description: The issue allows authenticated attackers with Subscriber-level access and above to modify data without authorization due to a missing capability check on...

4.3CVSS6.6AI score0.00099EPSS
Exploits0References6
CNNVD
CNNVD
added 2024/10/26 12:0 a.m.1 views

WordPress plugin Download Monitor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

4.3CVSS6.4AI score0.00099EPSS
Exploits0References3
Rows per page
Query Builder