Lucene search
+L

6963 matches found

Microsoft CVE
Microsoft CVE
•added 2023/10/30 7:00 a.m.•5 views

Xorg-x11-server: use-after-free bug in damagedestroy

...

7CVSS7AI score0.00621EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2023/10/30 12:00 a.m.•26 views

PT-2023-18124 · Unknown · Window Manager

Name of the Vulnerable Software and Affected Versions: Window Manager affected versions not specified Description: The issue allows an attacker to determine whether an app is installed without query permissions, due to side channel information disclosure. This could lead to local information...

3.3CVSS3.3AI score0.00086EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/30 12:00 a.m.•4 views

CVE-2023-21348: Observable Discrepancy

In Window Manager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitati...

3.3CVSS5.5AI score0.00086EPSS
SaveExploits0References2
Redos
Redos
•added 2023/10/30 12:00 a.m.•55 views

ROS-20231030-05

Apache HTTP Server vulnerability is related to blocking HTTP/2 connection processing if it was opened with 0 initial sliding window size. was opened with the initial sliding window size set to 0. Exploitation of the vulnerability could Allow an attacker acting remotely to cause a denial of servic...

7.5CVSS6.8AI score0.70595EPSS
SaveExploits0
Citrix
Citrix
•added 2023/10/27 12:00 a.m.•15 views

Session window screen displays abnormal if windows size changes during session launch

Changing the screen size of the session window during the session startup process may cause problems with the screen display. If the screen size is larger than the session window, the screen displays a gray border. If the screen size is smaller than the session window, a truncated screen is...

7.2AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2023/10/26 12:00 a.m.•13 views

Apache HTTP Server DoS

The vulnerability of the Apache HTTP Server is related to the blocking of HTTP/2 connection processing, if the initial window size is set to 0. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

7.8CVSS7.2AI score0.70595EPSS
SaveExploits0References12Affected Software6
osv_azl
osv_azl
•added 2023/10/25 8:15 p.m.•14 views

AZL-44376 CVE-2023-5380 affecting package xorg-x11-server 1.20.10-6

A use-after-free flaw was found in the xorg-x11-server. An X server crash may occur in a very specific and legacy configuration a multi-screen setup with multiple protocol screens, also known as Zaphod mode if the pointer is warped from within a window on one screen to the root window of the othe...

4.7CVSS6.6AI score0.00715EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2023/10/25 8:15 p.m.•9 views

DEBIAN-CVE-2023-5574

A use-after-free flaw was found in xorg-x11-server-Xvfb. This issue occurs in Xvfb with a very specific and legacy configuration a multi-screen setup with multiple protocol screens, also known as Zaphod mode. If the pointer is warped from a screen 1 to a screen 0, a use-after-free issue may be...

7CVSS6.9AI score0.00621EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2023/10/25 8:15 p.m.•22 views

AZL-31704 CVE-2023-5380 affecting package xorg-x11-server for versions less than 1.20.10-10

A use-after-free flaw was found in the xorg-x11-server. An X server crash may occur in a very specific and legacy configuration a multi-screen setup with multiple protocol screens, also known as Zaphod mode if the pointer is warped from within a window on one screen to the root window of the othe...

4.7CVSS6.6AI score0.00715EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2023/10/25 8:15 p.m.•10 views

DEBIAN-CVE-2023-5380

A use-after-free flaw was found in the xorg-x11-server. An X server crash may occur in a very specific and legacy configuration a multi-screen setup with multiple protocol screens, also known as Zaphod mode if the pointer is warped from within a window on one screen to the root window of the othe...

4.7CVSS6.3AI score0.00715EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2023/10/25 7:46 p.m.•43 views

CVE-2023-5380

A use-after-free flaw was found in the xorg-x11-server. An X server crash may occur in a very specific and legacy configuration a multi-screen setup with multiple protocol screens, also known as Zaphod mode if the pointer is warped from within a window on one screen to the root window of the othe...

4.7CVSS6.3AI score0.00715EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2023/10/25 7:46 p.m.•56 views

CVE-2023-5380

A use-after-free flaw was found in the xorg-x11-server. An X server crash may occur in a very specific and legacy configuration a multi-screen setup with multiple protocol screens, also known as Zaphod mode if the pointer is warped from within a window on one screen to the root window of the othe...

4.7CVSS6.7AI score0.00715EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2023/10/25 7:46 p.m.•9 views

CVE-2023-5380 Xorg-x11-server: use-after-free bug in destroywindow

A use-after-free flaw was found in the xorg-x11-server. An X server crash may occur in a very specific and legacy configuration a multi-screen setup with multiple protocol screens, also known as Zaphod mode if the pointer is warped from within a window on one screen to the root window of the othe...

4.7CVSS6.6AI score0.00715EPSS
SaveExploits0References8
RedhatCVE
RedhatCVE
•added 2023/10/25 7:46 p.m.•41 views

CVE-2023-5380

A use-after-free flaw was found in the xorg-x11-server. An X server crash may occur in a very specific and legacy configuration a multi-screen setup with multiple protocol screens, also known as Zaphod mode if the pointer is warped from within a window on one screen to the root window of the othe...

4.7CVSS5.7AI score0.00715EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2023/10/25 12:00 a.m.•11 views

PT-2023-6642

Name of the Vulnerable Software and Affected Versions xorg-x11-server affected versions not specified Description A use-after-free flaw was found in the xorg-x11-server, which can cause an X server crash in a very specific and legacy configuration, known as Zaphod mode, where a multi-screen setup...

4.7CVSS6.6AI score0.00715EPSS
SaveExploits0References121
osv_ubuntu
osv_ubuntu
•added 2023/10/25 12:00 a.m.•12 views

UBUNTU-CVE-2023-5380

A use-after-free flaw was found in the xorg-x11-server. An X server crash may occur in a very specific and legacy configuration a multi-screen setup with multiple protocol screens, also known as Zaphod mode if the pointer is warped from within a window on one screen to the root window of the othe...

4.7CVSS6.6AI score0.00715EPSS
SaveExploits0References4
osv_azl
osv_azl
•added 2023/10/23 7:15 a.m.•18 views

AZL-43639 CVE-2023-43622 affecting package mod_http2 1.15.14-2

An attacker, opening a HTTP/2 connection with an initial window size of 0, was able to block handling of that connection indefinitely in Apache HTTP Server. This could be used to exhaust worker resources in the server, similar to the well known "slow loris" attack pattern. This has been fixed in...

7.5CVSS7AI score0.70595EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2023/10/23 7:15 a.m.•18 views

AZL-44955 CVE-2023-43622 affecting package mod_http2 for versions less than 2.0.29-3

An attacker, opening a HTTP/2 connection with an initial window size of 0, was able to block handling of that connection indefinitely in Apache HTTP Server. This could be used to exhaust worker resources in the server, similar to the well known "slow loris" attack pattern. This has been fixed in...

7.5CVSS7AI score0.70595EPSS
SaveExploits0References1
osv_alpine
osv_alpine
•added 2023/10/23 7:15 a.m.•10 views

ALPINE-CVE-2023-43622

An attacker, opening a HTTP/2 connection with an initial window size of 0, was able to block handling of that connection indefinitely in Apache HTTP Server. This could be used to exhaust worker resources in the server, similar to the well known "slow loris" attack pattern. This has been fixed in...

7.5CVSS6.8AI score0.70595EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
•added 2023/10/23 7:00 a.m.•16 views

Apache HTTP Server: DoS in HTTP/2 with initial windows size 0

...

7.5CVSS7.5AI score0.70595EPSS
SaveExploits0
Rows per page
Query Builder