Lxde
Products
5- 2 CVEs
- 2 CVEs
- 1 CVE
- 1 CVE
- 1 CVE
Recent CVEs
5| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2015-8308 | Hig | 0.51 | 7.8 | 0.00 | Aug 24, 2017 | LXDM before 0.5.2 did not start X server with -auth, which allows local users to bypass authentication with X connections. | ||
| CVE-2016-10369 | Hig | 0.51 | 7.8 | 0.00 | May 8, 2017 | unixsocket.c in lxterminal through 0.3.0 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (preventing terminal launch), or possibly have other impact (bypassing terminal access control). | ||
| CVE-2010-2532 | 0.00 | — | 0.00 | Sep 3, 2010 | lxsession-logout in lxsession in LXDE, as used on SUSE openSUSE 11.3 and other platforms, does not lock the screen when the Suspend or Hibernate button is pressed, which might make it easier for physically proximate attackers to access an unattended laptop via a resume action.… | |||
| CVE-2008-3904 | 0.00 | — | 0.02 | Sep 4, 2008 | src/main-win.c in GPicView 0.1.9 in Lightweight X11 Desktop Environment (LXDE) allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename. | |||
| CVE-2008-3791 | 0.00 | — | 0.00 | Sep 3, 2008 | src/main-win.c in GPicView 0.1.9 in Lightweight X11 Desktop Environment (LXDE) allows local users to overwrite arbitrary files via a symlink attack on the /tmp/rot.jpg temporary file. |
- risk 0.51cvss 7.8epss 0.00
LXDM before 0.5.2 did not start X server with -auth, which allows local users to bypass authentication with X connections.
- risk 0.51cvss 7.8epss 0.00
unixsocket.c in lxterminal through 0.3.0 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (preventing terminal launch), or possibly have other impact (bypassing terminal access control).
- CVE-2010-2532Sep 3, 2010risk 0.00cvss —epss 0.00
lxsession-logout in lxsession in LXDE, as used on SUSE openSUSE 11.3 and other platforms, does not lock the screen when the Suspend or Hibernate button is pressed, which might make it easier for physically proximate attackers to access an unattended laptop via a resume action.…
- CVE-2008-3904Sep 4, 2008risk 0.00cvss —epss 0.02
src/main-win.c in GPicView 0.1.9 in Lightweight X11 Desktop Environment (LXDE) allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename.
- CVE-2008-3791Sep 3, 2008risk 0.00cvss —epss 0.00
src/main-win.c in GPicView 0.1.9 in Lightweight X11 Desktop Environment (LXDE) allows local users to overwrite arbitrary files via a symlink attack on the /tmp/rot.jpg temporary file.