xfce records

8 published records for vendor xfce.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 3
With a fix record: 50%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

8 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
41Plan	CVE-2007-6532No exploit	Double free vulnerability in the Widget Library (libxfcegui4) in Xfce before 4.4.2 might allow remote attackers to execute arbitrary code vixfce · xfce · CWE-119 pre-auth RCE Memory safety	Critical10.0	—	4.0%	Jan 9, 2008
40Plan	CVE-2021-32563No exploit	An issue was discovered in Thunar before 4.16.7 and 4.17.x before 4.17.2.xfce · thunar · CWE-913 Pre-auth	Critical9.8	—	3.0%	May 11, 2021
39Monitor	CVE-2022-45062No exploit	In Xfce xfce4-settings before 4.16.4 and 4.17.x before 4.17.1, there is an argument injection vulnerability in xfce4-mime-helper.xfce · xfce4-settings · CWE-88 Pre-auth	Critical9.8	—	1.5%	Nov 9, 2022
36Monitor	CVE-2022-32278No exploit	XFCE 4.16 allows attackers to execute arbitrary code because xdg-open can execute a .desktop file on an attacker-controlled FTP server.xfce · exo pre-auth RCE	High8.8	—	1.7%	Jun 13, 2022
31Monitor	CVE-2011-1588No exploit	Thunar before 1.3.1 could crash when copy and pasting a file name with % format characters due to a format string error.xfce · thunar · CWE-134	High7.8	—	1.1%	Nov 13, 2019
28Monitor	CVE-2009-4996No exploit	Xfce4-session 4.5.91 in Xfce does not lock the screen when the suspend or hibernate button is pressed, which might make it easier for physicxfce · xfce · CWE-264	High7.2	—	0.3%	Sep 7, 2010
21Monitor	CVE-2007-6531No exploit	Stack-based buffer overflow in the Panel (xfce4-panel) component in Xfce before 4.4.2 might allow remote attackers to execute arbitrary codexfce · xfce · CWE-119 pre-auth RCE Memory safety	Medium5.0	—	2.9%	Jan 9, 2008
18Monitor	CVE-2018-18398No exploit	Xfce Thunar 1.6.15, when Xfce 4.12 is used, mishandles the IBus-Unikey input method for file searches within File Manager, leading to an outxfce · thunar · CWE-125 Memory safety Denial of service	Medium4.7	—	0.3%	Oct 19, 2018

CVE-2007-6532
41Plan
Double free vulnerability in the Widget Library (libxfcegui4) in Xfce before 4.4.2 might allow remote attackers to execute arbitrary code vi
CriticalCVSS 10.0No exploitEPSS 4%
- pre-auth RCE
- Memory safety
xfce · xfceJan 9, 2008
CVE-2021-32563
40Plan
An issue was discovered in Thunar before 4.16.7 and 4.17.x before 4.17.2.
CriticalCVSS 9.8No exploitEPSS 3%
- Pre-auth
xfce · thunarMay 11, 2021
CVE-2022-45062
39Monitor
In Xfce xfce4-settings before 4.16.4 and 4.17.x before 4.17.1, there is an argument injection vulnerability in xfce4-mime-helper.
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
xfce · xfce4-settingsNov 9, 2022
CVE-2022-32278
36Monitor
XFCE 4.16 allows attackers to execute arbitrary code because xdg-open can execute a .desktop file on an attacker-controlled FTP server.
HighCVSS 8.8No exploitEPSS 2%
- pre-auth RCE
xfce · exoJun 13, 2022
CVE-2011-1588
31Monitor
Thunar before 1.3.1 could crash when copy and pasting a file name with % format characters due to a format string error.
HighCVSS 7.8No exploitEPSS 1%
xfce · thunarNov 13, 2019
CVE-2009-4996
28Monitor
Xfce4-session 4.5.91 in Xfce does not lock the screen when the suspend or hibernate button is pressed, which might make it easier for physic
HighCVSS 7.2No exploitEPSS 0%
xfce · xfceSep 7, 2010
CVE-2007-6531
21Monitor
Stack-based buffer overflow in the Panel (xfce4-panel) component in Xfce before 4.4.2 might allow remote attackers to execute arbitrary code
MediumCVSS 5.0No exploitEPSS 3%
- pre-auth RCE
- Memory safety
xfce · xfceJan 9, 2008
CVE-2018-18398
18Monitor
Xfce Thunar 1.6.15, when Xfce 4.12 is used, mishandles the IBus-Unikey input method for file searches within File Manager, leading to an out
MediumCVSS 4.7No exploitEPSS 0%
- Memory safety
- Denial of service
xfce · thunarOct 19, 2018