Skip to content
Noroxi

enlightenment records

32 published records for vendor enlightenment.

Researcher profile

Entered KEV
0 · 0%
Weaponized
1 · 3.1%
Pre-auth RCE
13
With a fix record
90.6%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 18
  3. 20
  4. 22
  5. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

32 records
  • CVE-2004-1025
    42Plan

    Multiple heap-based buffer overflows in imlib 1.9.14 and earlier, which is used by gkrellm and several window managers, allow remote attacke

    CriticalCVSS 10.0No exploitEPSS 5%

    enlightenment · imlibJan 10, 2005

  • CVE-2016-4024
    41Plan

    Integer overflow in imlib2 before 1.4.9 on 32-bit platforms allows remote attackers to execute arbitrary code via large dimensions in an ima

    CriticalCVSS 9.8No exploitEPSS 5%

    enlightenment · imlib2May 13, 2016

  • CVE-2004-1026
    41Plan

    Multiple integer overflows in the image handler for imlib 1.9.14 and earlier, which is used by gkrellm and several window managers, allow re

    CriticalCVSS 10.0No exploitEPSS 4%

    enlightenment · imlibJan 10, 2005

  • CVE-2008-6079
    41Plan

    imlib2 before 1.4.2 allows context-dependent attackers to have an unspecified impact via a crafted (1) ARGB, (2) BMP, (3) JPEG, (4) LBM, (5)

    CriticalCVSS 10.0No exploitEPSS 2%

    enlightenment · imlib2Feb 6, 2009

  • CVE-2022-37706
    40Plan

    enlightenment_sys in Enlightenment before 0.25.4 allows local users to gain privileges because it is setuid root, and the system library fun

    HighCVSS 7.8WeaponizedEPSS 5%

    enlightenment · enlightenmentDec 25, 2022

  • CVE-2020-12761
    36Monitor

    modules/loaders/loader_ico.c in imlib2 1.6.0 has an integer overflow (with resultant invalid memory allocations and out-of-bounds reads) via

    CriticalCVSS 9.1No exploitEPSS 1%

    enlightenment · imlib2May 9, 2020

  • CVE-2024-25448
    35Monitor

    An issue in the imlib_free_image_and_decache function of imlib2 v1.9.1 allows attackers to cause a heap buffer overflow via parsing a crafte

    HighCVSS 8.8No exploitEPSS 0%

    enlightenment · imlib2Feb 9, 2024

  • CVE-2024-25447
    35Monitor

    An issue in the imlib_load_image_with_error_return function of imlib2 v1.9.1 allows attackers to cause a heap buffer overflow via parsing a

    HighCVSS 8.8No exploitEPSS 0%

    enlightenment · imlib2Feb 9, 2024

  • CVE-2024-25450
    35Monitor

    imlib2 v1.9.1 was discovered to mishandle memory allocation in the function init_imlib_fonts().

    HighCVSS 8.8No exploitEPSS 0%

    enlightenment · imlib2Feb 9, 2024

  • CVE-2016-3994
    33Monitor

    The GIF loader in imlib2 before 1.4.9 allows remote attackers to cause a denial of service (application crash) or obtain sensitive informati

    HighCVSS 8.2No exploitEPSS 2%

    debian · debian linuxMay 13, 2016

  • CVE-2004-0827
    32Monitor

    Multiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6.0.6.2, allow remote attackers to cause a de

    HighCVSS 7.5No exploitEPSS 5%

    imagemagick · imagemagickSep 16, 2004

  • CVE-2018-20167
    32Monitor

    Terminology before 1.3.1 allows Remote Code Execution because popmedia is mishandled, as demonstrated by an unsafe "cat README.md" command w

    HighCVSS 7.8No exploitEPSS 2%

    enlightenment · terminologyDec 17, 2018

  • CVE-2004-0817
    31Monitor

    Multiple heap-based buffer overflows in the imlib BMP image handler allow remote attackers to execute arbitrary code via a crafted BMP file.

    HighCVSS 7.5No exploitEPSS 4%

    enlightenment · imlibDec 31, 2004

  • CVE-2008-5187
    31Monitor

    The load function in the XPM loader for imlib2 1.4.2, and possibly other versions, allows attackers to cause a denial of service (crash) and

    HighCVSS 7.5No exploitEPSS 3%

    enlightenment · imlib2Nov 20, 2008

  • CVE-2014-9764
    31Monitor

    imlib2 before 1.4.7 allows remote attackers to cause a denial of service (segmentation fault) via a crafted GIF file.

    HighCVSS 7.5No exploitEPSS 2%

    debian · debian linuxMay 13, 2016

  • CVE-2014-9771
    31Monitor

    Integer overflow in imlib2 before 1.4.7 allows remote attackers to cause a denial of service (memory consumption or application crash) via a

    HighCVSS 7.5No exploitEPSS 2%

    enlightenment · imlib2May 13, 2016

  • CVE-2014-9763
    31Monitor

    imlib2 before 1.4.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted PNM file

    HighCVSS 7.5No exploitEPSS 2%

    debian · debian linuxMay 13, 2016

  • CVE-2014-9762
    31Monitor

    imlib2 before 1.4.7 allows remote attackers to cause a denial of service (segmentation fault) via a GIF image without a colormap.

    HighCVSS 7.5No exploitEPSS 2%

    enlightenment · imlib2May 13, 2016

  • CVE-2016-3993
    31Monitor

    Off-by-one error in the __imlib_MergeUpdate function in lib/updates.c in imlib2 before 1.4.9 allows remote attackers to cause a denial of se

    HighCVSS 7.5No exploitEPSS 2%

    enlightenment · imlib2May 13, 2016

  • CVE-2011-5326
    31Monitor

    imlib2 before 1.4.9 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) by drawing a 2x1 ellip

    HighCVSS 7.5No exploitEPSS 2%

    debian · debian linuxMay 13, 2016

  • CVE-2002-0168
    31Monitor

    Vulnerability in Imlib before 1.9.13 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code by manipulati

    HighCVSS 7.5No exploitEPSS 2%

    enlightenment · imlibApr 22, 2002

  • CVE-2002-0167
    31Monitor

    Imlib before 1.9.13 sometimes uses the NetPBM package to load trusted images, which could allow attackers to cause a denial of service (cras

    HighCVSS 7.5No exploitEPSS 2%

    enlightenment · imlibApr 22, 2002

  • CVE-2015-8971
    31Monitor

    Terminology 0.7.0 allows remote attackers to execute arbitrary commands via escape sequences that modify the window title and then are writt

    HighCVSS 7.8No exploitEPSS 1%

    debian · debian linuxJan 23, 2017

  • CVE-2014-1845
    31Monitor

    An unspecified setuid root helper in Enlightenment before 0.17.6 allows local users to gain privileges by leveraging failure to properly san

    HighCVSS 7.8No exploitEPSS 0%

    enlightenment · enlightenmentApr 27, 2018

  • CVE-2014-1846
    31Monitor

    Enlightenment before 0.17.6 might allow local users to gain privileges via vectors involving the gdb method.

    HighCVSS 7.8No exploitEPSS 0%

    enlightenment · enlightenmentApr 27, 2018