Skip to content
Noroxi

x records

55 published records for vendor x.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
12
With a fix record
96.4%
Median publish → KEV
No record has entered KEV

Records by year

  1. 16
  2. 17
  3. 18
  4. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

55 records
  • CVE-2015-9262
    41Plan

    _XcursorThemeInherits in library.c in libXcursor before 1.1.15 allows remote attackers to cause denial of service or potentially code execut

    CriticalCVSS 9.8No exploitEPSS 6%

    x · libxcursorAug 1, 2018

  • CVE-2008-2362
    41Plan

    Multiple integer overflows in the Render extension in the X server 1.4 in X.Org X11R7.3 allow context-dependent attackers to execute arbitra

    CriticalCVSS 10.0No exploitEPSS 4%

    x · x11Jun 16, 2008

  • CVE-2013-6462
    40Plan

    Stack-based buffer overflow in the bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont 1.1 through 1.4.6 allows remote attacker

    CriticalCVSS 9.3No exploitEPSS 10%

    x · libxfontJan 9, 2014

  • CVE-2011-2895
    40Plan

    The LZW decompressor in (1) the BufCompressedFill function in fontfile/decompress.c in X.Org libXfont before 1.4.4 and (2) compress/compress

    CriticalCVSS 9.3No exploitEPSS 8%

    x · libxfontAug 19, 2011

  • CVE-2016-7951
    40Plan

    Multiple integer overflows in X.org libXtst before 1.2.3 allow remote X servers to trigger out-of-bounds memory access operations by leverag

    CriticalCVSS 9.8No exploitEPSS 2%

    x · libxtstDec 13, 2016

  • CVE-2007-5199
    40Plan

    A single byte overflow in catalogue.c in X.Org libXfont 1.3.1 allows remote attackers to have unspecified impact.

    CriticalCVSS 9.8No exploitEPSS 2%

    x · libxfontAug 18, 2017

  • CVE-2011-0465
    39Monitor

    xrdb.c in xrdb before 1.0.9 in X.Org X11R7.6 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a

    CriticalCVSS 9.3No exploitEPSS 6%

    x · x11Apr 8, 2011

  • CVE-2008-2360
    37Monitor

    Integer overflow in the AllocateGlyph function in the Render extension in the X server 1.4 in X.Org X11R7.3 allows context-dependent attacke

    CriticalCVSS 9.0No exploitEPSS 3%

    x · x11Jun 16, 2008

  • CVE-2008-1377
    37Monitor

    The (1) SProcRecordCreateContext and (2) SProcRecordRegisterClients functions in the Record extension and the (3) SProcSecurityGenerateAutho

    CriticalCVSS 9.0No exploitEPSS 3%

    x · x11Jun 16, 2008

  • CVE-2015-1804
    35Monitor

    The bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 does not properly perform type conv

    HighCVSS 8.5No exploitEPSS 5%

    x · libxfontMar 20, 2015

  • CVE-2015-1802
    35Monitor

    The bdfReadProperties function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 allows remote authenticated users t

    HighCVSS 8.5No exploitEPSS 5%

    x · libxfontMar 20, 2015

  • CVE-2015-1803
    35Monitor

    The bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 does not properly handle character

    HighCVSS 8.5No exploitEPSS 5%

    x · libxfontMar 20, 2015

  • CVE-2026-56001
    35Monitor

    libXfont2 BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow

    HighCVSS 8.8No exploitEPSS 1%

    x · libxfontJul 8, 2026

  • CVE-2026-56003
    35Monitor

    libXfont2 computeProps Property Buffer Heap Buffer Overflow

    HighCVSS 8.8No exploitEPSS 1%

    x · libxfontJul 8, 2026

  • CVE-2026-56002
    35Monitor

    libXfont2 PCF Font Parsing Heap Buffer Overflow

    HighCVSS 8.8No exploitEPSS 1%

    x · libxfontJul 8, 2026

  • CVE-2017-16612
    32Monitor

    libXcursor before 1.1.15 has various integer overflows that could lead to heap buffer overflows when processing malicious cursors, e.g., wit

    HighCVSS 7.5No exploitEPSS 5%

    x · libxcursorDec 1, 2017

  • CVE-2014-0210
    31Monitor

    Multiple buffer overflows in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 allow remote font servers to execute arbitrary code vi

    HighCVSS 7.5No exploitEPSS 5%

    x · libxfontMay 15, 2014

  • CVE-2014-0211
    31Monitor

    Multiple integer overflows in the (1) fs_get_reply, (2) fs_alloc_glyphs, and (3) fs_read_extent_info functions in X.Org libXfont before 1.4.

    HighCVSS 7.5No exploitEPSS 4%

    x · libxfontMay 15, 2014

  • CVE-2010-1166
    30Monitor

    The fbComposite function in fbpict.c in the Render extension in the X server in X.Org X11R7.1 allows remote authenticated users to cause a d

    HighCVSS 7.1No exploitEPSS 5%

    x · x.orgApr 29, 2010

  • CVE-2013-2002
    28Monitor

    Buffer overflow in X.org libXt 1.1.3 and earlier allows X servers to cause a denial of service (crash) and possibly execute arbitrary code v

    MediumCVSS 6.8No exploitEPSS 3%

    x · libxtJun 15, 2013

  • CVE-2013-2001
    28Monitor

    Buffer overflow in X.org libXxf86vm 1.1.2 and earlier allows X servers to cause a denial of service (crash) and possibly execute arbitrary c

    MediumCVSS 6.8No exploitEPSS 3%

    x · libxxf86vmJun 15, 2013

  • CVE-2013-1993
    28Monitor

    Multiple integer overflows in X.org libGLX in Mesa 9.1.1 and earlier allow X servers to trigger allocation of insufficient memory and a buff

    MediumCVSS 6.8No exploitEPSS 3%

    x · libglxJun 15, 2013

  • CVE-2013-2064
    28Monitor

    Integer overflow in X.org libxcb 1.9 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vec

    MediumCVSS 6.8No exploitEPSS 2%

    x · libxcbJun 15, 2013

  • CVE-2013-2066
    28Monitor

    Buffer overflow in X.org libXv 1.0.7 and earlier allows X servers to cause a denial of service (crash) and possibly execute arbitrary code v

    MediumCVSS 6.8No exploitEPSS 2%

    x · libxvJun 15, 2013

  • CVE-2013-1999
    28Monitor

    Buffer overflow in X.org libXvMC 1.0.7 and earlier allows X servers to cause a denial of service (crash) and possibly execute arbitrary code

    MediumCVSS 6.8No exploitEPSS 2%

    x · libxvmcJun 15, 2013