xli records
4 published records for vendor xli.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 4
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Records by year
Bar: total · dark part: CISA KEV.
Attack profile
All records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
35Monitor | CVE-2001-0775Proof of concept | Buffer overflow in xloadimage 4.1 (aka xli 1.16 and 1.17) in Linux allows remote attackers to execute arbitrary code via a FACES format imagxli · xli · CWE-119 | High7.5 | — | 16.3% | Oct 18, 2001 |
31Monitor | CVE-2005-0638No exploit | xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via shell metacharacters in filenames for compxli · xli | High7.5 | — | 3.6% | Mar 2, 2005 |
31Monitor | CVE-2005-0639No exploit | Multiple vulnerabilities in xli before 1.17 may allow remote attackers to execute arbitrary code via "buffer management errors" from certainxli · xli | High7.5 | — | 2.8% | Mar 2, 2005 |
21Monitor | CVE-2005-3178No exploit | Buffer overflow in xloadimage 4.1 and earlier, and xli, might allow user-assisted attackers to execute arbitrary code via a long title name xli · xli | Medium5.1 | — | 4.0% | Oct 7, 2005 |
- CVE-2001-077535Monitor
Buffer overflow in xloadimage 4.1 (aka xli 1.16 and 1.17) in Linux allows remote attackers to execute arbitrary code via a FACES format imag
HighCVSS 7.5Proof of conceptEPSS 16%xli · xliOct 18, 2001
- CVE-2005-063831Monitor
xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via shell metacharacters in filenames for comp
HighCVSS 7.5No exploitEPSS 3%xli · xliMar 2, 2005
- CVE-2005-063931Monitor
Multiple vulnerabilities in xli before 1.17 may allow remote attackers to execute arbitrary code via "buffer management errors" from certain
HighCVSS 7.5No exploitEPSS 2%xli · xliMar 2, 2005
- CVE-2005-317821Monitor
Buffer overflow in xloadimage 4.1 and earlier, and xli, might allow user-assisted attackers to execute arbitrary code via a long title name
MediumCVSS 5.1No exploitEPSS 4%xli · xliOct 7, 2005