Login Request a demo
XT
Product
Xterm
by Invisible-island · last CVE Aug 14, 2023
6
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 3High 0Medium 1Low 0
Severity
All severities6Critical3High0Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Xterm to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-40359
9.8
1%
Aug 14
xterm before 380 supports ReGIS reporting for character-set names even if they have unexpected characters (i.e., neither alphanumeric nor underscore), aka a pointer/overflow issue
Affected: before 380
CVE-2022-45063
9.8
5%
Nov 10
xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the vi line-editing mode of…
Affected: before 375
CVE-2021-27135
9.8
8%
Feb 10
xterm before Patch #366 allows remote attackers to execute arbitrary code or cause a denial of service (segmentation fault) via a crafted UTF-8 combining character sequence
Affected: before 366
Showing 3