XF
Vendor
Xfce
9
CVEs
0
On KEV
0
New 30D
Products
XF4.7
Xfce
Xfce
4 CVEs0 on KEV0 new
TH9.8
Thunar
Xfce
3 CVEs0 on KEV0 new
EX8.8
Exo
Xfce
1 CVEs0 on KEV0 new
XF9.8
Xfce4-settings
Xfce
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2022-45062 | XF Xfce4-settings Xfce | 9.8 | Nov 9 | In Xfce xfce4-settings before 4.16.4 and 4.17.x before 4.17.1, there is an argument injection vulnerability in xfce4-mime-helper |
| CVE-2022-32278 | EX Exo Xfce | 8.8 | Jun 13 | XFCE 4.16 allows attackers to execute arbitrary code because xdg-open can execute a .desktop file on an attacker-controlled FTP server |
| CVE-2021-32563 | TH Thunar Xfce | 9.8 | May 11 | An issue was discovered in Thunar before 4.16.7 and 4.17.x before 4.17.2 |
| CVE-2011-1588 | TH Thunar Xfce | 7.8 | Nov 14 | Thunar before 1.3.1 could crash when copy and pasting a file name with % format characters due to a format string error |
| CVE-2018-18398 | TH Thunar Xfce | 4.7 | Oct 19 | Xfce Thunar 1.6.15, when Xfce 4.12 is used, mishandles the IBus-Unikey input method for file searches within File Manager, leading to an out-of-bounds read and SEGV |
| CVE-2009-4996 | XF Xfce Xfce | – | Sep 7 | Xfce4-session 4.5.91 in Xfce does not lock the screen when the suspend or hibernate button is pressed, which might make it easier for physically proximate attackers to access an… |
| CVE-2007-6531 | XF Xfce Xfce | – | Jan 9 | Stack-based buffer overflow in the Panel (xfce4-panel) component in Xfce before 4.4.2 might allow remote attackers to execute arbitrary code via Launcher tooltips |
| CVE-2007-6532 | XF Xfce Xfce | – | Jan 9 | Double free vulnerability in the Widget Library (libxfcegui4) in Xfce before 4.4.2 might allow remote attackers to execute arbitrary code via unknown vectors related to the… |