CVSS: 7.8EPSS: 0%CPEs: 4EXPL: 2CVE-2011-2187
https://notcve.org/view.php?id=CVE-2011-2187
xscreensaver before 5.14 crashes during activation and leaves the screen unlocked when in Blank Only Mode and when DPMS is disabled, which allows local attackers to access resources without authentication. xscreensaver versiones anteriores a la versión 5.14, se bloquea durante la activación y deja la pantalla desbloqueada cuando está en Modo Blank Only y cuando DPMS está desactivado, lo que permite a atacantes locales acceder a los recursos sin identificación • https://access.redhat.com/security/cve/cve-2011-2187 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=627382 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-2187 https://security-tracker.debian.org/tracker/CVE-2011-2187 https://www.jwz.org/xscreensaver/changelog.html https://www.openwall.com/lists/oss-security/2011/06/06/17 • CWE-306: Missing Authentication for Critical Function •
CVSS: 5.4EPSS: 1%CPEs: 3EXPL: 0CVE-2004-2655
https://notcve.org/view.php?id=CVE-2004-2655
rdesktop 1.3.1 with xscreensaver 4.14, and possibly other versions, when running on Fedora and possibly other platforms, does not release the keyboard focus when xscreensaver starts, which causes the password to be entered into the active window when the user unlocks the screen. • ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc http://secunia.com/advisories/20226 http://secunia.com/advisories/20456 http://secunia.com/advisories/20782 http://secunia.com/advisories/22080 http://securitytracker.com/id?1016150 http://securitytracker.com/id?1016151 http://support.avaya.com/elmodocs2/security/ASA-2006-107.htm http://www.derkeiler.com/Newsgroups/comp.os.linux.security/2004-08/0018.html http://www.jwz.org/xscreensaver/changelog.html http:& •