CVSS: 7.5EPSS: 0%CPEs: 6EXPL: 0CVE-2013-1940 – xorg-x11-server: Information disclosure due enabling events from hot-plug devices despite input from the device being momentarily disabled
https://notcve.org/view.php?id=CVE-2013-1940
13 May 2013 — X.Org X server before 1.13.4 and 1.4.x before 1.14.1 does not properly restrict access to input events when adding a new hot-plug device, which might allow physically proximate attackers to obtain sensitive information, as demonstrated by reading passwords from a tty. X.Org X server anterior a v1.13.4 y v1.4.x anterior a v1.14.1 no restringe adecuadamente el acceso a los eventos de entrada cuando se añade un nuevo dispositivo de conexión en caliente, lo cual puede permitir a atacantes cercanos obtener infor... • http://lists.fedoraproject.org/pipermail/package-announce/2013-April/102391.html • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 7.5EPSS: 0%CPEs: 4EXPL: 0CVE-2010-4819 – X.org: ProcRenderAddGlyphs input sanitization flaw
https://notcve.org/view.php?id=CVE-2010-4819
05 Sep 2012 — The ProcRenderAddGlyphs function in the Render extension (render/render.c) in X.Org xserver 1.7.7 and earlier allows local users to read arbitrary memory and possibly cause a denial of service (server crash) via unspecified vectors related to an "input sanitization flaw." La función ProcRenderAddGlyphs en la extensión Render (render/render.c) en X.Org xserver v1.7.7 y anteriores permite a usuarios locales leer la memoria arbitraria y posiblemente causar una denegación de servicio (caída del servidor) a trav... • http://aix.software.ibm.com/aix/efixes/security/X_advisory2.asc • CWE-20: Improper Input Validation •