Approved changes feed: RSS · Atom

cpe:2.3:a:x:x.org-xserver:1.4.0:*:*:*:*:*:*:*

part: a version: 1.4.0 update: *

VendorX (a2acdb6f-4f26-543b-8294-d5d6397c9211)
ProductX.Org Xserver (c50f7dbd-fc33-5cea-a01e-41d6b99f0d1d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/freedesktop/xorg-xserver purl2cpe 2026-06-01 10:12:31.321796

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-1940 vulnerable 2026-06-03 14:32:52.714306 Details available
X.Org X server before 1.13.4 and 1.4.x before 1.14.1 does not properly restrict access to input events when adding a new hot-plug device, which might allow physically proximate attackers to obtain sensitive information, as demonstrated by reading passwords from a tty.
Published: 2013-05-13T23:00:00.000Z
Updated: 2024-08-06T15:20:37.282Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.