Approved changes feed: RSS · Atom

cpe:2.3:a:ibus_project:ibus:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIbus Project (84af4d4b-b4d6-5ddd-be12-6ea827a4048f)
ProductIbus (72aaa299-b668-5214-99a6-9fe7dd071db0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/ibus purl2cpe 2026-06-01 10:16:09.553055
pkg:deb/ubuntu/ibus purl2cpe 2026-06-01 10:16:09.553059
pkg:github/ibus/ibus purl2cpe 2026-06-01 10:16:09.553061
pkg:github/phuang/ibus purl2cpe 2026-06-01 10:16:09.553064
pkg:gitlab/redhat/ibus purl2cpe 2026-06-01 10:16:09.553067
pkg:rpm/centos/ibus purl2cpe 2026-06-01 10:16:09.553070
pkg:rpm/fedora/ibus purl2cpe 2026-06-01 10:16:09.553072
pkg:rpm/opensuse/ibus purl2cpe 2026-06-01 10:16:09.553075

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-14822 vulnerable 2026-06-08 05:12:56.161333 Details available
A flaw was discovered in ibus in versions before 1.5.22 that allows any unprivileged user to monitor and send method calls to the ibus bus of another user due to a misconfiguration in the DBus server setup. A local attacker may use this flaw to intercept all keystrokes of a victim user who is using the graphical interface, change the input method engine, or modify other input related configurations of the victim user.
Published: 2019-11-25T11:01:18.000Z
Updated: 2024-08-05T00:26:39.079Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4509 vulnerable 2026-06-08 05:04:47.538487 Details available
The default configuration of IBUS 1.5.4, and possibly 1.5.2 and earlier, when IBus.InputPurpose.PASSWORD is not set and used with GNOME 3, does not obscure the entered password characters, which allows physically proximate attackers to obtain a user password by reading the lockscreen.
Published: 2013-11-23T19:00:00.000Z
Updated: 2024-08-06T16:45:14.836Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.