Approved changes feed: RSS · Atom

cpe:2.3:a:ibus_project:ibus:1.5.4:*:*:*:*:*:*:*

part: a version: 1.5.4 update: *

VendorIbus Project (84af4d4b-b4d6-5ddd-be12-6ea827a4048f)
ProductIbus (72aaa299-b668-5214-99a6-9fe7dd071db0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/ibus purl2cpe 2026-06-01 10:16:09.554020
pkg:deb/ubuntu/ibus purl2cpe 2026-06-01 10:16:09.554022
pkg:github/ibus/ibus purl2cpe 2026-06-01 10:16:09.554023
pkg:github/phuang/ibus purl2cpe 2026-06-01 10:16:09.554024
pkg:gitlab/redhat/ibus purl2cpe 2026-06-01 10:16:09.554026
pkg:rpm/centos/ibus purl2cpe 2026-06-01 10:16:09.554027
pkg:rpm/fedora/ibus purl2cpe 2026-06-01 10:16:09.554028
pkg:rpm/opensuse/ibus purl2cpe 2026-06-01 10:16:09.554030

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-4509 vulnerable 2026-06-08 05:04:47.539092 Details available
The default configuration of IBUS 1.5.4, and possibly 1.5.2 and earlier, when IBus.InputPurpose.PASSWORD is not set and used with GNOME 3, does not obscure the entered password characters, which allows physically proximate attackers to obtain a user password by reading the lockscreen.
Published: 2013-11-23T19:00:00.000Z
Updated: 2024-08-06T16:45:14.836Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.