Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
David Bagley records in CISA KEVNo David Bagley vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority LOW 34
xlockmore and xlockf do not properly cleanse user-injected format strings, which allows local users to gain root privileges via the -d option.
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.0124 · Published 2000-10-13 · No fix listed
Priority LOW 11
Buffer overflow in xlockmore xlock program version 4.16 and earlier allows local users to read sensitive data from memory via a long -mode option.
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.00398 · Published 2000-07-12 · No fix listed
