xfree86 project x11r6

Name: xfree86 project x11r6
Brand: xfree86 project

productUS

cpe:2.3:a:xfree86_project:x11r6:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

critical

by severity

0critical21high5medium1low

updated 2026-10-28

vulnerabilities (27)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2004-0084US	high10.0	24.9% (98th)	Exploit	no fix	2004-03-03	6 versions
CVE-2002-1317US	high7.5	24.0% (98th)	Exploit	no fix	2002-12-11	5 versions
CVE-2004-0083US	high10.0	21.2% (98th)	Exploit	no fix	2004-03-03	6 versions
CVE-2000-0504US	medium5.0	3.28% (88th)	Exploit	no fix	2000-06-19	5 versions
CVE-2000-0453US	medium5.0	2.96% (87th)	Exploit	no fix	2000-05-18	3 versions
CVE-2001-1086US	high7.5OT elevated	2.84% (87th)	Exploit	no fix	2001-07-04	2 versions
CVE-2000-0476US	medium5.0	2.53% (85th)	Exploit	no fix	2000-06-01	2 versions
CVE-2001-1178US	high7.2	0.77% (55th)	Exploit	no fix	2001-07-11	= 3.3.2
CVE-1999-0433US	medium4.6	0.71% (54th)	Exploit	no fix	1999-03-21	= 3.3.3
CVE-2004-0914US	high10.0	8.70% (95th)	—	no fix	2005-01-10	16 versions
CVE-2004-0687US	high7.5	8.05% (95th)	—	no fix	2004-10-20	11 versions
CVE-2004-0688US	high7.5	7.25% (94th)	—	no fix	2004-10-20	11 versions
CVE-2003-0730US	high7.5	5.85% (93rd)	—	no fix	2003-10-20	2 versions
CVE-2007-1351US	high8.5	5.59% (93rd)	—	no fix	2007-04-06	3 versions
CVE-2005-0605US	high7.5	4.51% (91st)	—	no fix	2005-03-02	18 versions
CVE-1999-0241US	high10.0	4.30% (91st)	—	no fix	1995-11-01	—
CVE-2003-0063US	high7.5	3.43% (89th)	—	no fix	2003-03-03	6 versions
CVE-2004-0093US	high7.5	3.10% (88th)	—	no fix	2004-03-15	6 versions
CVE-2004-0094US	high7.5	3.10% (88th)	—	no fix	2004-03-15	6 versions
CVE-2002-1510US	high10.0	1.97% (80th)	—	no fix	2003-03-03	—
CVE-2000-0620US	medium5.0	1.74% (78th)	—	no fix	2000-06-19	5 versions
CVE-2000-0285US	high7.2	0.54% (45th)	—	no fix	2000-04-16	2 versions
CVE-2001-0955US	high7.2	0.45% (39th)	—	no fix	2001-09-22	3 versions
CVE-2001-1179US	high7.2	0.44% (38th)	—	no fix	2001-07-17	= 3.3.2
CVE-2004-0106US	high7.2	0.43% (37th)	—	no fix	2004-03-03	6 versions
CVE-2003-0071US	low2.1	0.42% (36th)	—	no fix	2003-03-03	6 versions
CVE-2002-1472US	high7.2	0.37% (31st)	—	no fix	2003-03-03	2 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation11 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer8 CVEs
CWE-400Uncontrolled Resource Consumption4 CVEs
CWE-284Improper Access Control3 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')2 CVEs
CWE-125Out-of-bounds Read2 CVEs
CWE-190Integer Overflow or Wraparound2 CVEs
CWE-287Improper Authentication2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE27 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan