CVE-2009-1718

WebKit in Apple Safari before 4.0 allows user-assisted remote attackers to obtain sensitive information via vectors involving drag events and the dragging of content over a crafted web page...

CVE-2009-1718

Removed by vendor...

CVE-2009-1718

CVE-2009-1718 affects WebKit in Apple Safari prior to 4.0. It describes a vulnerability in drag-and-drop handling that could allow user-assisted remote attackers to disclose sensitive information by dragging content over a crafted page. Connected documents corroborate this as part of a broader se...

[SECURITY] Fedora 9 Update: acpid-1.0.6-8.fc9

acpid is a daemon that dispatches ACPI events to user-space programs...

[SECURITY] Fedora 10 Update: acpid-1.0.6-11.fc10

acpid is a daemon that dispatches ACPI events to user-space programs...

CVE-2009-1474

The ATEN KH1516i IP KVM switch with firmware 1.0.063 and the KN9116 IP KVM switch with firmware 1.1.104 do not 1 encrypt mouse events, which makes it easier for man-in-the-middle attackers to perform mouse operations on machines connected to the switch by injecting network traffic; and do not 2 s...

Session fixation

The ATEN KH1516i IP KVM switch with firmware 1.0.063 and the KN9116 IP KVM switch with firmware 1.1.104 do not 1 encrypt mouse events, which makes it easier for man-in-the-middle attackers to perform mouse operations on machines connected to the switch by injecting network traffic; and do not 2 s...

CVE-2009-1474

The ATEN KH1516i IP KVM switch with firmware 1.0.063 and the KN9116 IP KVM switch with firmware 1.1.104 do not 1 encrypt mouse events, which makes it easier for man-in-the-middle attackers to perform mouse operations on machines connected to the switch by injecting network traffic; and do not 2 s...

ATEN IP KVM Switches multiple cryptographic vulnerabilities

Same SSL certificate is used for all devices, static symmetric key is used for code signing, mouse events are not encrypted, predictable session key is used...

CentOS 3 / 4 / 5 : acpid (CESA-2009:0474)

An updated acpid package that fixes one security issue is now available for Red Hat Enterprise Linux 2.1, 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. acpid is a daemon that dispatches ACPI Advanced Configuration and Power...

util-linux: audit log injection via login

Argument injection vulnerability in login login-utils/login.c in util-linux-ng 2.14 and earlier makes it easier for remote attackers to hide activities by modifying portions of log events, as demonstrated by appending an "addr=" statement to the login name, aka "audit log injection."...

CVE-2009-0927

creationtimestamp| type| source ---|---|--- 2009-05-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8595 2009-09-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9579 2010-04-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16606 2010-09-25...

CVE-2009-1612

creationtimestamp| type| source ---|---|--- 2009-04-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8579 2010-04-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16553 2018-05-29 15:50:33+00:00| seen|...

Sql injection

SQL injection vulnerability in events/inc/events.inc.php in the Events plugin for Seditio CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the c parameter to plug.php...

CVE-2009-1408

Cross-site scripting XSS vulnerability in webSPELL 4.2.0c allows remote attackers to inject arbitrary web script or HTML allows remote attackers to inject arbitrary web script or HTML via Javascript events such as onmouseover in nested BBcode tags, as demonstrated using 1 email, 2 img, and 3 url...

CVE-2009-1411

SQL injection vulnerability in events/inc/events.inc.php in the Events plugin for Seditio CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the c parameter to plug.php...

CVE-2009-1411

SQL injection vulnerability in events/inc/events.inc.php in the Events plugin for Seditio CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the c parameter to plug.php...

CVE-2009-1408

CVE-2009-1408 affects webSPELL 4.2.0c with a cross-site scripting (XSS) flaw in BBCode handling. The described vulnerability enables remote attackers to inject arbitrary web script or HTML by abusing Javascript events (e.g., onmouseover) inside nested BBCode tags (email, img, url). Multiple sourc...

CVE-2009-1411

CVE-2009-1411 describes an SQL injection in the Events plugin for Seditio CMS 1.0. The vulnerability exists in events/inc/events.inc.php and allows remote attackers to inject arbitrary SQL via the c parameter to plug.php. This leads to potential confidentiality and integrity impacts on the affect...

CVE-2009-1408

Cross-site scripting XSS vulnerability in webSPELL 4.2.0c allows remote attackers to inject arbitrary web script or HTML allows remote attackers to inject arbitrary web script or HTML via Javascript events such as onmouseover in nested BBcode tags, as demonstrated using 1 email, 2 img, and 3 url...