Lucene search
+L

379 matches found

OSV
OSV
added 2013/11/23 7:55 p.m.1 views

DEBIAN-CVE-2013-4509

The default configuration of IBUS 1.5.4, and possibly 1.5.2 and earlier, when IBus.InputPurpose.PASSWORD is not set and used with GNOME 3, does not obscure the entered password characters, which allows physically proximate attackers to obtain a user password by reading the lockscreen...

1.9CVSS7AI score0.00341EPSS
Exploits0References1
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2013/03/26 12:0 a.m.27 views

JVN#80922020: ArtIME Japanese Input vulnerable to information disclosure

ArtIME Japanese Input is a Japanese Input Method Editor IME for Android devices. ArtIME Japanese Input contains an issue in the access permissions for the certain files. Impact If a user of the affected product uses other malicious Android application, information managed by the affected product...

5CVSS6.2AI score0.00982EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2013/01/17 12:0 a.m.48 views

Scientific Linux Security Update : gtk2 on SL5.x i386/x86_64 (20130108)

An integer overflow flaw was found in the X BitMap XBM image file loader in GTK+. A remote attacker could provide a specially crafted XBM image file that, when opened in an application linked against GTK+ such as Nautilus, would cause the application to crash. CVE-2012-2370 This update also fixes...

5CVSS6.3AI score0.04096EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2013/01/11 12:0 a.m.22 views

RedHat Update for gtk2 RHSA-2013:0135-01

Check for the Version of gtk2 OpenVAS Vulnerability Test RedHat Update for gtk2 RHSA-2013:0135-01 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

5CVSS0.04096EPSS
Exploits1References2
Cent OS
Cent OS
added 2013/01/09 8:21 p.m.66 views

gtk2 security update

CentOS Errata and Security Advisory CESA-2013:0135 Updated gtk2 packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVS...

5CVSS6.7AI score0.04096EPSS
Exploits1References7
Tenable Nessus
Tenable Nessus
added 2013/01/08 12:0 a.m.39 views

RHEL 5 : gtk2 (RHSA-2013:0135)

Updated gtk2 packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...

5CVSS6.5AI score0.04096EPSS
Exploits1References3
myhack58
myhack58
added 2012/09/16 12:0 a.m.52 views

Sogou mobile phone input method sites exist SQL injection vulnerability-vulnerability warning-the black bar safety net

Vulnerability type: SQL injection vulnerability Hazard rating: low The self-assessment Rank of: 5 Vulnerability status: the vendor has confirmed Brief description: Browse sogou input method web site, found that the presence ofSQL injectionvulnerabilities. Detailed description: 1...

7.9AI score
Exploits0
Microsoft KB
Microsoft KB
added 2012/07/10 12:0 a.m.6 views

Description of the Input Method Editor 2010 update: July 10, 2012

None None...

6.1AI score
Exploits0
OpenVAS
OpenVAS
added 2011/12/14 12:0 a.m.40 views

Microsoft Office IME (Chinese) Privilege Elevation Vulnerability (2652016)

This host is missing an important security update according to Microsoft Bulletin MS11-088. OpenVAS Vulnerability Test $Id: secpodms11-088.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft Office IME Chinese Privilege Elevation Vulnerability 2652016 Authors: Antu Sanadi Copyright: Copyright c 2011...

7.2CVSS1AI score0.01801EPSS
Exploits1References4
Cvelist
Cvelist
added 2011/12/14 12:0 a.m.24 views

CVE-2011-2010

The Microsoft Office Input Method Editor IME for Simplified Chinese in Microsoft Pinyin IME 2010, Office Pinyin SimpleFast Style 2010, and Office Pinyin New Experience Style 2010 does not properly restrict access to configuration options, which allows local users to gain privileges via the...

6.4AI score0.01801EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2011/12/14 12:0 a.m.25 views

Microsoft Office IME (Chinese) Privilege Elevation Vulnerability (2652016)

This host is missing an important security update according to Microsoft Bulletin MS11-088. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

7.2CVSS5AI score0.01801EPSS
Exploits1References4
CVE
CVE
added 2011/12/14 12:0 a.m.62 views

CVE-2011-2010

The CVE-2011-2010 issue affects the Microsoft Office IME (Chinese) for Simplified Chinese in Pinyin IME 2010 family (MSPY), including Office Pinyin SimpleFast Style 2010 and Office Pinyin New Experience Style 2010. The root cause is improper restriction of configuration options in the IME toolbar...

7.2CVSS6.4AI score0.01801EPSS
Exploits1References2Affected Software3
Prion
Prion
added 2011/09/15 12:26 p.m.26 views

Input validation

Multiple untrusted search path vulnerabilities in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allow local users to gain privileges via a Trojan horse DLL in the current working directory, as...

9.3CVSS7.1AI score0.12123EPSS
Exploits0References3Affected Software3
Positive Technologies
Positive Technologies
added 2011/09/15 12:0 a.m.8 views

PT-2011-3531 · Microsoft · Display Panning Cpl Extension +11

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista version SP2 Microsoft Windows Server 2008 versions SP2 through R2 SP1 Microsoft Windows 7 versions Gold through SP1 Description: T...

9.3CVSS7.1AI score0.12123EPSS
Exploits0References6
myhack58
myhack58
added 2010/12/10 12:0 a.m.49 views

Sogou input method 0DAY-vulnerability warning-the black bar safety net

Vulnerability process description: When windows is loaded sogou input method later, log in to the system, lock the computercltr+alt+del it. Switch to sogou input method, input the phonetic alphabet appears sogou input method toolbar, click on search, it will call iexplorer.exe the. Next you can b...

1.5AI score
Exploits0
OpenVAS
OpenVAS
added 2010/02/08 12:0 a.m.24 views

Mandriva Update for gtk MDVA-2010:048 (gtk)

Check for the Version of gtk OpenVAS Vulnerability Test Mandriva Update for gtk MDVA-2010:048 gtk Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

5CVSS6.4AI score0.01962EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2010/02/08 12:0 a.m.14 views

Mandriva Update for gtk MDVA-2010:048 (gtk)

Check for the Version of gtk OpenVAS Vulnerability Test Mandriva Update for gtk MDVA-2010:048 gtk Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

5CVSS6.5AI score0.01962EPSS
Exploits0References2
myhack58
myhack58
added 2010/01/20 12:0 a.m.25 views

0day sogou input method loopholes to gain system permissions-bug warning-the black bar safety net

Unintentionally found a very serious vulnerability, and the year 3 3 8 9 input loophole similar. However, temporary does not affect the not system is not loaded sogou input method, not login system. If the remote server installed sogou, the login system is loaded after the search dogs, but not...

1.1AI score
Exploits0
seebug.org
seebug.org
added 2010/01/19 12:0 a.m.139 views

搜狗输入法绕过锁屏保护漏洞

搜狗输入法是在中国广泛使用的拼音输入法。 当用户登录到Windows系统并加载了搜狗输入法后,锁屏(cltr+alt+del)再切换到该输入法,在输入法的工具栏中输入任意内容后点击“搜索”就会调用iexplorer.exe。如果登录账号属于管理员组,就可以直接在IE地址栏中进入system32目录并运行cmd。 SOGOU.COM 搜狗输入法 4.3 - Microsoft Windows 7 ultimate 厂商补丁: SOGOU.COM --------- 目前厂商还没有提供补丁或者升级程序,我们建议使用此软件的用户随时关注厂商的主页以获取最新版本:...

6.9AI score
Exploits0
securityvulns
securityvulns
added 2010/01/19 12:0 a.m.119 views

0day vulnerability Sogou input method to obtain system privileges

0day vulnerability Sogou input method to obtain system privileges Vulnerability: Do not intend to found a very serious vulnerability, and the year 3389 input loophole similar.However, no system was not being loaded does not affect input method logged in system. If the remote server installed ,...

0.8AI score
Exploits0
Rows per page
Query Builder