Lucene search
+L

2376 matches found

Veracode
Veracode
added 2022/06/02 10:53 p.m.48 views

Integer Overflow

kernel-rt is vulnerable to integer overflow. No code depends on this integer overflow so it is unlikely that the vulnerability can be used for anything apart from crashing the system. An issue was discovered in the Linux kernel 4.4 through 5.7.1. drivers/tty/vt/keyboard.c has an integer overflow ...

7.8CVSS7.7AI score0.0057EPSS
SaveExploits1References16Affected Software2
Fedora
Fedora
added 2022/06/01 1:27 a.m.21 views

[SECURITY] Fedora 35 Update: weechat-3.5-2.fc35

WeeChat Wee Enhanced Environment for Chat is a portable, fast, light and extensible IRC client. Everything can be done with a keyboard. It is customizable and extensible with scripts...

1.4AI score
SaveExploits0
OpenVAS
OpenVAS
added 2022/06/01 12:00 a.m.8 views

Fedora: Security Advisory for weechat (FEDORA-2022-d165104234)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
OSV
OSV
added 2022/05/31 8:01 a.m.7 views

OPENSUSE-SU-2022:10001-1 Security update for pcmanfm

This update for pcmanfm fixes the following issues: update to 1.3.2: Fixed case when some keyboard shortcuts stopped working: Alt+Home, Alt+Up Fixed sytem reboot delayed for 90 seconds in some cases new upstream release of pcmanfm 1.3.1 fixed crash on reload while directory changes changed size o...

5.5CVSS5.4AI score0.00334EPSS
SaveExploits0References3
OPENSUSE Linux
OPENSUSE Linux
added 2022/05/31 12:00 a.m.33 views

Security update for pcmanfm (moderate)

openSUSE Security Update: Security update for pcmanfm Announcement ID: openSUSE-SU-2022:10001-1 Rating: moderate References: 1039140 Cross-References: CVE-2017-8934 CVSS scores: CVE-2017-8934 NVD : 5.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports SLE-15-SP3 A...

5.5CVSS6.4AI score0.00334EPSS
SaveExploits0References1
OSV
OSV
added 2022/05/16 6:15 a.m.9 views

CVE-2022-29586

Konica Minolta bizhub MFP devices before 2022-04-14 allow a Sandbox Escape. An attacker must attach a keyboard to a USB port, press F12, and then escape from the kiosk mode...

7.4CVSS5.8AI score0.0043EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/05/16 6:15 a.m.8 views

CVE-2022-29586

Konica Minolta bizhub MFP devices before 2022-04-14 allow a Sandbox Escape. An attacker must attach a keyboard to a USB port, press F12, and then escape from the kiosk mode...

7.4CVSS5.9AI score0.0043EPSS
SaveExploits0References3
Prion
Prion
added 2022/05/16 6:15 a.m.16 views

Code injection

Konica Minolta bizhub MFP devices before 2022-04-14 allow a Sandbox Escape. An attacker must attach a keyboard to a USB port, press F12, and then escape from the kiosk mode...

6.9CVSS7.4AI score0.0043EPSS
SaveExploits0References2Affected Software45
RedHat Linux
RedHat Linux
added 2022/05/10 1:58 p.m.8 views

kernel: integer overflow in k_ascii() in drivers/tty/vt/keyboard.c

A flaw integer overflow in the Linux kernel's virtual terminal keyboard driver was found in the way the user sends some specific keyboard code multiple times. A local user could use this flaw to crash the system or possibly escalate their privileges on the system...

7.8CVSS6.8AI score0.0057EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 2022/05/10 1:43 p.m.7 views

kernel: integer overflow in k_ascii() in drivers/tty/vt/keyboard.c

A flaw integer overflow in the Linux kernel's virtual terminal keyboard driver was found in the way the user sends some specific keyboard code multiple times. A local user could use this flaw to crash the system or possibly escalate their privileges on the system...

7.8CVSS6.8AI score0.0057EPSS
SaveExploits1References5
OSV
OSV
added 2022/04/18 5:15 p.m.9 views

CVE-2022-25226

ThinVNC version 1.0b1 allows an unauthenticated user to bypass the authentication process via 'http://thin-vnc:8080/cmd?cmd=connect' by obtaining a valid SID without any kind of authentication. It is possible to achieve code execution on the server by sending keyboard or mouse events to the serve...

10CVSS7.7AI score0.11027EPSS
SaveExploits2References1
ATTACKERKB
ATTACKERKB
added 2022/04/18 5:15 p.m.7 views

CVE-2022-25226

ThinVNC version 1.0b1 allows an unauthenticated user to bypass the authentication process via 'http://thin-vnc:8080/cmd?cmd=connect' by obtaining a valid SID without any kind of authentication. It is possible to achieve code execution on the server by sending keyboard or mouse events to the serve...

10CVSS7.6AI score0.11027EPSS
SaveExploits2References3
Prion
Prion
added 2022/04/18 5:15 p.m.31 views

Authentication flaw

ThinVNC version 1.0b1 allows an unauthenticated user to bypass the authentication process via 'http://thin-vnc:8080/cmd?cmd=connect' by obtaining a valid SID without any kind of authentication. It is possible to achieve code execution on the server by sending keyboard or mouse events to the serve...

7.5CVSS9.8AI score0.11027EPSS
SaveExploits2References1Affected Software1
CNVD
CNVD
added 2022/04/18 12:00 a.m.67 views

SWHKD has unspecified vulnerabilities (CNVD-2022-36045)

SWHKD is a display protocol-independent hotkey daemon made in Rust. SWHKD has a security vulnerability that stems from keyboard events using an unintended user, which can be exploited by an attacker to cause information disclosure, but is usually a denial of functionality...

4.4CVSS1.9AI score0.00444EPSS
SaveExploits1References1
OSV
OSV
added 2022/04/15 12:00 a.m.30 views

GHSA-H5WH-7H2J-H999 Exposure of Resource to Wrong Sphere in Simple-Wayland-HotKey-Daemon

SWHKD 1.1.5 consumes the keyboard events of unintended users. This could potentially cause an information leak, but is usually a denial of functionality...

4.4CVSS4.5AI score0.00444EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2022/04/15 12:00 a.m.26 views

Exposure of Resource to Wrong Sphere in Simple-Wayland-HotKey-Daemon

SWHKD 1.1.5 consumes the keyboard events of unintended users. This could potentially cause an information leak, but is usually a denial of functionality...

4.4CVSS2.7AI score0.00444EPSS
SaveExploits1References4Affected Software1
GitLab Advisory Database
GitLab Advisory Database
added 2022/04/15 12:00 a.m.11 views

Exposure of Resource to Wrong Sphere in Simple-Wayland-HotKey-Daemon

SWHKD 1.1.5 consumes the keyboard events of unintended users. This could potentially cause an information leak, but is usually a denial of functionality...

4.4CVSS5.9AI score0.00444EPSS
SaveExploits1References5Affected Software1
NVD
NVD
added 2022/04/14 5:15 p.m.20 views

CVE-2022-27817

SWHKD 1.1.5 consumes the keyboard events of unintended users. This could potentially cause an information leak, but is usually a denial of functionality...

4.4CVSS0.00444EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/04/14 5:15 p.m.4 views

CVE-2022-27817

SWHKD 1.1.5 consumes the keyboard events of unintended users. This could potentially cause an information leak, but is usually a denial of functionality...

4.4CVSS5.8AI score0.00444EPSS
SaveExploits1References3
Prion
Prion
added 2022/04/14 5:15 p.m.18 views

Denial of service

SWHKD 1.1.5 consumes the keyboard events of unintended users. This could potentially cause an information leak, but is usually a denial of functionality...

3.6CVSS4.6AI score0.00444EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder