Lucene search
+L

2378 matches found

BDU FSTEC
BDU FSTEC
added 2019/03/12 12:00 a.m.55 views

The vulnerability of the graphical user input component in the fly-qdm system of the Astra Linux operating system allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the graphical user input component in the fly-qdm system of the Astra Linux operating system is related to buffer overflows when copying a command string from the virtual keyboard. Exploiting this vulnerability can allow an attacker to cause service failures or execute...

9.3CVSS6.2AI score
SaveExploits0References1
Hacker One
Hacker One
added 2019/03/05 12:33 a.m.48 views

OLX: XSS inside HTML Link Tag

Hello, i discovered XSS in sharjah.dubizzle.com. XSS is reflected inside HTML Link tag so it need some condition to trigger the payload. Step to Reproduce - Visit https://sharjah.dubizzle.com/property-for-sale/land" accesskey="X" onclick=alert1337...

0.1AI score
SaveExploits0
CNVD
CNVD
added 2019/02/25 12:00 a.m.10 views

British Airways Entertainment System Buffer Overflow Vulnerability

The British Airways Entertainment System is an in-flight audio-visual entertainment system. A security vulnerability exists in the British Airways Entertainment System installed on Boeing 777-36NER and other aircraft, which arises from a program that does not prevent the USB charge/digit transfer...

6.8CVSS6.5AI score0.0048EPSS
SaveExploits1References1
NVD
NVD
added 2019/02/22 8:29 p.m.24 views

CVE-2019-9019

The British Airways Entertainment System, as installed on Boeing 777-36NER and possibly other aircraft, does not prevent the USB charging/data-transfer feature from interacting with USB keyboard and mouse devices, which allows physically proximate attackers to conduct unanticipated attacks agains...

6.8CVSS7.4AI score0.0048EPSS
SaveExploits1References1
Prion
Prion
added 2019/02/22 8:29 p.m.16 views

Buffer overflow

The British Airways Entertainment System, as installed on Boeing 777-36NER and possibly other aircraft, does not prevent the USB charging/data-transfer feature from interacting with USB keyboard and mouse devices, which allows physically proximate attackers to conduct unanticipated attacks agains...

4.6CVSS7.4AI score0.0048EPSS
SaveExploits1References1
CVE
CVE
added 2019/02/22 8:00 p.m.43 views

CVE-2019-9019

CVE-2019-9019 relates to the British Airways Entertainment System (installed on Boeing 777-36N(ER) and possibly others). The issue arises because the USB charging/data-transfer feature does not prevent interaction with connected USB keyboard/mouse devices, enabling physically proximate attackers ...

6.8CVSS7.3AI score0.0048EPSS
SaveExploits1References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/02/07 12:00 a.m.8 views

The vulnerability of the graphical input utility in the fly-qdm system of the Astra Linux operating system, which allows a intruder to cause a service failure.

The vulnerability of the graphical input utility in the fly-qdm system of the Astra Linux operating system is related to buffer overflows during the copying of lines with commands from the virtual keyboard. Exploiting this vulnerability can allow an attacker to cause a service failure...

2.4CVSS5.8AI score
SaveExploits0
Prion
Prion
added 2019/02/06 8:29 p.m.24 views

Code injection

It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions. An attacker with physical access to a locked workstation could invoke certain keyboard shortcuts, and potentially other actions...

4.6CVSS4.5AI score0.00498EPSS
SaveExploits1References5Affected Software3
OSV
OSV
added 2019/02/06 8:29 p.m.6 views

DEBIAN-CVE-2019-3820

It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions. An attacker with physical access to a locked workstation could invoke certain keyboard shortcuts, and potentially other actions...

4.3CVSS9.1AI score0.00498EPSS
SaveExploits1References1
NVD
NVD
added 2019/02/06 8:29 p.m.26 views

CVE-2019-3820

It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions. An attacker with physical access to a locked workstation could invoke certain keyboard shortcuts, and potentially other actions...

4.8CVSS4.6AI score0.00498EPSS
SaveExploits1References5
AlpineLinux
AlpineLinux
added 2019/02/06 8:00 p.m.75 views

CVE-2019-3820

It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions. An attacker with physical access to a locked workstation could invoke certain keyboard shortcuts, and potentially other actions...

4.8CVSS4.8AI score0.00498EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2019/02/06 1:19 a.m.43 views

CVE-2019-3820

A vulnerability was found where the gnome-shell lock screen, since version 3.15.91, does not properly restrict all contextual actions. An attacker with physical access to a locked workstation could invoke certain keyboard shortcuts and potentially other actions. This vulnerability was fixed in...

4.8CVSS4.9AI score0.00498EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2019/02/05 12:00 a.m.4 views

PT-2019-16738 · Gnome +7 · Gnome Shell +7

Name of the Vulnerable Software and Affected Versions: gnome-shell versions 3.15.91 and later Description: The gnome-shell lock screen does not properly restrict all contextual actions, allowing an attacker with physical access to a locked workstation to invoke certain keyboard shortcuts and...

9.3CVSS6.7AI score0.18108EPSS
SaveExploits27References394
CNVD
CNVD
added 2019/01/31 12:00 a.m.11 views

Apple iOS Keyboard Local Security Bypass Vulnerability

Apple iOS is an operating system developed by Apple Inc. for mobile devices.Keyboard is one of the keyboard components. A security vulnerability exists in the Keyboard component in Apple iOS versions prior to 12.1.3, which originates from the possibility that the password autofill feature may sti...

9.8CVSS6.7AI score0.01486EPSS
SaveExploits0References1
Veracode
Veracode
added 2019/01/15 9:10 a.m.58 views

Insecure Authentication

openssh uses an insecure authentication. It was discovered that the OpenSSH sshd daemon did not check the list of keyboard-interactive authentication methods for duplicates. A remote attacker could use this flaw to bypass the MaxAuthTries limit, making it easier to perform password guessing attac...

8.5CVSS6AI score0.09377EPSS
SaveExploits1References35Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/12/27 12:00 a.m.8 views

The vulnerability of the X Window System Xorg-server on the Astra Linux operating system allows a hacker to gain access to confidential data.

The vulnerability of the X Window System Xorg-server on the Astra Linux operating system is related to the lack of restrictions on the use of XungrabKeyboard and XgrabKeyboard functions for untrusted users, allowing the implementation of software tools with “keylogger” functionality. Exploiting...

5.5CVSS5.6AI score
SaveExploits0
Hacker One
Hacker One
added 2018/12/14 11:42 a.m.71 views

Grammarly: Grammarly Keyboard for Android <4.1 leaks user input through logs (except for sensitive input fields)

@homelander identified that Grammarly for Android on Android 4.1 was leaking user-entered text to device logs. Currently, Grammarly for Android doesn't support devices with platform versions less than Android 5.0...

2.9AI score
SaveExploits0
OSV
OSV
added 2018/12/05 11:29 a.m.27 views

CVE-2018-19865

A keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7.x, 5.8.x, 5.9.x, 5.10.x, and 5.11.x before 5.11.3...

7.5CVSS6.7AI score
SaveExploits0References13
NVD
NVD
added 2018/12/05 11:29 a.m.25 views

CVE-2018-19865

A keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7.x, 5.8.x, 5.9.x, 5.10.x, and 5.11.x before 5.11.3...

7.5CVSS7.5AI score0.02169EPSS
SaveExploits0References13
OSV
OSV
added 2018/12/05 11:29 a.m.10 views

DEBIAN-CVE-2018-19865

A keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7.x, 5.8.x, 5.9.x, 5.10.x, and 5.11.x before 5.11.3...

7.5CVSS7AI score0.02169EPSS
SaveExploits0References1
Rows per page
Query Builder