2378 matches found
CVE-2012-4072
The KVM subsystem in Cisco Unified Computing System UCS relies on a hardcoded X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers, and read keyboard and mouse events, by leveraging knowledge of this certificate's private key, aka Bug ID CSCte90327...
Cisco Unified Computing System Software KVM Encryption Vulnerability
A vulnerability in Cisco Unified Computing System software KVM could allow an unauthenticated, remote attacker to intercept a KVM connection to spoof a host or decrypt keyboard and mouse events on an encrypted channel. The vulnerability is due to a hard coded SSL certificate. An attacker could...
DEBIAN-CVE-2013-2894
drivers/hid/hid-lenovo-tpkbd.c in the Human Interface Device HID subsystem in the Linux kernel through 3.11, when CONFIGHIDLENOVOTPKBD is enabled, allows physically proximate attackers to cause a denial of service heap-based out-of-bounds write via a crafted device...
CVE-2011-4607
PuTTY 0.59 through 0.61 does not clear sensitive process memory when managing user replies that occur during keyboard-interactive authentication, which might allow local users to read login passwords by obtaining access to the process' memory...
CVE-2011-4607
PuTTY 0.59 through 0.61 does not clear sensitive process memory when managing user replies that occur during keyboard-interactive authentication, which might allow local users to read login passwords by obtaining access to the process' memory...
DEBIAN-CVE-2011-4607
PuTTY 0.59 through 0.61 does not clear sensitive process memory when managing user replies that occur during keyboard-interactive authentication, which might allow local users to read login passwords by obtaining access to the process' memory...
CVE-2011-4607
PuTTY 0.59 through 0.61 does not clear sensitive process memory when managing user replies that occur during keyboard-interactive authentication, which might allow local users to read login passwords by obtaining access to the process' memory...
[SECURITY] Fedora 19 Update: bluetile-0.6-18.fc19
Bluetile is a tiling window manager for Linux, designed to integrate with the GNOME desktop environment. It provides both a traditional, stacking lay out mode as well as tiling layouts where windows are arranged to use the entire screen without overlapping. Bluetile tries to make the tiling...
[SECURITY] Fedora 18 Update: bluetile-0.6-13.fc18
Bluetile is a tiling window manager for Linux, designed to integrate with the GNOME desktop environment. It provides both a traditional, stacking lay out mode as well as tiling layouts where windows are arranged to use the entire screen without overlapping. Bluetile tries to make the tiling...
Oracle Linux 5 : kvm (ELSA-2009-1465)
The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2009-1465 advisory. 83-105.0.1.el54.7 - Add kvm-add-oracle-workaround-for-libvirt-bug.patch kvm-83-105.el54.7 - kvm-qemu-virtio-net-do-not-return-stack-pointer-from-fun.patch...
Oracle Linux 5 : kernel (ELSA-2008-1017)
The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2008-1017 advisory. - drm i915 driver arbitrary ioremap Eugene Teo 464508 464509 CVE-2008-3831 - fs don't allow splice to files opened with OAPPEND Eugene Teo 466709 46671...
DEBIAN-CVE-2013-1981
Multiple integer overflows in X.org libX11 1.5.99.901 1.6 RC1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the 1 XQueryFont, 2 XF86BigfontQueryFont, 3 XListFontsWithInfo, 4 XGetMotionEvents, 5 XListHosts, 6...
Code injection
The Keyboard Shortcut Utility module 7.x-1.x before 7.x-1.1 for Drupal does not properly check node restrictions, which allows 1 remote authenticated users with the "view shortcuts" permission to read nodes or 2 remote authenticated users with the "admin shortcuts" permission to read, edit, or...
CVE-2013-0226
The Keyboard Shortcut Utility module 7.x-1.x before 7.x-1.1 for Drupal does not properly check node restrictions, which allows 1 remote authenticated users with the "view shortcuts" permission to read nodes or 2 remote authenticated users with the "admin shortcuts" permission to read, edit, or...
CVE-2013-0226
The Drupal Keyboard Shortcut Utility module (7.x-1.x) is vulnerable prior to 7.x-1.1 due to insufficient checks of node access. Remote authenticated users with the “view shortcuts” permission can read nodes, and those with the “admin shortcuts” permission can read, edit, or delete nodes via unspe...
Apple Mac OS X 本地安全绕过漏洞
BUGTRAQ ID: 58512 CVECAN ID: CVE-2013-0969 Apple Mac OS X是苹果电脑操作系统软件。 Apple Mac OS X 10.8.3之前版本的登录窗口没有阻止应用用VoiceOver功能启动,允许物理位置接近的攻击者绕过身份验证并通过键盘更改系统首选项。 0 Apple Mac OS X 10.7.4 Apple Mac OS X 10.7.3 Apple Mac OS X 10.7.2 Apple Mac OS X 10.7.1 Apple Mac OS X Server 10.7.4 Apple Mac OS X Server...
Authentication flaw
Login Window in Apple Mac OS X before 10.8.3 does not prevent application launching with the VoiceOver feature, which allows physically proximate attackers to bypass authentication and make arbitrary System Preferences changes via unspecified use of the keyboard...
CVE-2013-0969
Login Window in Apple Mac OS X before 10.8.3 does not prevent application launching with the VoiceOver feature, which allows physically proximate attackers to bypass authentication and make arbitrary System Preferences changes via unspecified use of the keyboard...
SA-CONTRIB-2013-009 - Keyboard Shortcut Utility - Access Bypass - module unsupported
The Keyboard Shortcut Utility module enables you to create keyboard shortcuts on your website. You can create a shortcut to go to a page internal or external or call a JavaScript function. The module doesn't sufficiently check node access to view nodes for users who have "view shortcuts"...
[SECURITY] Fedora 16 Update: weechat-0.3.9.2-2.fc16
WeeChat Wee Enhanced Environment for Chat is a portable, fast, light and extensible IRC client. Everything can be done with a keyboard. It is customizable and extensible with scripts...