Lucene search
+L

2374 matches found

OSV
OSV
added 2014/02/10 11:55 p.m.5 views

DEBIAN-CVE-2012-0064

xkeyboard-config before 2.5 in X.Org before 7.6 enables certain XKB debugging functions by default, which allows physically proximate attackers to bypass an X screen lock via keyboard combinations that break the input grab...

4.6CVSS6.9AI score0.0039EPSS
SaveExploits0References1
Prion
Prion
added 2014/02/10 11:55 p.m.19 views

Input validation

xkeyboard-config before 2.5 in X.Org before 7.6 enables certain XKB debugging functions by default, which allows physically proximate attackers to bypass an X screen lock via keyboard combinations that break the input grab...

4.6CVSS6.8AI score0.0039EPSS
SaveExploits0References9Affected Software2
NVD
NVD
added 2014/01/29 6:55 p.m.11 views

CVE-2013-2747

The password reset feature in Courion Access Risk Management Suite Version 8 Update 9 allows remote authenticated users to bypass intended Internet Explorer usage restrictions and execute arbitrary commands by using keyboard shortcuts to navigate the file system and open a command prompt...

6.5CVSS7.4AI score0.01429EPSS
SaveExploits0References1
Prion
Prion
added 2014/01/29 6:55 p.m.13 views

Design/Logic Flaw

The password reset feature in Courion Access Risk Management Suite Version 8 Update 9 allows remote authenticated users to bypass intended Internet Explorer usage restrictions and execute arbitrary commands by using keyboard shortcuts to navigate the file system and open a command prompt...

6.5CVSS7.9AI score0.01429EPSS
SaveExploits0References1Affected Software1
Google Chrome Security Advisories
Google Chrome Security Advisories
added 2014/01/14 12:00 a.m.60 views

Stable Channel Update

The Chrome Team is excited to announce the promotion of Chrome 32 to the Stable channel. 32.0.1700.76 for Windows and Chrome Frame and 32.0.1700.77 for Mac and Linux. This release contains a number of fixes and improvements, including: Tab indicators for sound, webcam and casting A different look...

7.5CVSS9.4AI score0.01804EPSS
SaveExploits5Affected Software1
OSV
OSV
added 2013/10/28 10:55 p.m.8 views

DEBIAN-CVE-2013-4394

The SetX11Keyboard function in systemd, when PolicyKit Local Authority PKLA is used to change the group permissions on the X Keyboard Extension XKB layouts description, allows local users in the group to modify the Xorg X11 Server configuration file and possibly gain privileges via vectors...

5.9CVSS6.7AI score0.00334EPSS
SaveExploits0References1
Prion
Prion
added 2013/10/28 10:55 p.m.25 views

Design/Logic Flaw

The SetX11Keyboard function in systemd, when PolicyKit Local Authority PKLA is used to change the group permissions on the X Keyboard Extension XKB layouts description, allows local users in the group to modify the Xorg X11 Server configuration file and possibly gain privileges via vectors...

5.9CVSS6.9AI score0.00334EPSS
SaveExploits0References5Affected Software2
UbuntuCve
UbuntuCve
added 2013/10/28 10:55 p.m.23 views

CVE-2013-4394

The SetX11Keyboard function in systemd, when PolicyKit Local Authority PKLA is used to change the group permissions on the X Keyboard Extension XKB layouts description, allows local users in the group to modify the Xorg X11 Server configuration file and possibly gain privileges via vectors...

5.9CVSS5.9AI score0.00334EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2013/10/28 10:00 p.m.52 views

CVE-2013-4394

The SetX11Keyboard function in systemd, when PolicyKit Local Authority PKLA is used to change the group permissions on the X Keyboard Extension XKB layouts description, allows local users in the group to modify the Xorg X11 Server configuration file and possibly gain privileges via vectors...

5.9CVSS5.5AI score0.00334EPSS
SaveExploits0
Cvelist
Cvelist
added 2013/10/28 10:00 p.m.44 views

CVE-2013-4394

The SetX11Keyboard function in systemd, when PolicyKit Local Authority PKLA is used to change the group permissions on the X Keyboard Extension XKB layouts description, allows local users in the group to modify the Xorg X11 Server configuration file and possibly gain privileges via vectors...

6.2AI score0.00334EPSS
SaveExploits0References5
CVE
CVE
added 2013/10/28 10:00 p.m.73 views

CVE-2013-4394

CVE-2013-4394 concerns systemd’s SetX11Keyboard function. When PKLA is used to change group permissions on XKB layouts, local users in that group may modify the Xorg X11 Server configuration file and potentially gain privileges through vectors involving special and control characters. The vulnera...

5.9CVSS6.3AI score0.00334EPSS
SaveExploits0References5Affected Software1
RedHat Linux
RedHat Linux
added 2013/10/23 4:26 p.m.10 views

OpenJDK: KeyboardFocusManager focus stealing (AWT, 7110683)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.235 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality an...

6.4CVSS7.4AI score0.02912EPSS
SaveExploits1References5
OSV
OSV
added 2013/10/11 12:00 a.m.18 views

DSA-2777-1 systemd - several

Bulletin has no description...

7.5CVSS6.2AI score0.05443EPSS
SaveExploits1
Packet Storm
Packet Storm
added 2013/09/21 12:00 a.m.48 views

Share KM 1.0.19 Denial Of Service

Advisory Information : ====================== Title : Share KM 1.0.19 - Remote Denial Of Service Advisory ID : Cr02013-001 Product : Share KM desktop setup file Vendor : SmartUX Vulnerable Versions : 1.0.19 and probably prior release Tested Version : 1.0.19 Tested On : Windows 7 Vulnerability Typ...

7.4AI score
SaveExploits0
NVD
NVD
added 2013/09/20 4:55 p.m.26 views

CVE-2012-4072

The KVM subsystem in Cisco Unified Computing System UCS relies on a hardcoded X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers, and read keyboard and mouse events, by leveraging knowledge of this certificate's private key, aka Bug ID CSCte90327...

4.3CVSS6.3AI score0.00609EPSS
SaveExploits0References2
Prion
Prion
added 2013/09/20 4:55 p.m.24 views

Hardcoded credentials

The KVM subsystem in Cisco Unified Computing System UCS relies on a hardcoded X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers, and read keyboard and mouse events, by leveraging knowledge of this certificate's private key, aka Bug ID CSCte90327...

4.3CVSS6.8AI score0.00609EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2013/09/20 4:00 p.m.35 views

CVE-2012-4072

The KVM subsystem in Cisco Unified Computing System UCS relies on a hardcoded X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers, and read keyboard and mouse events, by leveraging knowledge of this certificate's private key, aka Bug ID CSCte90327...

6.3AI score0.00609EPSS
SaveExploits0References2
Cisco
Cisco
added 2013/09/18 4:20 p.m.60 views

Cisco Unified Computing System Software KVM Encryption Vulnerability

A vulnerability in Cisco Unified Computing System software KVM could allow an unauthenticated, remote attacker to intercept a KVM connection to spoof a host or decrypt keyboard and mouse events on an encrypted channel. The vulnerability is due to a hard coded SSL certificate. An attacker could...

4.3CVSS1.6AI score0.00609EPSS
SaveExploits0References1
OSV
OSV
added 2013/09/16 1:01 p.m.3 views

DEBIAN-CVE-2013-2894

drivers/hid/hid-lenovo-tpkbd.c in the Human Interface Device HID subsystem in the Linux kernel through 3.11, when CONFIGHIDLENOVOTPKBD is enabled, allows physically proximate attackers to cause a denial of service heap-based out-of-bounds write via a crafted device...

4.7CVSS5.6AI score0.00365EPSS
SaveExploits0References1
NVD
NVD
added 2013/08/23 4:55 p.m.17 views

CVE-2011-4607

PuTTY 0.59 through 0.61 does not clear sensitive process memory when managing user replies that occur during keyboard-interactive authentication, which might allow local users to read login passwords by obtaining access to the process' memory...

2.1CVSS6AI score0.00408EPSS
SaveExploits0References3
Rows per page
Query Builder