2359 matches found
CVE-2010-1422
WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, does not properly handle changes to keyboard focus that occur during processing of key press events, which allows remote attackers to force arbitrary key presses via a crafted HTML docume...
CVE-2010-1422
Removed by vendor...
CVE-2010-1422
CVE-2010-1422 affects WebKit used by Safari on Mac OS X and Windows (pre-5.0 on certain macOS versions; before 4.1 on Mac OS X 10.4). Root cause: improper handling of keyboard focus changes during key-press processing, enabling a crafted HTML document to force arbitrary key presses. Exploitation ...
Apple Plugs 48 Security Holes in Safari Browser
Apple has shipped new versions of its Safari browser with patches for at least 48 security vulnerabilities. The Safari 4.1 and 5.0 updates, considered “highly critical,” is available for both Windows and Mac OS X. Exploitation of some of these vulnerabilities could lead to drive-by download remot...
openSUSE Security Update : xen-201004 (openSUSE-SU-2010:0293-1)
Collective Xen 2010/04 Update, containing fixes for the following issues : bnc576832 - pygrub, reiserfs: Fix on-disk structure definition bnc537370 - Xen on SLES 11 does not boot - endless loop in ATA detection bnc561912 - xend leaks memory bnc564750 - Keyboard Caps Lock key works abnormal under...
Information disclosure
The Microsoft wireless keyboard uses XOR encryption with a key derived from the MAC address, which makes it easier for remote attackers to obtain keystroke information and inject arbitrary commands via a nearby wireless device, as demonstrated by Keykeriki 2...
CVE-2010-1184
The Microsoft wireless keyboard uses XOR encryption with a key derived from the MAC address, which makes it easier for remote attackers to obtain keystroke information and inject arbitrary commands via a nearby wireless device, as demonstrated by Keykeriki 2...
CVE-2010-1184
The Microsoft wireless keyboard uses XOR encryption with a key derived from the MAC address, which makes it easier for remote attackers to obtain keystroke information and inject arbitrary commands via a nearby wireless device, as demonstrated by Keykeriki 2...
CVE-2010-1184
CVE-2010-1184 concerns the Microsoft wireless keyboard, where the built-in XOR encryption uses a key derived from the MAC address. This design enables remote attackers to eavesdrop keystrokes and, via a nearby wireless device, inject arbitrary commands (as demonstrated by Keykeriki 2). The cited ...
Ubuntu 8.10 / 9.04 / 9.10 : gnome-screensaver vulnerabilities (USN-907-1)
It was discovered that gnome-screensaver did not correctly lock all screens when monitors get hotplugged. An attacker with physical access could use this flaw to gain access to a locked session. CVE-2010-0285 It was discovered that gnome-screensaver did not correctly handle keyboard grab when...
[USN-907-1] gnome-screensaver vulnerabilities
=========================================================== Ubuntu Security Notice USN-907-1 March 08, 2010 gnome-screensaver vulnerabilities CVE-2010-0285, CVE-2010-0422 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 8.1...
USN-907-1: gnome-screensaver vulnerabilities
It was discovered that gnome-screensaver did not correctly lock all screens when monitors get hotplugged. An attacker with physical access could use this flaw to gain access to a locked session. CVE-2010-0285 It was discovered that gnome-screensaver did not correctly handle keyboard grab when...
openSUSE Security Update : gnome-screensaver (gnome-screensaver-1973)
gnome-screensaver was updated to the stable release 2.28.3, fixing various bugs and security issues. Following security issues have been fixed: When resuming a system gnome-screensaver does not lock external displays that got connected while the system was suspended CVE-2010-0285: CVSS v2 Base...
CentOS 4 : kernel (CESA-2009:0014)
Updated kernel packages that resolve several security issues and fix various bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any...
CentOS 4 : kernel (CESA-2009:1671)
Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...
OpenJDK UI logging information leakage(6664512)
The Abstract Window Toolkit AWT in Java Runtime Environment JRE in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, does not properly restrict the objects that may be sent to loggers, which allows attackers to obtain sensitive information via vectors related to the...
OpenJDK UI logging information leakage(6664512)
The Abstract Window Toolkit AWT in Java Runtime Environment JRE in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, does not properly restrict the objects that may be sent to loggers, which allows attackers to obtain sensitive information via vectors related to the...
OpenJDK UI logging information leakage(6664512)
The Abstract Window Toolkit AWT in Java Runtime Environment JRE in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, does not properly restrict the objects that may be sent to loggers, which allows attackers to obtain sensitive information via vectors related to the...
CVE-2009-2834
CVE-2009-2834 affects Apple Mac OS X before 10.6.2. Local users can modify the firmware of a USB or Bluetooth keyboard via unspecified vectors. The NVD entry records a base score of 4.9 (MEDIUM) with integrity impact; attack vector LOCAL and no authentication required. OpenVAS and Tenable referen...