Lucene search
+L

17 matches found

Positive Technologies
Positive Technologies
•added 2026/08/05 12:00 a.m.•7 views

PT-2026-68317

Name of the Vulnerable Software and Affected Versions livebook versions 0.5.0 through 0.18.6 livebook versions 0.19.0 through 0.19.8 Description An origin validation error allows untrusted notebook output JavaScript to trigger session-wide keyboard shortcuts. The JS-view feature renders JavaScrip...

8.8CVSS6.1AI score0.00267EPSS
SaveExploits0References17
SUSE CVE
SUSE CVE
•added 2023/02/15 5:58 a.m.•7 views

SUSE CVE-2010-2295

page/EventHandler.cpp in WebCore in WebKit in Google Chrome before 5.0.375.70 does not properly handle a change of the focused frame during the dispatching of keydown, which allows user-assisted remote attackers to redirect keystrokes via a crafted HTML document, aka rdar problem 7018610. NOTE:...

4.3CVSS6.6AI score0.01389EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
•added 2023/02/15 5:01 a.m.•9 views

SUSE CVE-2016-5254

Use-after-free vulnerability in the nsXULPopupManager::KeyDown function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows attackers to execute arbitrary code or cause a denial of service heap memory corruption and application crash by leveraging keyboard access to use the Alt...

9.8CVSS7.8AI score0.02953EPSS
SaveExploits0References9
Microsoft KB
Microsoft KB
•added 2021/11/22 12:00 a.m.•16 views

November 22, 2021-KB5007292 Cumulative Update Preview for .NET Framework 3.5 and 4.8 for Windows 11

None None...

6.1AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2020/04/08 10:15 p.m.•40 views

CVE-2016-5254

Use-after-free vulnerability in the nsXULPopupManager::KeyDown function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows attackers to execute arbitrary code or cause a denial of service heap memory corruption and application crash by leveraging keyboard access to use the Alt...

7.5CVSS6AI score0.02953EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2016/08/16 12:00 a.m.•14 views

The vulnerability of Firefox and Firefox ESR browsers allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of the nsXULPopupManager::KeyDown function in Firefox and Firefox ESR browsers is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure memory corruption, application termination by...

7.5CVSS8.2AI score0.02953EPSS
SaveExploits0References3Affected Software2
CNVD
CNVD
•added 2016/08/07 12:00 a.m.•8 views

Mozilla Firefox and Firefox ESR 'nsXULPopupManager::KeyDown' function memory misreference vulnerability

Mozilla Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox. A memory misreference vulnerability exists in the 'nsXULPopupManager::KeyDown' function in Mozilla Firefox and Firefox, which can be exploited by a remote attacker to construct a malicious WEB pa...

9.8CVSS9.1AI score0.02953EPSS
SaveExploits0References1
OSV
OSV
•added 2016/08/05 1:59 a.m.•9 views

DEBIAN-CVE-2016-5254

Use-after-free vulnerability in the nsXULPopupManager::KeyDown function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows attackers to execute arbitrary code or cause a denial of service heap memory corruption and application crash by leveraging keyboard access to use the Alt...

9.8CVSS9.2AI score0.02953EPSS
SaveExploits0References1
Prion
Prion
•added 2016/08/05 1:59 a.m.•43 views

Design/Logic Flaw

Use-after-free vulnerability in the nsXULPopupManager::KeyDown function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows attackers to execute arbitrary code or cause a denial of service heap memory corruption and application crash by leveraging keyboard access to use the Alt...

7.5CVSS8.1AI score0.02953EPSS
SaveExploits0References11Affected Software3
Mend
Mend
•added 2016/08/05 1:00 a.m.•1 views

CVE-2016-5254

Use-after-free vulnerability in the nsXULPopupManager::KeyDown function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows attackers to execute arbitrary code or cause a denial of service heap memory corruption and application crash by leveraging keyboard access to use the Alt...

9.8CVSS0.02953EPSS
SaveExploits0References14
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/08/05 12:00 a.m.•5 views

CVE-2016-5254: Use After Free

Use-after-free vulnerability in the nsXULPopupManager::KeyDown function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows attackers to execute arbitrary code or cause a denial of service heap memory corruption and application crash by leveraging keyboard access to use the Alt...

9.8CVSS8.6AI score0.02953EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2016/08/03 12:00 a.m.•31 views

CVE-2016-5254

Use-after-free vulnerability in the nsXULPopupManager::KeyDown function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows attackers to execute arbitrary code or cause a denial of service heap memory corruption and application crash by leveraging keyboard access to use the Alt...

9.8CVSS7.5AI score0.02953EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2016/08/02 12:00 a.m.•2 views

PT-2016-2529

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 48.0 Firefox ESR 45.x versions prior to 45.3 Description The issue is related to a use-after-free vulnerability in the nsXULPopupManager::KeyDown function. This vulnerability allows attackers to execute...

9.8CVSS0.02953EPSS
SaveExploits0
Prion
Prion
•added 2010/06/15 6:00 p.m.•25 views

Design/Logic Flaw

page/EventHandler.cpp in WebCore in WebKit in Google Chrome before 5.0.375.70 does not properly handle a change of the focused frame during the dispatching of keydown, which allows user-assisted remote attackers to redirect keystrokes via a crafted HTML document, aka rdar problem 7018610. NOTE:...

4.3CVSS5.9AI score0.03007EPSS
SaveExploits0References10Affected Software1
UbuntuCve
UbuntuCve
•added 2010/06/15 6:00 p.m.•39 views

CVE-2010-2295

page/EventHandler.cpp in WebCore in WebKit in Google Chrome before 5.0.375.70 does not properly handle a change of the focused frame during the dispatching of keydown, which allows user-assisted remote attackers to redirect keystrokes via a crafted HTML document, aka rdar problem 7018610. NOTE:...

4.3CVSS5.9AI score0.01389EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/06/15 12:00 a.m.•5 views

CVE-2010-2295: Improper Input Validation

page/EventHandler.cpp in WebCore in WebKit in Google Chrome before 5.0.375.70 does not properly handle a change of the focused frame during the dispatching of keydown, which allows user-assisted remote attackers to redirect keystrokes via a crafted HTML document, aka rdar problem 7018610. NOTE:...

4.3CVSS5.9AI score0.01389EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2007/10/26 7:00 p.m.•58 views

CVE-2002-2311

Microsoft Internet Explorer 6.0 and possibly others allows remote attackers to upload arbitrary file contents when users press a key corresponding to the JavaScript 1 event.ctrlKey or 2 event.shiftKey onkeydown event contained in a webpage. NOTE: it was reported that the vendor has disputed the...

6.8AI score0.09506EPSS
SaveExploits1References4
Rows per page
Query Builder