Fedora 26 : ckeditor (2018-1361f39801)

4.9.2 https://ckeditor.com/cke4/release/CKEditor-4.9.2 Security Updates - Fixed XSS vulnerability in the Enhanced Image image2 plugin reported by Kyaw Min Thein. - Issue summary: It was possible to execute XSS inside CKEditor using the tag and specially crafted HTML. Please note that the default...

Foxit Reader TextBox Keystroke Remote Code Execution Vulnerability

Foxit Reader is a small PDF document viewer and printing program. Foxit Reader has a security vulnerability in TextBox Keystroke handling, which can be exploited by an attacker to execute arbitrary code in the context of the current process due to a lack of validation before performing an operati...

Apple iOS and macOS High Sierra WindowServer Security Bypass Vulnerability

Apple iOS and macOS High Sierra are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; macOS High Sierra is a specialized operating system for Mac computers. windowServer is one of the Window WindowServer is one of the Window service components. A security...

Foxit Reader TextBox Keystroke Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

CVE-2018-8117: Undefined Security Weakness

A security feature bypass vulnerability exists in the Microsoft Wireless Keyboard 850 which could allow an attacker to reuse an AES encryption key to send keystrokes to other keyboard devices or to read keystrokes sent by other keyboards for the affected devices, aka "Microsoft Wireless Keyboard...

Intel Remote Keyboard elevation of privilege vulnerability (CNVD-2018-08319)

Intel Remote Keyboard is an application that allows you to connect to a supported PC and control keyboard and mouse input from your smartphone screen. An elevation of privilege vulnerability exists in Intel Remote Keyboard. An attacker can exploit the vulnerability to inject keystrokes as a local...

Intel Remote Keyboard Elevation of Privilege Vulnerability

Intel Remote Keyboard is an application that allows you to connect to a supported PC and control keyboard and mouse input from your smartphone screen. An elevation of privilege vulnerability exists in Intel Remote Keyboard. A local attacker could exploit the vulnerability to inject keystrokes int...

Session fixation

Escalation of privilege in all versions of the Intel Remote Keyboard allows a local attacker to inject keystrokes into another remote keyboard session...

CVE-2018-3645

Escalation of privilege in all versions of the Intel Remote Keyboard allows a local attacker to inject keystrokes into another remote keyboard session...

CVE-2018-3641

Escalation of privilege in all versions of the Intel Remote Keyboard allows a network attacker to inject keystrokes as a local user...

Privilege escalation

Escalation of privilege in all versions of the Intel Remote Keyboard allows a network attacker to inject keystrokes as a local user...

CVE-2018-3645

Escalation of privilege in all versions of the Intel Remote Keyboard allows a local attacker to inject keystrokes into another remote keyboard session...

CVE-2018-3645

CVE-2018-3645 affects all versions of the Intel Remote Keyboard. A local attacker can escalate privileges to inject keystrokes into another remote keyboard session, via the Intel Remote Keyboard app. The issue is described as a local escalation of privilege with impact to authentication/authoriza...

CVE-2018-4131

An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. The issue involves the "WindowServer" component. It allows attackers to bypass the Secure Input Mode protection mechanism, and log keystrokes of arbitrary apps, via a crafted app that...

CVE-2018-4131

An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. The issue involves the "WindowServer" component. It allows attackers to bypass the Secure Input Mode protection mechanism, and log keystrokes of arbitrary apps, via a crafted app that...

CVE-2018-4131

An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. The issue involves the "WindowServer" component. It allows attackers to bypass the Secure Input Mode protection mechanism, and log keystrokes of arbitrary apps, via a crafted app that...

CVE-2018-4131: Undefined Security Weakness

An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. The issue involves the "WindowServer" component. It allows attackers to bypass the Secure Input Mode protection mechanism, and log keystrokes of arbitrary apps, via a crafted app that...

CVE-2018-3645: Undefined Security Weakness

Escalation of privilege in all versions of the Intel Remote Keyboard allows a local attacker to inject keystrokes into another remote keyboard session...

CVE-2018-3641: Undefined Security Weakness

Escalation of privilege in all versions of the Intel Remote Keyboard allows a network attacker to inject keystrokes as a local user...

Intel® Remote Keyboard Unauthenticated Keystroke Injection

Summary: CVE-2018-3641: Escalation of privilege in all versions of the Intel® Remote Keyboard allows a network attacker to inject keystrokes as a local user. • 9.0 Critical CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H CVE-2018-3645: Escalation of privilege in all versions of the Intel® Remote...