Lucene search
+L

230 matches found

NVD
NVD
added 2010/06/24 5:30 p.m.27 views

CVE-2010-2441

WebKit does not properly restrict focus changes, which allows remote attackers to read keystrokes via "cross-domain IFRAME gadgets," a different vulnerability than CVE-2010-1126, CVE-2010-1422, and CVE-2010-2295...

4.3CVSS8.5AI score0.01898EPSS
Exploits1References5
UbuntuCve
UbuntuCve
added 2010/06/24 5:30 p.m.31 views

CVE-2010-2441

WebKit does not properly restrict focus changes, which allows remote attackers to read keystrokes via "cross-domain IFRAME gadgets," a different vulnerability than CVE-2010-1126, CVE-2010-1422, and CVE-2010-2295...

4.3CVSS5.9AI score0.01898EPSS
Exploits1References1
Prion
Prion
added 2010/06/24 5:30 p.m.23 views

Cross site scripting

WebKit does not properly restrict focus changes, which allows remote attackers to read keystrokes via "cross-domain IFRAME gadgets," a different vulnerability than CVE-2010-1126, CVE-2010-1422, and CVE-2010-2295...

4.3CVSS6.6AI score0.03007EPSS
Exploits1References5
Prion
Prion
added 2010/06/24 5:30 p.m.22 views

Cross site scripting

Microsoft Internet Explorer, possibly 8, does not properly restrict focus changes, which allows remote attackers to read keystrokes via "cross-domain IFRAME gadgets."...

4.3CVSS7.1AI score0.11605EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2010/06/24 5:0 p.m.45 views

CVE-2010-2441

Removed by vendor...

4.3CVSS6.6AI score0.01898EPSS
Exploits1
Cvelist
Cvelist
added 2010/06/24 5:0 p.m.34 views

CVE-2010-2441

WebKit does not properly restrict focus changes, which allows remote attackers to read keystrokes via "cross-domain IFRAME gadgets," a different vulnerability than CVE-2010-1126, CVE-2010-1422, and CVE-2010-2295...

8.5AI score0.01898EPSS
Exploits1References5
CVE
CVE
added 2010/06/24 5:0 p.m.63 views

CVE-2010-2442

CVE-2010-2442 concerns Microsoft Internet Explorer (noted as IE 8 or similar) where the browser does not properly restrict focus changes, enabling a remote attacker to read keystrokes through cross-domain IFRAME gadgets. The primary affected component is the browser’s handling of focus and cross-...

4.3CVSS6.8AI score0.11605EPSS
Exploits0References1Affected Software1
UbuntuCve
UbuntuCve
added 2010/03/26 8:30 p.m.33 views

CVE-2010-1126

The JavaScript implementation in WebKit allows remote attackers to send selected keystrokes to a form field in a hidden frame, instead of the intended form field in a visible frame, via certain calls to the focus method...

5.8CVSS5.9AI score0.01757EPSS
Exploits0References2
NVD
NVD
added 2010/03/26 8:30 p.m.25 views

CVE-2010-1126

The JavaScript implementation in WebKit allows remote attackers to send selected keystrokes to a form field in a hidden frame, instead of the intended form field in a visible frame, via certain calls to the focus method...

5.8CVSS8.5AI score0.01757EPSS
Exploits0References5
NVD
NVD
added 2010/03/26 8:30 p.m.13 views

CVE-2010-1125

The JavaScript implementation in Mozilla Firefox 3.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote attackers to send selected keystrokes to a form field in a hidden frame, instead of the intended form field in a visible frame, via certain calls to the focus metho...

5.8CVSS9.3AI score0.02018EPSS
Exploits0References23
CVE
CVE
added 2010/03/26 8:0 p.m.66 views

CVE-2010-1126

CVE-2010-1126 targets WebKit’s JavaScript implementation. The vulnerability allows remote attackers to cause keystrokes intended for a visible frame to be sent to a form field in a hidden frame by certain focus() calls in WebKit. Affected component is the WebKit browser engine; impact is partial ...

5.8CVSS8.4AI score0.01757EPSS
Exploits0References5Affected Software1
Cvelist
Cvelist
added 2010/03/26 8:0 p.m.25 views

CVE-2010-1125

The JavaScript implementation in Mozilla Firefox 3.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote attackers to send selected keystrokes to a form field in a hidden frame, instead of the intended form field in a visible frame, via certain calls to the focus metho...

9.1AI score0.02018EPSS
Exploits0References23
Cvelist
Cvelist
added 2010/03/26 8:0 p.m.36 views

CVE-2010-1126

The JavaScript implementation in WebKit allows remote attackers to send selected keystrokes to a form field in a hidden frame, instead of the intended form field in a visible frame, via certain calls to the focus method...

8.5AI score0.01757EPSS
Exploits0References5
CVE
CVE
added 2010/03/26 8:0 p.m.145 views

CVE-2010-1125

CVE-2010-1125 affects Mozilla Firefox 3.x (before 3.5.10) and 3.6.x (before 3.6.4), and SeaMonkey before 2.0.5. The vulnerability arises in the JavaScript focus handling: a call to focus can cause keystrokes intended for a visible form field to be delivered to a hidden frame, enabling remote expl...

5.8CVSS9AI score0.02018EPSS
Exploits0References23Affected Software1
Check Point Advisories
Check Point Advisories
added 2009/03/22 12:0 a.m.4 views

KeyLogger: Cheat Monitor

Cheat Monitor is a spyware program that can be used to record information on the computer. Cheat Monitor tracks emails, chats, instant messages, and every keystroke that is entered by the victim. It can also capture screenshots of the infected system and deliver reports to a pre-defined email...

6.7AI score
Exploits0
Saint
Saint
added 2009/03/05 12:0 a.m.20 views

Keystroke Logger

Added: 03/05/2009 Background This tool records all keystrokes which are typed at a computer's console. The keystrokes can be viewed in the exploit server's log. Limitations Logger works on Windows targets. A connection to the target is required to run this tool. Platforms Windows...

2.1AI score
Exploits0
OSV
OSV
added 2008/09/18 5:59 p.m.6 views

DEBIAN-CVE-2008-4101

Vim 3.0 through 7.x before 7.2.010 does not properly escape characters, which allows user-assisted attackers to 1 execute arbitrary shell commands by entering a K keystroke on a line that contains a ";" semicolon followed by a command, or execute arbitrary Ex commands by entering an argument afte...

9.3CVSS7.6AI score0.09207EPSS
Exploits1References1
NVD
NVD
added 2007/11/15 1:46 a.m.23 views

CVE-2007-4693

The SecurityAgent component in Mac OS X 10.4 through 10.4.10 allows attackers with physical access to bypass the authentication dialog of the screen saver and send keystrokes to a process, related to "handling of keyboard focus between secure text fields."...

7.2CVSS6.5AI score0.00389EPSS
Exploits1References8
Cvelist
Cvelist
added 2007/11/15 1:0 a.m.24 views

CVE-2007-4693

The SecurityAgent component in Mac OS X 10.4 through 10.4.10 allows attackers with physical access to bypass the authentication dialog of the screen saver and send keystrokes to a process, related to "handling of keyboard focus between secure text fields."...

7.6AI score0.00389EPSS
Exploits1References8
Prion
Prion
added 2007/10/01 5:17 a.m.25 views

Design/Logic Flaw

The focus handling for the onkeydown event in Microsoft Internet Explorer 6.0 allows remote attackers to change field focus and copy keystrokes via a certain use of a JavaScript htmlFor attribute, as demonstrated by changing focus from a textarea to a file upload field, a related issue to...

4.3CVSS6.3AI score0.15009EPSS
Exploits1References5Affected Software1
Rows per page
Query Builder