3 matches found
PT-2021-17685
Name of the Vulnerable Software and Affected Versions: Squirro Insights Engine versions 2.0.0 through 3.2.4 Description: The issue allows an attacker to inject malicious JavaScript code into the application, which executes within the user's browser. This enables the attacker to perform various...
PT-2018-16420
Name of the Vulnerable Software and Affected Versions iOS versions prior to 11.3 macOS versions prior to 10.13.4 Description The issue involves the WindowServer component and allows attackers to bypass the Secure Input Mode protection mechanism. This enables logging keystrokes of arbitrary apps v...
PT-2013-5416
Name of the Vulnerable Software and Affected Versions CoreGraphics in Apple Mac OS X versions prior to 10.9 Description The issue allows local users to bypass secure input mode and log an arbitrary application's keystrokes via a hotkey event registration. Recommendations For CoreGraphics in Apple...