The vulnerability of the Mozilla Firefox Focus browser, related to bypassing the authentication process through an alternative path or channel, allows attackers to circumvent screen lock settings.

The vulnerability of the Mozilla Firefox Focus browser relates to bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to circumvent screen lock settings...

CVE-2024-58046

Permission management vulnerability in the lock screen module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

Medium: libglvnd

Issue Overview: libglxproto.c in OpenGL libglvnd bb06db5a was discovered to contain a segmentation violation via the function glXGetDrawableScreen. NOTE: this is disputed because there are no common situations in which users require uninterrupted operation with an attacker-controller server...

Linux Distros Unpatched Vulnerability : CVE-2023-24626

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - socket.c in GNU Screen through 4.9.0, when installed setuid or setgid the default on platforms such as Arch Linux and FreeBSD, allows local users to send a...

Linux Distros Unpatched Vulnerability : CVE-2023-5380

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free flaw was found in the xorg-x11-server. An X server crash may occur in a very specific and legacy configuration a multi-screen setup with multip...

CVE-2024-58046

Permission management vulnerability in the lock screen module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-58046

Permission management vulnerability in the lock screen module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-58046

Permission management vulnerability in the lock screen module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-58046

Permission management vulnerability in the lock screen module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-58046

Huawei HarmonyOS 的锁屏模块存在权限管理漏洞，可能被利用来泄露信息引发保密性影响。该 CVE 在多份来源中存在报告（NVD、Red Hat、CNVD、CNNVD、CIRCL 等），但连接文档未给出具体技术细节、受影响版本、漏洞原因或修复办法。未提供利用细节或现成的缓解方案，请关注后续更新。

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A privilege management vulnerability exists in the Huawei HarmonyOS lock screen module, which can be exploited by an attacker to compromise confidentiality...

CVE-2024-58046: Incorrect Default Permissions

Permission management vulnerability in the lock screen module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

PT-2025-9637

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description A permission management issue exists in the lock screen module. Successful exploitation of this issue may impact service confidentiality. Recommendations At the moment, there is no information...

Linux Distros Unpatched Vulnerability : CVE-2015-6806

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The MScrollV function in ansi.c in GNU screen 4.3.1 and earlier does not properly limit recursion, which allows remote attackers to cause a denial of service...

Linux Distros Unpatched Vulnerability : CVE-2006-7240

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gnome-power-manager 2.14.0 does not properly implement the lockonsuspend and lockonhibernate settings for locking the screen when the suspend or hibernate butto...

PT-2025-9107 · Nvda · Nvda

Name of the Vulnerable Software and Affected Versions: NVDA versions 2024.4.1 through 2024.4.2 Description: A vulnerability in the remote connection complements of NVDA allows an attacker to obtain total control of the remote system when guessing a weak password. The problem occurs because the...

February 25, 2025—KB5052094 (OS Builds 22621.4974 and 22631.4974) Preview

None None...

February 25, 2025—KB5052093 (OS Build 26100.3323) Preview

None None...

Medium: libglvnd

Issue Overview: libglxproto.c in OpenGL libglvnd bb06db5a was discovered to contain a segmentation violation via the function glXGetDrawableScreen. NOTE: this is disputed because there are no common situations in which users require uninterrupted operation with an attacker-controller server...

"RoboForm Password Manager" App for Android vulnerable to authentication bypass using an alternate path or channel

Overview "RoboForm Password Manager" App for Android provided by Siber Systems, Inc. is vulnerable to authentication bypass using an alternate path or channel CWE-288. Johan Francsics reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer. Impact An attacker with acces...