Lucene search
+L

8741 matches found

CNVD
CNVD
•added 2015/11/17 12:00 a.m.•19 views

Apple OS X and Apple Remote Desktop Authentication Vulnerability

Apple Remote Desktop is the United States Apple Apple company's set of dedicated to Mac OS X operating system remote desktop management system. The system supports software distribution, resource management and remote assistance. A security vulnerability exists in the Remote Desktop full-screen...

3.7CVSS6.5AI score0.00335EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2015/11/17 12:00 a.m.•3 views

PT-2015-2745

Name of the Vulnerable Software and Affected Versions GNOME Display Manager gdm versions prior to 3.18.2 Description The issue allows physically proximate attackers to bypass the lock screen by holding the Escape key. It is related to insufficient access control to files in the GNOME Display...

7.2CVSS0.00406EPSS
SaveExploits0References33
Cvelist
Cvelist
•added 2015/11/14 2:00 a.m.•44 views

CVE-2013-5229

The Remote Desktop full-screen feature in Apple OS X before 10.9 and Apple Remote Desktop before 3.7 sends dialog-box text to a connected remote host upon being woken from sleep, which allows physically proximate attackers to bypass intended access restrictions by entering a command in this box...

6.2AI score0.00335EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2015/11/14 12:00 a.m.•4 views

PT-2015-3549

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.9 Apple Remote Desktop versions prior to 3.7 Description The issue allows physically proximate attackers to bypass intended access restrictions by entering a command in a dialog box when the Remote Desktop...

3.7CVSS0.00335EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2015/11/13 12:00 a.m.•72 views

JVN#56210048: Apple OS X authentication issue when recovering from sleep mode

Apple OS X contains an issue with authentication when recovering from sleep mode. This issue exists due to a flaw in the the processing of the text entered in the dialog box upon recovering from sleep mode. Impact When Apple Remote Desktop is used in full screen mode and the remote connection is...

3.7CVSS6.5AI score0.00335EPSS
SaveExploits0
OSV
OSV
•added 2015/11/10 5:59 p.m.•10 views

DEBIAN-CVE-2015-8025

driver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency check, which allows physically proximate attackers to bypass the lock screen by hot swapping monitors...

2.1CVSS6.9AI score0.00508EPSS
SaveExploits1References1
NVD
NVD
•added 2015/11/10 5:59 p.m.•24 views

CVE-2015-8025

driver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency check, which allows physically proximate attackers to bypass the lock screen by hot swapping monitors...

2.1CVSS6.3AI score0.00508EPSS
SaveExploits1References10
OSV
OSV
•added 2015/11/10 5:59 p.m.•17 views

CVE-2015-8025

driver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency check, which allows physically proximate attackers to bypass the lock screen by hot swapping monitors...

6.2AI score
SaveExploits0References10
Prion
Prion
•added 2015/11/10 5:59 p.m.•24 views

Code injection

driver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency check, which allows physically proximate attackers to bypass the lock screen by hot swapping monitors...

2.1CVSS6.8AI score0.00508EPSS
SaveExploits1References10Affected Software2
Mend
Mend
•added 2015/11/10 4:00 p.m.•2 views

CVE-2015-8025

driver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency check, which allows physically proximate attackers to bypass the lock screen by hot swapping monitors...

5.1CVSS0.00508EPSS
SaveExploits1References12
CVE
CVE
•added 2015/11/10 4:00 p.m.•105 views

CVE-2015-8025

CVE-2015-8025 affects the xscreensaver component in XScreenSaver prior to 5.34. The issue is a faulty internal consistency check that can let someone with physical access bypass the lock screen by hot-swapping monitors, exploiting a local access scenario. Public advisories describe the impact as ...

2.1CVSS6.2AI score0.00508EPSS
SaveExploits1References10Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/11/10 12:00 a.m.•6 views

CVE-2015-8025: Undefined Security Weakness

driver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency check, which allows physically proximate attackers to bypass the lock screen by hot swapping monitors...

2.1CVSS5.9AI score0.00508EPSS
SaveExploits1References2
NVD
NVD
•added 2015/11/08 10:59 p.m.•36 views

CVE-2015-4928

Apache Ambari before 2.1, as used in IBM Infosphere BigInsights 4.x before 4.1, includes cleartext passwords on a Configs screen, which allows physically proximate attackers to obtain sensitive information by reading password fields...

4.3CVSS6AI score0.02824EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2015/11/08 10:00 p.m.•48 views

CVE-2015-4928

Apache Ambari before 2.1, as used in IBM Infosphere BigInsights 4.x before 4.1, includes cleartext passwords on a Configs screen, which allows physically proximate attackers to obtain sensitive information by reading password fields...

6AI score0.02824EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2015/11/08 12:00 a.m.•14 views

Mageia: Security Advisory (MGASA-2015-0431)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

2.1CVSS6.5AI score0.00508EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/11/08 12:00 a.m.•7 views

CVE-2015-4928: Exposure of Sensitive Information to an Unauthorized Actor

Apache Ambari before 2.1, as used in IBM Infosphere BigInsights 4.x before 4.1, includes cleartext passwords on a Configs screen, which allows physically proximate attackers to obtain sensitive information by reading password fields...

4.3CVSS5.8AI score0.02824EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2015/11/08 12:00 a.m.•5 views

PT-2015-6724

Name of the Vulnerable Software and Affected Versions Apache Ambari versions prior to 2.1 IBM Infosphere BigInsights versions prior to 4.1 Description The issue allows physically proximate attackers to obtain sensitive information by reading password fields on a Configs screen, as cleartext...

4.3CVSS0.02824EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2015/11/06 12:00 a.m.•11 views

The vulnerability of the iOS operating system, which allows a perpetrator to gain access to protected information

The vulnerability of the Notification Center component of the iOS operating system is related to the lack of protection for service data. Exploiting this vulnerability could allow a local attacker to gain access to protected information by viewing notifications of calls and messages displayed on...

2.1CVSS5.5AI score0.00371EPSS
SaveExploits0References3Affected Software1
Fedora
Fedora
•added 2015/11/05 11:27 p.m.•22 views

[SECURITY] Fedora 22 Update: xscreensaver-5.34-1.fc22

A modular screen saver and locker for the X Window System. More than 200 display modes are included in this package. This is a metapackage for installing all default packages related to XScreenSaver...

2.4AI score
SaveExploits0
OSV
OSV
•added 2015/11/05 10:46 p.m.•17 views

MGASA-2015-0431 Updated xscreensaver package fixes security vulnerability

The updated xscreensaver packages fix a security issue when used, in some cases, with dual screen and unplugging one of them...

2.1CVSS6.2AI score0.00508EPSS
SaveExploits1References3
Rows per page
Query Builder