Design/Logic Flaw

Media Encryption EPM Explorer in Check Point Endpoint Security through E80.50 does not properly maintain the state of password failures, which makes it easier for physically proximate attackers to bypass the device-locking protection mechanism by entering password guesses within multiple Unlock.e...

CVE-2013-2891

drivers/hid/hid-steelseries.c in the Human Interface Device HID subsystem in the Linux kernel through 3.11, when CONFIGHIDSTEELSERIES is enabled, allows physically proximate attackers to cause a denial of service heap-based out-of-bounds write via a crafted device...

CVE-2009-4642

The vulnerability CVE-2009-4642 affects gnome-screensaver 2.26.1, which relies on the gnome-session D-Bus interface to determine session idle time. This occurs even on Xfce environments (e.g., Xubuntu/Mythbuntu), enabling physically proximate attackers to access an unattended workstation where sc...

OpenSC: Insufficient protection of smart card PIN

Background OpenSC is a smart card application that allows reading and writing via PKCS11. Description Chaskiel M Grundman reported that OpenSC uses weak permissions ADMIN file control information of 00 for the 5015 directory on smart cards and USB crypto tokens running Siemens CardOS M4. Impact A...

CVE-2008-2314

CVE-2008-2314 affects Apple Mac OS X 10.5 before 10.5.4 where, if Exposé hot corners are enabled, a physically proximate attacker can access a locked session in sleep or screen saver mode without entering a password. This is a local access vulnerability, not clearly described as exploitable via a...