Lucene search
+L

447 matches found

OSV
OSV
•added 2020/11/03 8:15 p.m.•17 views

CVE-2020-1908

Improper authorization of the Screen Lock feature in WhatsApp and WhatsApp Business for iOS prior to v2.20.100 could have permitted use of Siri to interact with the WhatsApp application even after the phone was locked...

4.6CVSS5.8AI score0.00291EPSS
SaveExploits0References1
Prion
Prion
•added 2020/11/03 8:15 p.m.•26 views

Authorization

Improper authorization of the Screen Lock feature in WhatsApp and WhatsApp Business for iOS prior to v2.20.100 could have permitted use of Siri to interact with the WhatsApp application even after the phone was locked...

2.1CVSS4.6AI score0.00291EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
•added 2020/11/03 7:15 p.m.•43 views

CVE-2020-1908

Improper authorization of the Screen Lock feature in WhatsApp and WhatsApp Business for iOS prior to v2.20.100 could have permitted use of Siri to interact with the WhatsApp application even after the phone was locked...

4.5AI score0.00291EPSS
SaveExploits0References1
CVE
CVE
•added 2020/11/03 7:15 p.m.•72 views

CVE-2020-1908

CVE-2020-1908 affects WhatsApp and WhatsApp Business on iOS before v2.20.100. The issue is improper authorization of the Screen Lock feature, which could allow Siri to interact with the WhatsApp app after the device is locked. Impacted components are the iOS WhatsApp apps; root cause cited is imp...

4.6CVSS4.5AI score0.00291EPSS
SaveExploits0References1Affected Software2
Positive Technologies
Positive Technologies
•added 2020/11/03 12:00 a.m.•2 views

PT-2020-15162

Name of the Vulnerable Software and Affected Versions WhatsApp versions prior to 2.20.100 WhatsApp Business versions prior to 2.20.100 Description The issue concerns improper authorization of the Screen Lock feature, which could allow Siri to interact with the WhatsApp application even after the...

4.6CVSS0.00291EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/11/03 12:00 a.m.•7 views

CVE-2020-1908: Improper Authorization

Improper authorization of the Screen Lock feature in WhatsApp and WhatsApp Business for iOS prior to v2.20.100 could have permitted use of Siri to interact with the WhatsApp application even after the phone was locked...

4.6CVSS5.8AI score0.00291EPSS
SaveExploits0References3
OSV
OSV
•added 2020/10/16 5:15 p.m.•12 views

CVE-2020-9946

This issue was addressed with improved checks. This issue is fixed in iOS 14.0 and iPadOS 14.0, watchOS 7.0. The screen lock may not engage after the specified time period...

6.8CVSS5.8AI score0.00307EPSS
SaveExploits0References4
NVD
NVD
•added 2020/10/16 5:15 p.m.•37 views

CVE-2020-9946

This issue was addressed with improved checks. This issue is fixed in iOS 14.0 and iPadOS 14.0, watchOS 7.0. The screen lock may not engage after the specified time period...

6.8CVSS0.00307EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2020/10/16 5:15 p.m.•15 views

CVE-2020-9946

This issue was addressed with improved checks. This issue is fixed in iOS 14.0 and iPadOS 14.0, watchOS 7.0. The screen lock may not engage after the specified time period...

6.8CVSS5.5AI score0.00307EPSS
SaveExploits0References5
CVE
CVE
•added 2020/10/16 4:52 p.m.•96 views

CVE-2020-9946

CVE-2020-9946 affects Apple devices (iOS/iPadOS/watchOS) where the screen lock may not engage after the specified time period. The issue was addressed with improved checks and is fixed in iOS 14.0 / iPadOS 14.0 and watchOS 7.0. The NVD entry notes a local attack vector with low attack complexity ...

6.8CVSS6AI score0.00307EPSS
SaveExploits0References4Affected Software3
Cvelist
Cvelist
•added 2020/10/16 4:52 p.m.•37 views

CVE-2020-9946

This issue was addressed with improved checks. This issue is fixed in iOS 14.0 and iPadOS 14.0, watchOS 7.0. The screen lock may not engage after the specified time period...

6.5AI score0.00307EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2020/10/16 12:00 a.m.•13 views

PT-2020-20888 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 14.0 iPadOS versions prior to 14.0 watchOS versions prior to 7.0 Description: The screen lock may not engage after the specified time period due to an issue that has been addressed with improved checks. Recommendations:...

6.8CVSS7AI score0.00307EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/10/16 12:00 a.m.•3 views

CVE-2020-9946: Improper Locking

This issue was addressed with improved checks. This issue is fixed in iOS 14.0 and iPadOS 14.0, watchOS 7.0. The screen lock may not engage after the specified time period...

6.8CVSS5.8AI score0.00307EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2020/08/26 12:00 a.m.•13 views

The vulnerability of the Fly-wm window manager, related to the disclosure of information, allows attackers to gain access to confidential data.

The vulnerability of the Fly-wm window manager is related to the disclosure of information when both the screen shutdown and the lock mechanism are activated at the same time. Exploiting this vulnerability can allow an attacker to gain access to confidential data...

3.3CVSS5.5AI score
SaveExploits0References1Affected Software1
Prion
Prion
•added 2020/05/14 9:15 p.m.•25 views

Hardcoded credentials

In onKeyguardVisibilityChanged of keystoreservice.cpp, there is a missing permission check. This could lead to local escalation of privilege, allowing apps to use keyguard-bound keys when the screen is locked, with no additional execution privileges needed. User interaction is not needed for...

4.6CVSS8AI score0.00143EPSS
SaveExploits0References1Affected Software1
CNVD
CNVD
•added 2020/03/25 12:00 a.m.•20 views

Unspecified Vulnerability in Samsung Mobile Devices (CNVD-2020-40832)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. Samsung mobile devices have a security vulnerability that can be exploited by attackers to conduct brute force attacks on screen lock passwords...

9.8CVSS6.8AI score0.00404EPSS
SaveExploits0References1
OSV
OSV
•added 2020/03/24 6:15 p.m.•19 views

CVE-2020-10849

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 Exynos7885, Exynos8895, and Exynos9810 chipsets software. The Gatekeeper trustlet allows a brute-force attack on the screen lock password. The Samsung ID is SVE-2019-14575 January 2020...

9.8CVSS7.3AI score0.00404EPSS
SaveExploits0References1
NVD
NVD
•added 2020/03/24 6:15 p.m.•51 views

CVE-2020-10849

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 Exynos7885, Exynos8895, and Exynos9810 chipsets software. The Gatekeeper trustlet allows a brute-force attack on the screen lock password. The Samsung ID is SVE-2019-14575 January 2020...

9.8CVSS9.5AI score0.00404EPSS
SaveExploits0References1
Prion
Prion
•added 2020/03/24 6:15 p.m.•28 views

Design/Logic Flaw

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 Exynos7885, Exynos8895, and Exynos9810 chipsets software. The Gatekeeper trustlet allows a brute-force attack on the screen lock password. The Samsung ID is SVE-2019-14575 January 2020...

5CVSS9.4AI score0.00404EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2020/03/24 5:32 p.m.•70 views

CVE-2020-10849

Technical details (affected components, root cause, impact, or fixes) are not publicly disclosed in the provided documents. Monitor for updates from official sources as additional details may be published later.

9.8CVSS9.3AI score0.00404EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder