CVE-2016-6866

slock allows attackers to bypass the screen lock via vectors involving an invalid password hash, which triggers a NULL pointer dereference and crash...

CVE-2016-6866

slock allows attackers to bypass the screen lock via vectors involving an invalid password hash, which triggers a NULL pointer dereference and crash...

CVE-2016-6866

CVE-2016-6866 affects the screen-locker slock. A null pointer dereference can occur when verifying a password for a user with an invalid shadow hash entry, caused by calling crypt(3) and using its return value in strcmp(3) without checking for NULL. This can lead to a crash and potential local im...

CVE-2016-6866

slock allows attackers to bypass the screen lock via vectors involving an invalid password hash, which triggers a NULL pointer dereference and crash...

CVE-2016-6866

slock allows attackers to bypass the screen lock via vectors involving an invalid password hash, which triggers a NULL pointer dereference and crash...

Code injection

Turning all screens off in Plasma-workspace and kscreenlocker while the lock screen is shown can result in the screen being unlocked when turning a screen on again...

CVE-2016-1000002

gdm3 3.14.2 and possibly later has an information leak before screen lock...

The vulnerability of the Android operating system, which allows a hacker to change the screen lock password

The vulnerability of the server/LockSettingsService.java script of the LockSettingsService component in the Android operating system is related to errors in managing registration data. Exploiting this vulnerability could allow a malicious actor, operating locally, to change the screen lock passwo...

CVE-2016-3749

server/LockSettingsService.java in LockSettingsService in Android 6.x before 2016-07-01 allows attackers to modify the screen-lock password or pattern via a crafted application, aka internal bug 28163930...

CVE-2016-3749

server/LockSettingsService.java in LockSettingsService in Android 6.x before 2016-07-01 allows attackers to modify the screen-lock password or pattern via a crafted application, aka internal bug 28163930...

Default credentials

server/LockSettingsService.java in LockSettingsService in Android 6.x before 2016-07-01 allows attackers to modify the screen-lock password or pattern via a crafted application, aka internal bug 28163930...

CVE-2016-3749

server/LockSettingsService.java in LockSettingsService in Android 6.x before 2016-07-01 allows attackers to modify the screen-lock password or pattern via a crafted application, aka internal bug 28163930...

CVE-2016-3749

The CVE affects Android 6.x (LockSettingsService) where server/LockSettingsService.java could be manipulated by a crafted application to change the screen-lock password or pattern. The root cause is an internal bug (28163930) in LockSettingsService that allows a local attacker to bypass user inte...

The vulnerability of the Mac OS X operating system allows a hacker to bypass password expiration.

The vulnerability of the Screen Lock function in the Mac OS X operating system exists due to improper handling of user profile passwords. Exploiting this vulnerability can allow an intruder acting locally to reset passwords that have expired...

Apple OS X El Capitan Screen Lock Security Bypass Vulnerability

Apple OS X El Capitan is an operating system on Apple devices. An unspecified security vulnerability exists in Apple OS X El Capitan Screen Lock, which can be exploited by a local attacker to reset expired passwords in the locked screen state...

CVE-2016-1851

The Screen Lock feature in Apple OS X before 10.11.5 mishandles password profiles, which allows physically proximate attackers to reset expired passwords in the lock-screen state via unspecified vectors...

CVE-2016-1851

The Screen Lock feature in Apple OS X before 10.11.5 mishandles password profiles, which allows physically proximate attackers to reset expired passwords in the lock-screen state via unspecified vectors...

Design/Logic Flaw

The Screen Lock feature in Apple OS X before 10.11.5 mishandles password profiles, which allows physically proximate attackers to reset expired passwords in the lock-screen state via unspecified vectors...

CVE-2016-1851

CVE-2016-1851 affects macOS OS X El Capitan v10.11.0–10.11.4 and later; the Screen Lock feature mishandles password profiles, enabling a physically proximate local attacker to reset expired passwords from the lock screen via unspecified vectors. Impacted component: Screen Lock handling of passwor...

CVE-2016-1851

The Screen Lock feature in Apple OS X before 10.11.5 mishandles password profiles, which allows physically proximate attackers to reset expired passwords in the lock-screen state via unspecified vectors...