CVE-2024-58046

Permission management vulnerability in the lock screen module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-58046

Huawei HarmonyOS 的锁屏模块存在权限管理漏洞，可能被利用来泄露信息引发保密性影响。该 CVE 在多份来源中存在报告（NVD、Red Hat、CNVD、CNNVD、CIRCL 等），但连接文档未给出具体技术细节、受影响版本、漏洞原因或修复办法。未提供利用细节或现成的缓解方案，请关注后续更新。

CVE-2024-58046: Incorrect Default Permissions

Permission management vulnerability in the lock screen module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

Linux Distros Unpatched Vulnerability : CVE-2015-6806

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The MScrollV function in ansi.c in GNU screen 4.3.1 and earlier does not properly limit recursion, which allows remote attackers to cause a denial of service...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A privilege management vulnerability exists in the Huawei HarmonyOS lock screen module, which can be exploited by an attacker to compromise confidentiality...

Linux Distros Unpatched Vulnerability : CVE-2006-7240

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gnome-power-manager 2.14.0 does not properly implement the lockonsuspend and lockonhibernate settings for locking the screen when the suspend or hibernate butto...

PT-2025-9107 · Nvda · Nvda

Name of the Vulnerable Software and Affected Versions: NVDA versions 2024.4.1 through 2024.4.2 Description: A vulnerability in the remote connection complements of NVDA allows an attacker to obtain total control of the remote system when guessing a weak password. The problem occurs because the...

February 25, 2025—KB5052093 (OS Build 26100.3323) Preview

None None...

February 25, 2025—KB5052094 (OS Builds 22621.4974 and 22631.4974) Preview

None None...

Medium: libglvnd

Issue Overview: libglxproto.c in OpenGL libglvnd bb06db5a was discovered to contain a segmentation violation via the function glXGetDrawableScreen. NOTE: this is disputed because there are no common situations in which users require uninterrupted operation with an attacker-controller server...

"RoboForm Password Manager" App for Android vulnerable to authentication bypass using an alternate path or channel

Overview "RoboForm Password Manager" App for Android provided by Siber Systems, Inc. is vulnerable to authentication bypass using an alternate path or channel CWE-288. Johan Francsics reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer. Impact An attacker with acces...

CVE-2025-26603 heap-use-after-free in function str_to_reg in vim/vim

Vim is a greatly improved version of the good old UNIX editor Vi. Vim allows to redirect screen messages using the :redir ex command to register, variables and files. It also allows to show the contents of registers using the :registers or :display ex command. When redirecting the output of...

CVE-2025-26700

Authentication bypass using an alternate path or channel issue exists in ”RoboForm Password Manager" App for Android versions prior to 9.7.4, which may allow an attacker with access to a device where the application is installed to bypass the lock screen and obtain sensitive information...

CVE-2025-26700

The CVE-2025-26700 entry relates to RoboForm Password Manager for Android, where versions older than 9.7.4 are vulnerable to an authentication bypass via an alternate path or channel. The core impact is that an attacker with physical access to a device could bypass the app’s lock screen and acces...

Siber Systems RoboForm Password Manager 安全漏洞

Siber Systems RoboForm Password Manager is a password manager from Siber Systems. A security vulnerability exists in Siber Systems RoboForm Password Manager versions prior to 9.7.4, which stems from an authentication bypass path issue that could allow an attacker to bypass the lock screen to obta...

PT-2025-7220 · Unknown · Roboform Password Manager

Name of the Vulnerable Software and Affected Versions: RoboForm Password Manager versions prior to 9.7.4 Description: An authentication bypass issue exists, which may allow an attacker with access to a device where the application is installed to bypass the lock screen and obtain sensitive...

CVE-2025-26700: Authentication Bypass Using an Alternate Path or Channel

Authentication bypass using an alternate path or channel issue exists in ”RoboForm Password Manager" App for Android versions prior to 9.7.4, which may allow an attacker with access to a device where the application is installed to bypass the lock screen and obtain sensitive information...

CVE-2024-36052

RARLAB WinRAR before 7.00, on Windows, allows attackers to spoof the screen output via ANSI escape sequences, a different issue than CVE-2024-33899...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: PSR-SU should also be disabled for Parade 08-01 TCON. Stuart Hayhurst has found that both during bootup and when the fullscreen VA-API video mode is used, black screens occur for about 1 second, and a kernel...

Astra Linux – Vulnerability in screen

The socket.c file in GNU Screen, as of version 4.9.0, can be executed with the setuid or setgid flags the default on platforms like Arch Linux and FreeBSD. This allows local users to send a privileged SIGHUP signal to any process ID, potentially causing a denial of service or disrupting the targe...