CVE-2024-27835: Improper Authentication

This issue was addressed through improved state management. This issue is fixed in iOS 17.5 and iPadOS 17.5. An attacker with physical access to an iOS device may be able to access notes from the lock screen...

CVE-2024-27803: Improper Access Control

A permissions issue was addressed with improved validation. This issue is fixed in iOS 17.5 and iPadOS 17.5. An attacker with physical access may be able to share items from the lock screen...

CVE-2024-4776: Improper Neutralization of Input During Web Page Generation

A file dialog shown while in full-screen mode could have resulted in the window remaining disabled. This vulnerability affects Firefox 126...

Mozilla Firefox < 126.0

The version of Firefox installed on the remote Windows host is prior to 126.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2024-21 advisory. - Memory safety bugs present in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10. Some of these bugs showed...

CVE-2024-27835

This issue was addressed through improved state management. This issue is fixed in iOS 17.5 and iPadOS 17.5. An attacker with physical access to an iOS device may be able to access notes from the lock screen...

CVE-2024-27835

CVE-2024-27835 affects Apple iOS and iPadOS where notes could be accessed from the lock screen due to a state-management issue in the Notes component. Root cause: improved state management in the affected UI path. Impact: local attacker with physical access could view notes on a locked device. Re...

CVE-2024-27803

A permissions issue was addressed with improved validation. This issue is fixed in iOS 17.5 and iPadOS 17.5. An attacker with physical access may be able to share items from the lock screen...

PT-2024-4837 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 17.5 iPadOS versions prior to 17.5 Description: The issue is related to a permissions problem in the Screenshots component of iPadOS and iOS, which is connected to errors in security settings. An attacker with physical...

Apple iOS 和 iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for the iPad tablet computer. Apple iOS and iPadOS contain a security vulnerability. An attacker could use this vulnerability to share items...

PT-2024-4832 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 17.5 iPadOS versions prior to 17.5 Description: The issue allows an attacker with physical access to potentially access contacts from the lock screen due to a lack of protection for certain data. This is related to the...

PT-2024-4836 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 17.5 iPadOS versions prior to 17.5 Description: The issue is related to errors in security settings of the Notes component in iOS and iPadOS, allowing an attacker with physical access to the device to potentially access...

Apple iOS 和 iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for the iPad tablet computer. Apple iOS and iPadOS contain a security vulnerability. An attacker could use this vulnerability to access note...

macOS 13.x < 13.6.7 Multiple Vulnerabilities (HT214107)

The remote host is running a version of macOS / Mac OS X that is 13.x prior to 13.6.7. It is, therefore, affected by multiple vulnerabilities: - A logic issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14.1. An attacker with knowledge of a standard user's...

RHEL 6 : screen (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - screen: crash when processing combining chars CVE-2021-26937 - socket.c in GNU Screen through 4.9.0, when...

RHEL 7 : screen (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - screen: allows sending SIGHUP to arbitrary PIDs CVE-2023-24626 Note that Nessus has not tested for this issue but h...

RHEL 6 : gdm (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - gdm: lock screen bypass when timed login is enabled CVE-2019-3825 - gdm: inability to timely contact...

EulerOS 2.0 SP10 : xorg-x11-server (EulerOS-SA-2024-1582)

According to the versions of the xorg-x11-server package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in X.Org Server Overlay Window. A Use-After-Free may lead to local privilege escalation. If a client explicitly destroy...

CVE-2024-20855

Improper access control vulnerability in multitasking framework prior to SMR May-2024 Release 1 allows physical attackers to access unlocked screen for a while...

CVE-2024-20855

The vulnerability CVE-2024-20855 affects the multitasking framework (Samsung Mobile devices) with improper access control. Versions prior to SMR May-2024 Release 1 allow physical attackers to access an unlocked screen for a period of time. Remediation: update to SMR May-2024 Release 1 or later. N...

PT-2024-18765 · Unknown · Multitasking Framework

Name of the Vulnerable Software and Affected Versions: multitasking framework versions prior to SMR May-2024 Release 1 Description: The issue is related to improper access control in the multitasking framework, allowing physical attackers to access an unlocked screen for a period of time...