CVE-2021-30918: Undefined Security Weakness

A Lock Screen issue was addressed with improved state management. This issue is fixed in iOS 14.8.1 and iPadOS 14.8.1, iOS 15.0.1 and iPadOS 15.0.1. A user may be able to view restricted content from the Lock Screen...

CVE-2021-30956: Undefined Security Weakness

A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue is fixed in iOS 15.2 and iPadOS 15.2. An attacker with physical access to a device may be able to see private contact information...

PT-2021-18981

Name of the Vulnerable Software and Affected Versions iOS versions prior to 15.2 iPadOS versions prior to 15.2 Description The issue allows a person with physical access to an iOS device to access contacts from the lock screen due to inadequate permissions logic. Recommendations For iOS versions...

Apple iOS 和 iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for the iPad tablet computer. A security vulnerability exists in Apple iOS and iPadOS. The vulnerability stems from the fact that a user's...

Apple iOS 信息泄露漏洞

Apple iOS is a set of operating systems developed by Apple Inc. for mobile devices. Apple iOS 15.1 and iPadOS 15.1 previously contained an information disclosure vulnerability that could be exploited by a local attacker to view contacts by locking the screen...

CVE-2021-30932: Undefined Security Weakness

The issue was addressed with improved permissions logic. This issue is fixed in iOS 15.2 and iPadOS 15.2. A person with physical access to an iOS device may be able to access contacts from the lock screen...

Apple iPadOS安全漏洞

Apple iPadOS is a set of operating systems for the iPad tablet computer from the American company Apple Apple. A security vulnerability exists in several Apple products that allows an attacker to view restricted content from the lock screen. The vulnerability is fixed in the following products an...

[SECURITY] Fedora 33 Update: xscreensaver-5.45-2.fc33

A modular screen saver and locker for the X Window System. More than 200 display modes are included in this package. This is a metapackage for installing all default packages related to XScreenSaver...

PT-2021-7016

Name of the Vulnerable Software and Affected Versions Lenovo PCManager versions prior to 4.0.20.10282 Description A denial of service issue was reported that could allow an attacker with local access to trigger a blue screen error. The issue is related to a buffer overflow in memory, which could ...

The vulnerability of the Wine package on the Astra Linux (Orel) operating system relates to the display of external program windows over the Astra Linux (Orel) lock window, allowing a intruder to gain unauthorized access to confidential information.

The vulnerability of the Wine software on the Astra Linux operating system Orel relates to the display of modal windows of third-party programs such as “MediaLog” over the Astra Linux lock screen. Exploiting this vulnerability could allow a malicious individual to gain unauthorized access to...

Mozilla Firefox Resource Management Error Vulnerability (CNVD-2021-90323)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from a Resource Management Error vulnerability, which exists due to improper resource management within the application.The Android version of Firefox may get stuck in full-scre...

CVE-2021-34823

The ON24 ScreenShare aka DesktopScreenShare.app plugin before 2.0 for macOS allows remote file access via its built-in HTTP server. This allows unauthenticated remote users to retrieve files accessible to the logged-on macOS user. When a remote user sends a crafted HTTP request to the server, it...

ALEA-2021:3065 libwacom bug fix and enhancement update

The libwacom packages contain a library that provides access to a tablet model database. The libwacom packages expose the contents of this database to applications, allowing for tablet-specific user interfaces. The libwacom packages allow the GNOME tools to automatically configure screen mappings...

libwacom bug fix and enhancement update

The libwacom packages contain a library that provides access to a tablet model database. The libwacom packages expose the contents of this database to applications, allowing for tablet-specific user interfaces. The libwacom packages allow the GNOME tools to automatically configure screen mappings...

Mozilla Firefox 资源管理错误漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from a Resource Management Error vulnerability, which exists due to improper resource management within the application.The Android version of Firefox may get stuck in full-scre...

PT-2021-3812 · Microsoft · Windows +1

Name of the Vulnerable Software and Affected Versions: Windows Recovery Environment Agent affected versions not specified Microsoft Windows affected versions not specified Description: The vulnerability is related to insufficient access control in the Windows Recovery Environment Agent component ...

Citrix App Layering | Unable to access the packaging VM in Azure portal while adding a version to OS Layer imported from Citrix Hypervisor/VMware base ELM

Issue while adding version to OS Layer, wherein the packaging vm of the OS Layer revision does not allow the Citrix Admin to RDP or ping to it. Cannot RDP nor Ping to this packaging vm and on the boot diagnostics in Azure, we see a black screen...

Privilege Escalation

otrs2 is vulnerable to privilege escalation. The vulnerability exists due to the lack of permission in the bulk action screen...

Writing great alt text: Emotion matters

If you prefer videos to articles, there's an episode of HTTP 203 on this topic. Ok, on with the article… Good alt text means that screen reader users get the same 'meaning' from the page as a fully sighted user. But sometimes that's easier said than done. I recently got stuck trying to figure out...

Citrix Provisioning Services - Target Fails To BDM Boot When Running The Imaging Wizard

When using BDM to boot the Master Target Device to capture a new vDisk it fails to boot. With verbose mode enabled in the bootstrap you will see the Target download the bootstrap and then login to a PVS Server at which point it will sit at a black screen indefinitely...