Fair Smart Antivirus 8 filppd.sys Driver Has Denial of Service Vulnerability

Fil Smart Antivirus 8 is an antivirus program from Beijing Fil Shield Technology Co. filppd.sys is a kernel mode driver in Fil Smart Antivirus 8. A denial of service vulnerability exists in the filppd.sys driver in Fair Smart Antivirus 8 V8.1.5.6109 and V8.1.7.6865. An attacker can exploit the...

PT-2018-16501

Name of the Vulnerable Software and Affected Versions iOS versions prior to 11.4 Description The issue involves the Magnifier component, allowing physically proximate attackers to bypass the lock-screen protection mechanism and see the most recent Magnifier image. Recommendations For iOS versions...

PT-2018-16500

Name of the Vulnerable Software and Affected Versions iOS versions prior to 11.4 Description The issue involves the Siri component and allows physically proximate attackers to bypass the lock-screen protection mechanism and enable Siri. Recommendations For iOS versions prior to 11.4, update to...

PT-2018-16507

Name of the Vulnerable Software and Affected Versions iOS versions prior to 11.4 Description The issue involves the Siri component and allows physically proximate attackers to bypass the lock-screen protection mechanism, obtaining private notification content via Siri. Recommendations For iOS...

CVE-2018-4252: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Siri" component. It allows physically proximate attackers to bypass the lock-screen protection mechanism and obtain private notification content via Siri...

CVE-2018-4238: Incorrect Permission Assignment for Critical Resource

An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Siri" component. It allows physically proximate attackers to bypass the lock-screen protection mechanism and enable Siri...

CVE-2018-10198: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in OTRS 6.0.x before 6.0.7. An attacker who is logged into OTRS as a customer can use the ticket overview screen to disclose internal article information of their customer tickets...

Social Media Privacy Dominates Apple iOS 12, macOS Launches

Social media privacy is top of mind for Apple on the heels of the Facebook-Cambridge Analytica controversy. On Monday, Apple released the latest versions of its desktop and mobile operating systems at the Worldwide Developers Conference WWDC, which addresses a bevy of security and privacy concern...

Apple iOS Siri Permissions Vulnerability (CNVD-2018-12172)

Apple iOS is an operating system developed by Apple Inc. for mobile devices, of which Siri is a voice control component. A security vulnerability exists in the Siri component of Apple iOS prior to version 11.4. An attacker in close physical proximity could use Siri to bypass the lock screen...

Apple iOS Siri Permissions Vulnerability

Apple iOS is an operating system developed by Apple Inc. for mobile devices, of which Siri is a voice control component. A security vulnerability exists in the Siri component in Apple iOS versions prior to 11.4. An attacker in close physical proximity could exploit this vulnerability to bypass th...

Apple iOS Magnifier Permission Vulnerability

Apple iOS is an operating system developed by Apple for mobile devices, and Magnifier is one of the screen magnification components. A security vulnerability exists in the Magnifier component in Apple iOS versions prior to 11.4. An attacker in close physical proximity could exploit this...

Microsoft Windows: Interactive logon: Machine inactivity limit

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winilmachineinactivitylimit.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for Interactive logon: Machine inactivity limit Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Input validation

An issue was discovered in Joomla! Core before 3.8.8. The web install application would autofill password fields after either a form validation error or navigating to a previous install step, and display the plaintext password for the administrator account at the confirmation screen...

Cybozu Mailwise Cross-Site Scripting Vulnerability

Cybozu Mailwise is a Web-based e-mail system from Cybozu, and E-mail Details Screen is one of the components for viewing e-mail details. A cross-site scripting vulnerability exists in E-mail Details Screen in Cybozu Mailwise versions 5.0.0 through 5.4.1. A remote attacker can use this vulnerabili...

2345 Security Guard 3.7 2345NsProtect.sys Denial Of Service

Exploit Title: BSOD by IOCTL 0x8000200D in 2345NsProtect.sys of 2345 Security Guard 3.7 Date: 20180513 Exploit Author: anhkgg Vendor Homepage: http://safe.2345.cc/ Software Link: http://dl.2345.cc/2345pcsafe/2345pcsafev3.7.0.9345.exe Version: v3.7 REQUIRED Tested on: Windows X64 CVE : CVE-2018-...

CVE-2018-11035

In 2345 Security Guard 3.7, the driver file 2345NsProtect.sys, X64 version allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCTL 0x80002019...

2345 Security Guard Denial of Service Vulnerability (CNVD-2018-10962)

2345 Security Guard is a set of computer security protection software from China's 2345 Corporation. A denial of service vulnerability exists in the driver file 2345NsProtect.sys, version X64 in 2345 Security Guard 3.7. The vulnerability arises due to an unvalidated input value from IOCTL...

IIJ SmartKey App for Android vulnerable to authentication bypass

Overview IIJ SmartKey App for Android contains an authentication bypass vulnerability. IIJ SmartKey App for Android provided by Internet Initiative Japan Inc. is an application that enables two-step authentication two-factor authentication for a website from an Android device. IIJ SmartKey App fo...

2345 Security Guard Denial of Service Vulnerability (CNVD-2018-09485)

2345 Security Guard is a set of computer security protection software from China's 2345 Corporation. A denial of service vulnerability exists in the driver file 2345BdPcSafe.sys, version X64 in 2345 Security Guard 3.7. The vulnerability arises due to an unvalidated input value from IOCTL...

JVN#27137002: IIJ SmartKey App for Android vulnerable to authentication bypass

IIJ SmartKey App for Android provided by Internet Initiative Japan Inc. is an application that enables two-step authentication two-factor authentication for a website from an Android device. IIJ SmartKey App for Android contains an authentication bypass vulnerability CWE-287. Impact An attacker m...