8751 matches found
CVE-2016-7601
Affected product: iOS before 10.2; Local Authentication logic issue where the idle timer is not honored when the Touch ID prompt is visible. Root cause: idle-timer handling when Touch ID prompt appears, allowing prolonged unlocked state. Impact: a nearby or local user could potentially access thr...
PT-2017-1348
Name of the Vulnerable Software and Affected Versions iOS versions prior to 10.2 Description The issue is related to the Local Authentication component in the iOS operating system, which is associated with security setting errors. Exploitation of this issue may allow a local attacker to compromis...
CVE-2016-7601: Undefined Security Weakness
An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "Local Authentication" component, which does not honor the configured screen-lock time interval if the Touch ID prompt is visible...
GNU Screen 'screen.c' Local Elevation of Privilege Vulnerability
GNU Screen is a set of free software for command line terminal switching. A local elevation of privilege vulnerability exists in GNU Screen. An attacker can exploit the vulnerability to obtain elevated root privileges...
Apple iOS WiFi Security Bypass Vulnerability
Apple iOS is an operating system developed by Apple Inc. for mobile devices. A security vulnerability exists in the WiFi component of Apple iOS, which allows a local attacker to take control of a device that is in an active-locked state and briefly display the home screen...
CVE-2016-6866
slock allows attackers to bypass the screen lock via vectors involving an invalid password hash, which triggers a NULL pointer dereference and crash...
CVE-2016-6866
slock allows attackers to bypass the screen lock via vectors involving an invalid password hash, which triggers a NULL pointer dereference and crash...
CVE-2016-6866
slock allows attackers to bypass the screen lock via vectors involving an invalid password hash, which triggers a NULL pointer dereference and crash...
Null pointer dereference
slock allows attackers to bypass the screen lock via vectors involving an invalid password hash, which triggers a NULL pointer dereference and crash...
UBUNTU-CVE-2016-6866
slock allows attackers to bypass the screen lock via vectors involving an invalid password hash, which triggers a NULL pointer dereference and crash...
DEBIAN-CVE-2016-6866
slock allows attackers to bypass the screen lock via vectors involving an invalid password hash, which triggers a NULL pointer dereference and crash...
CVE-2016-6866
CVE-2016-6866 affects the screen-locker slock. A null pointer dereference can occur when verifying a password for a user with an invalid shadow hash entry, caused by calling crypt(3) and using its return value in strcmp(3) without checking for NULL. This can lead to a crash and potential local im...
CVE-2016-6866
slock allows attackers to bypass the screen lock via vectors involving an invalid password hash, which triggers a NULL pointer dereference and crash...
CVE-2016-6866
slock allows attackers to bypass the screen lock via vectors involving an invalid password hash, which triggers a NULL pointer dereference and crash...
CVE-2016-6866
slock allows attackers to bypass the screen lock via vectors involving an invalid password hash, which triggers a NULL pointer dereference and crash...
CVE-2016-6866
slock allows attackers to bypass the screen lock via vectors involving an invalid password hash, which triggers a NULL pointer dereference and crash...
CVE-2016-6866: NULL Pointer Dereference
slock allows attackers to bypass the screen lock via vectors involving an invalid password hash, which triggers a NULL pointer dereference and crash...
Design/Logic Flaw
The Norwegian Air Shuttle aka norwegian.com airline kiosk allows physically proximate attackers to bypass the intended "Please select booking identification" UI step, and obtain administrative privileges and network access on the underlying Windows OS, by accessing a touch-screen print icon to...
CVE-2017-5634
The Norwegian Air Shuttle aka norwegian.com airline kiosk allows physically proximate attackers to bypass the intended "Please select booking identification" UI step, and obtain administrative privileges and network access on the underlying Windows OS, by accessing a touch-screen print icon to...
CVE-2017-5634
The Norwegian Air Shuttle aka norwegian.com airline kiosk allows physically proximate attackers to bypass the intended "Please select booking identification" UI step, and obtain administrative privileges and network access on the underlying Windows OS, by accessing a touch-screen print icon to...