8752 matches found
Default credentials
server/LockSettingsService.java in LockSettingsService in Android 6.x before 2016-07-01 allows attackers to modify the screen-lock password or pattern via a crafted application, aka internal bug 28163930...
CVE-2016-3749
The CVE affects Android 6.x (LockSettingsService) where server/LockSettingsService.java could be manipulated by a crafted application to change the screen-lock password or pattern. The root cause is an internal bug (28163930) in LockSettingsService that allows a local attacker to bypass user inte...
CVE-2016-3749
server/LockSettingsService.java in LockSettingsService in Android 6.x before 2016-07-01 allows attackers to modify the screen-lock password or pattern via a crafted application, aka internal bug 28163930...
PT-2016-2470
Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-07-01 Description The issue is related to errors in handling registration data in the LockSettingsService component. It allows attackers to modify the screen-lock password or pattern via a crafted application. Th...
Debian GNU/Linux Remote Compromise Protected Information
Multiple vulnerabilities exist in the screen package of the Debian GNU/Linux operating system. Exploitation of these vulnerabilities may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
Windows Data Compromise
The vulnerability in the screen keyboard allows for locally increasing the level of privileges...
Microsoft Windows 7 - win32k Bitmap Use-After-Free (MS16-062) (1)
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=746 The attached PoC triggers a blue screen on Windows 7 with special pool enabled on win32k.sys . A reference to the bitmap object still exists in the device context after it has been deleted. Proof of Concept:...
ETX-R vulnerable to cross-site request forgery
Overview ETX-R provided by I-O DATA DEVICE, INC. is a wired LAN router. ETX-R contains a cross-site request forgery vulnerability CWE-352. Junichi MURAKAMI of FFRI, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...
JVN#61317238: ETX-R vulnerable to cross-site request forgery
ETX-R provided by I-O DATA DEVICE, INC. is a wired LAN router. ETX-R contains a cross-site request forgery vulnerability CWE-352. Impact If a user views a malicious page while logged in, unintended operations may be performed. Solution Apply a Workaround The following workarounds may mitigate the...
June 14, 2016 — KB3163017 (OS Build 10240.16942)
None None...
Mac OS X Password Expiration Bypass
The vulnerability of the Screen Lock function in the Mac OS X operating system exists due to improper handling of user profile passwords. Exploiting this vulnerability can allow an intruder acting locally to reset passwords that have expired...
iOS Info Disclosure
The vulnerability of the Siri component of the iOS operating system relates to the absence of data detector blocking during screen lock states. Exploiting this vulnerability could allow a local attacker to gain access to protected information such as contact lists and photos...
Micro Focus Rumba+ 9.4 - Multiple Stack Buffer Overflow Vulnerabilities
Micro Focus Rumba+ 9.4 - Multiple Stack Buffer Overflow Vulnerabilities Micro Focus Rumba+ v9.4 Multiple Stack Buffer Overflow Vulnerabilities Vendor: Micro Focus Product web page: https://www.microfocus.com Affected version: 9.4.4058.0 and 9.4.0 SP0 Patch0 Affected products/tools : Rumba Desktop...
Micro Focus Rumba+ 9.4 - Multiple Stack Buffer Overflow Vulnerabilities
Micro Focus Rumba+ v9.4 Multiple Stack Buffer Overflow Vulnerabilities Vendor: Micro Focus Product web page: https://www.microfocus.com Affected version: 9.4.4058.0 and 9.4.0 SP0 Patch0 Affected products/tools : Rumba Desktop 9.4 Rumba 9.4 Trace Rumba 9.4 APPC Configuration Rumba 9.4 AS400...
Apple OS X El Capitan Screen Lock Security Bypass Vulnerability
Apple OS X El Capitan is an operating system on Apple devices. An unspecified security vulnerability exists in Apple OS X El Capitan Screen Lock, which can be exploited by a local attacker to reset expired passwords in the locked screen state...
CVE-2016-1852
Siri in Apple iOS before 9.3.2 does not block data detectors within results in the lock-screen state, which allows physically proximate attackers to obtain sensitive contact and photo information via unspecified vectors...
CVE-2016-1851
The Screen Lock feature in Apple OS X before 10.11.5 mishandles password profiles, which allows physically proximate attackers to reset expired passwords in the lock-screen state via unspecified vectors...
CVE-2016-1851
The Screen Lock feature in Apple OS X before 10.11.5 mishandles password profiles, which allows physically proximate attackers to reset expired passwords in the lock-screen state via unspecified vectors...
Information disclosure
Siri in Apple iOS before 9.3.2 does not block data detectors within results in the lock-screen state, which allows physically proximate attackers to obtain sensitive contact and photo information via unspecified vectors...
Design/Logic Flaw
The Screen Lock feature in Apple OS X before 10.11.5 mishandles password profiles, which allows physically proximate attackers to reset expired passwords in the lock-screen state via unspecified vectors...