8752 matches found
Cisco Jabber for Windows STARTTLS Downgrade Vulnerability
Cisco Jabber for Windows is a unified communications, collaborative work application. A security vulnerability exists in the Send Screen Capture feature of Cisco Jabber for Windows. An attacker could exploit the vulnerability to cause a client to establish an XMPP connection in plain text...
CVE-2015-6851
EMC RSA SecurID Web Agent before 8.0 allows physically proximate attackers to bypass the privacy-screen protection mechanism by leveraging an unattended workstation and running DOM Inspector...
Code injection
EMC RSA SecurID Web Agent before 8.0 allows physically proximate attackers to bypass the privacy-screen protection mechanism by leveraging an unattended workstation and running DOM Inspector...
CVE-2015-6851
EMC RSA SecurID Web Agent before 8.0 allows physically proximate attackers to bypass the privacy-screen protection mechanism by leveraging an unattended workstation and running DOM Inspector...
CVE-2015-6851
MODE C: CVE-2015-6851 affects EMC RSA SecurID Web Agent before 8.0. The vulnerability enables physically proximate attackers to bypass the privacy-screen by using an unattended workstation and running DOM Inspector. The available sources (NVD and CNVD variants) describe a local access path leadin...
PT-2015-7391
Name of the Vulnerable Software and Affected Versions EMC RSA SecurID Web Agent versions prior to 8.0 Description The issue allows physically proximate attackers to bypass the privacy-screen protection mechanism. This can be achieved by leveraging an unattended workstation and utilizing the DOM...
CVE-2015-6851: Improper Access Control
EMC RSA SecurID Web Agent before 8.0 allows physically proximate attackers to bypass the privacy-screen protection mechanism by leveraging an unattended workstation and running DOM Inspector...
How to Turn Any Non-Touch Screen PC Into a Touch Screen
Want to buy a touch-screen laptop but couldn't afford it? But what if I told you that you can turn your existing non-touch-screen laptop into a Touch Screen laptop? Yes, it's possible. You can now convert your laptop or PC into a touch screen with the help of a new device called AirBar. Touch...
HackerOne: Know whether private program for company exist or not
HI, There are some company which are hosting private BB on HackerOne which are not visible unless they invite you. However, you can check if any company is hosting private BB on HackerOne or not if you can guess the username they use. Generally most company chooses the same name as their company...
Amazon Linux AMI : tigervnc (ALAS-2015-623)
An integer overflow flaw, leading to a heap-based buffer overflow, was found in the way TigerVNC handled screen sizes. A malicious VNC server could use this flaw to cause a client to crash or, potentially, execute arbitrary code on the client. A NULL pointer dereference flaw was found in TigerVNC...
GNOME Display Manager Screen Lock Bypass
The vulnerability of the GNOME Display Manager’s graphical interface on the Fedora operating system is related to deficiencies in access control for files. Exploiting this vulnerability could allow a malicious individual to bypass the screen lock by pressing the Escape key...
Ubuntu Screen Lock Bypass
The vulnerability of the driver/subprocs.c file of the XScreenSaver component in the Ubuntu operating system is related to deficiencies in access control for certain functions. Exploiting this vulnerability could allow a malicious individual to bypass screen lockouts by reconnecting the monitors...
CVE-2015-7080
Siri in Apple iOS before 9.2 allows physically proximate attackers to bypass an intended client-side protection mechanism and obtain sensitive content-notification information by listening to a device in the lock-screen state...
CVE-2015-7080
Siri in Apple iOS before 9.2 allows physically proximate attackers to bypass an intended client-side protection mechanism and obtain sensitive content-notification information by listening to a device in the lock-screen state...
CVE-2015-7080
CVE-2015-7080 affects Apple iOS prior to 9.2, where Siri can be abused by physically proximate attackers to bypass a client-side protection and access sensitive notification content by listening on a lock-screen device. The issue is described as a lock-screen bypass via Siri, enabling exposure of...
PT-2015-3131
Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.2 Description The issue is related to a lack of protection for certain system data in the iOS operating system. It allows a local attacker to bypass existing local access restrictions and gain access to notificati...
CVE-2015-7080: Exposure of Sensitive Information to an Unauthorized Actor
Siri in Apple iOS before 9.2 allows physically proximate attackers to bypass an intended client-side protection mechanism and obtain sensitive content-notification information by listening to a device in the lock-screen state...
User Picker Custom field HTML tags showing when creating new issues
h3. Summary Customer reported that when creating custom field User Picker and added html tags in description field, text link shows correctly in Custom Field screen under Administration Setting. However when creating new issues, the create issue form for User Picker field shows the HTML code not...
