Lucene search
+L

8752 matches found

CVE
CVE
•added 2015/11/10 4:00 p.m.•108 views

CVE-2015-8025

CVE-2015-8025 affects the xscreensaver component in XScreenSaver prior to 5.34. The issue is a faulty internal consistency check that can let someone with physical access bypass the lock screen by hot-swapping monitors, exploiting a local access scenario. Public advisories describe the impact as ...

2.1CVSS6.2AI score0.00508EPSS
SaveExploits1References10Affected Software1
Mend
Mend
•added 2015/11/10 4:00 p.m.•7 views

CVE-2015-8025

driver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency check, which allows physically proximate attackers to bypass the lock screen by hot swapping monitors...

5.1CVSS0.00508EPSS
SaveExploits1References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/11/10 12:00 a.m.•8 views

CVE-2015-8025: Undefined Security Weakness

driver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency check, which allows physically proximate attackers to bypass the lock screen by hot swapping monitors...

2.1CVSS5.9AI score0.00508EPSS
SaveExploits1References2
NVD
NVD
•added 2015/11/08 10:59 p.m.•39 views

CVE-2015-4928

Apache Ambari before 2.1, as used in IBM Infosphere BigInsights 4.x before 4.1, includes cleartext passwords on a Configs screen, which allows physically proximate attackers to obtain sensitive information by reading password fields...

4.3CVSS6AI score0.02824EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2015/11/08 10:00 p.m.•50 views

CVE-2015-4928

Apache Ambari before 2.1, as used in IBM Infosphere BigInsights 4.x before 4.1, includes cleartext passwords on a Configs screen, which allows physically proximate attackers to obtain sensitive information by reading password fields...

6AI score0.02824EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2015/11/08 12:00 a.m.•8 views

PT-2015-6724

Name of the Vulnerable Software and Affected Versions Apache Ambari versions prior to 2.1 IBM Infosphere BigInsights versions prior to 4.1 Description The issue allows physically proximate attackers to obtain sensitive information by reading password fields on a Configs screen, as cleartext...

4.3CVSS0.02824EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/11/08 12:00 a.m.•9 views

CVE-2015-4928: Exposure of Sensitive Information to an Unauthorized Actor

Apache Ambari before 2.1, as used in IBM Infosphere BigInsights 4.x before 4.1, includes cleartext passwords on a Configs screen, which allows physically proximate attackers to obtain sensitive information by reading password fields...

4.3CVSS5.8AI score0.02824EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2015/11/08 12:00 a.m.•14 views

Mageia: Security Advisory (MGASA-2015-0431)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

2.1CVSS6.5AI score0.00508EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
•added 2015/11/06 12:00 a.m.•13 views

iOS Information Disclosure

The vulnerability of the Notification Center component of the iOS operating system is related to the lack of protection for service data. Exploiting this vulnerability could allow a local attacker to gain access to protected information by viewing notifications of calls and messages displayed on...

2.1CVSS5.5AI score0.00371EPSS
SaveExploits0References3Affected Software1
Fedora
Fedora
•added 2015/11/05 11:27 p.m.•22 views

[SECURITY] Fedora 22 Update: xscreensaver-5.34-1.fc22

A modular screen saver and locker for the X Window System. More than 200 display modes are included in this package. This is a metapackage for installing all default packages related to XScreenSaver...

2.4AI score
SaveExploits0
Mageia
Mageia
•added 2015/11/05 10:46 p.m.•51 views

Updated xscreensaver package fixes security vulnerability

The updated xscreensaver packages fix a security issue when used, in some cases, with dual screen and unplugging one of them...

2.1CVSS6.4AI score0.00508EPSS
SaveExploits1References2
osv_mgasa
osv_mgasa
•added 2015/11/05 10:46 p.m.•24 views

MGASA-2015-0431 Updated xscreensaver package fixes security vulnerability

The updated xscreensaver packages fix a security issue when used, in some cases, with dual screen and unplugging one of them...

2.1CVSS6.2AI score0.00508EPSS
SaveExploits1References3
Fedora
Fedora
•added 2015/11/05 9:50 p.m.•23 views

[SECURITY] Fedora 21 Update: xscreensaver-5.34-1.fc21

A modular screen saver and locker for the X Window System. More than 200 display modes are included in this package. This is a metapackage for installing all default packages related to XScreenSaver...

2.4AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2015/10/30 9:51 a.m.•32 views

CVE-2012-3452

gnome-screensaver 3.4.x before 3.4.4 and 3.5.x before 3.5.4, when multiple screens are used, only locks the screen with the active focus, which allows physically proximate attackers to bypass screen locking and access an unattended workstation...

3.3CVSS7.3AI score0.00338EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2015/10/29 12:00 a.m.•34 views

CVE-2015-8025

driver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency check, which allows physically proximate attackers to bypass the lock screen by hot swapping monitors...

2.1CVSS5.9AI score0.00508EPSS
SaveExploits1References3
CNVD
CNVD
•added 2015/10/29 12:00 a.m.•13 views

Apple iOS Information Disclosure Vulnerability

iOS is an operating system developed by Apple for mobile devices. Apple iOS versions prior to 9.1 mishandled Notification Center by changing the lock screen display settings, allowing local attackers to obtain sensitive information by searching for phone calls or message notifications after the...

2.1CVSS5.9AI score0.00371EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2015/10/29 12:00 a.m.•4 views

PT-2015-2753

Name of the Vulnerable Software and Affected Versions XScreenSaver versions prior to 5.34 Description The issue is related to a lack of proper internal consistency checks in the driver/subprocs.c file of XScreenSaver, allowing physically proximate attackers to bypass the lock screen. This can be...

2.1CVSS0.00508EPSS
SaveExploits1References43
osv_ubuntu
osv_ubuntu
•added 2015/10/29 12:00 a.m.•15 views

UBUNTU-CVE-2015-8025

driver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency check, which allows physically proximate attackers to bypass the lock screen by hot swapping monitors...

2.1CVSS5.8AI score0.00508EPSS
SaveExploits1References4
securityvulns
securityvulns
•added 2015/10/25 12:00 a.m.•231 views

Apple iOS multiple security vulnerabilities

Screen unlock, information disclosure, restrictions bypass, multiple memory corruptions, weak encryption, multiple vulnerabilities in different libraries...

10CVSS1.9AI score0.24739EPSS
SaveExploits12References3Affected Software1
FreeBSD
FreeBSD
•added 2015/10/24 12:00 a.m.•34 views

xscreensaver - lock bypass

RedHat bugzilla reports: In dual screen configurations, unplugging one screen will cause xscreensaver to crash, leaving the screen unlocked...

2.1CVSS6.5AI score0.00508EPSS
SaveExploits1References2
Rows per page
Query Builder