CVE-2016-7601

An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "Local Authentication" component, which does not honor the configured screen-lock time interval if the Touch ID prompt is visible...

CVE-2016-7601

An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "Local Authentication" component, which does not honor the configured screen-lock time interval if the Touch ID prompt is visible...

CVE-2016-7601

Affected product: iOS before 10.2; Local Authentication logic issue where the idle timer is not honored when the Touch ID prompt is visible. Root cause: idle-timer handling when Touch ID prompt appears, allowing prolonged unlocked state. Impact: a nearby or local user could potentially access thr...

Huawei Smart Phones Local Authentication Bypass Vulnerability

Huawei Nice is a smartphone from the Chinese company Huawei Huawei. A local authentication bypass vulnerability exists in Huawei Smart Phones. An attacker can flash or restore the phone to factory settings by following certain steps. Due to the lack of authentication in the "phone recovery"...

The vulnerability of the embedded software of the programmable logic controller OVEEN PLK110 allows a perpetrator to gain access without entering a password.

The vulnerability of the embedded software of the OVEEN PLK110 programmable logic controller is related to the resetting of the set password level when power is disconnected. Exploiting this vulnerability allows an intruder, operating locally, to authenticate without entering a password, due to t...

Local Authentication Bypass Vulnerability in Multiple McAfee Products

McAfee SIEM Enterprise Security Manager and SIEM Event Receiver are both products of McAfee, Inc. McAfee SIEM Enterprise Security Manager provides intelligent, fast, and accurate security and information SIEM and log management. SIEM Event Receiver collects third-party events and logs and...

Apple iOS < 10.2 Multiple Vulnerabilities

Binary data 9847.prm...

Apple iOS < 10.2 Multiple Vulnerabilities

Binary data appleios102check.nbin...

AIX 7.1 TL 4 : lsmcode (IV88007)

https://vulners.com/cve/CVE-2016-3053 IBM AIX contains an unspecified vulnerability that would allow a locally authenticated user to obtain root level privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory...

ZKTeco ZKBioSecurity 3.0 - (visLogin. jsp) Local Authentication bypass

No description provided by source...

ZKTeco ZKBioSecurity 3.0 - (visLogin.jsp) Local Authentication Bypass

Exploit for jsp platform in category web applications ZKTeco ZKBioSecurity 3.0 visLogin.jsp Local Authorization Bypass Vendor: ZKTeco Inc. | Xiamen ZKTeco Biometric Identification Technology Co.,ltd Product web page: http://www.zkteco.com Affected version: 3.0.1.0R230 Platform: 3.0.1.0R230...

The vulnerability of Cisco Adaptive Security Appliance’s microprogramming software allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of Cisco Adaptive Security Appliance’s microprogramming software is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor, who operates locally and has completed the authentication process, to cause service failures or execute arbitrary code by enteri...

Juniper Junos Local Authentication Bypass Vulnerability

Juniper Junos is a network operating system dedicated to the company's hardware systems. A security vulnerability exists in Juniper Junos that could be exploited by a local attacker to submit a special request to bypass the authentication mechanism and perform an unauthorized operation...

The vulnerability of Cisco Nexus 7000 software allows a malicious individual to increase their privileges.

The vulnerability in Cisco NX-OS devices of the Nexus 7000 series – where multiple virtual device contexts VDC are enabled, along with local authentication – allows remote users who have passed authentication to elevate their privileges within an unplanned VDC environment, by using SSH sessions a...

HP Support Assistant < 8.1.52.1 Unspecified Local Authentication Bypass

The version of HP Support Assistant installed on the remote Windows host is prior to 8.1.52.1. It is, therefore, affected by an unspecified flaw that allows an attacker to bypass local authentication. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid90545;...

Alcatel Lucent Home Device Manager Cross Site Scripting

Document Title: =============== Alcatel Lucent Home Device Manager - Management Console Multiple XSS CVE-Number: =========== CVE-2015-8687 Release Date: ============= 03 Jan 2016 Abstract Advisory Information: ============================= Ugur Cihan Koc discovered ten Reflected XSS vulnerabiliti...

EMC RSA SecurID Web Agent Local Authentication Bypass Vulnerability

EMC RSA SecurID Web Agent is a cross-platform, Web-based solution from EMC that intercepts remote user access or user group local requests and directs them to the RSA Authentication Management Server for authentication. A local authentication bypass vulnerability exists in EMC RSA SecurID Web Age...

LXDM 'X Server' Local Authentication Bypass Vulnerability

LXDM is a lightweight display manager product for the LXDE desktop environment. A local authentication bypass vulnerability exists in LXDM. An attacker could use this vulnerability to bypass security restrictions and perform unauthorized operations...

SOL16686 - Point-to-Point Protocol (PPP) vulnerability CVE-2015-3310

Vulnerability Recommended Actions If the previous table lists a version in the Versions known to be not vulnerable column, you can eliminate this vulnerability by upgrading to the listed version. If the listed version is older than the version you are currently running, or if the table does not...

usb-creator local authentication bypass vulnerability

usb-creator is a set of tools for creating USB boot disks. A local authentication bypass vulnerability exists in usb-creator, which allows local attackers to bypass security restrictions and elevate privileges...