CVE-2017-3745

In Lenovo XClarity Administrator LXCA before 1.3.0, if service data is downloaded from LXCA, a non-administrative user may have access to password information for users that have previously authenticated to the LXCA's internal LDAP server, including administrative accounts and service accounts wi...

PT-2017-16079

Name of the Vulnerable Software and Affected Versions Lenovo XClarity Administrator versions prior to 1.3.0 Description The issue allows non-administrative users to access password information for previously authenticated users, including administrative and service accounts with administrative...

CVE-2017-0245

The kernel-mode drivers in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1 and Windows Server 2012 Gold allow a local authenticated attacker to execute a specially crafted application to obtain kernel information, aka "Win32k Information Disclosure Vulnerability."...

Buffalo WNC01WH Command Injection Vulnerability

Buffalo WNC01WH is a network camera from the Buffalo Group of Japan. A command injection vulnerability exists in the Buffalo WNC01WH. This allows a locally authenticated attacker to perform a command injection attack...

Privilege Escalation Flaw Patched in Schneider Wonderware

Data analysis and visualization software deployed inside a larger operational intelligence software sold by Schneider Electric has been patched against a critical privilege escalation vulnerability. The vulnerability was discovered in-house by Schneider Electric engineers in the Tableau...

The vulnerability of the iOS operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Local Authentication component in the iOS operating system is related to security configuration errors. Exploiting this vulnerability can allow an attacker, operating locally, to compromise the confidentiality, integrity, and accessibility of protected information by...

CVE-2017-5178

An issue was discovered in Schneider Electric Tableau Server/Desktop Versions 7.0 to 10.1.3 in Wonderware Intelligence Versions 2014R3 and prior. These versions contain a system account that is installed by default. The default system account is difficult to configure with non-default credentials...

Default credentials

An issue was discovered in Schneider Electric Tableau Server/Desktop Versions 7.0 to 10.1.3 in Wonderware Intelligence Versions 2014R3 and prior. These versions contain a system account that is installed by default. The default system account is difficult to configure with non-default credentials...

CVE-2017-5178

An issue was discovered in Schneider Electric Tableau Server/Desktop Versions 7.0 to 10.1.3 in Wonderware Intelligence Versions 2014R3 and prior. These versions contain a system account that is installed by default. The default system account is difficult to configure with non-default credentials...

CVE-2017-5178

An issue was discovered in Schneider Electric Tableau Server/Desktop Versions 7.0 to 10.1.3 in Wonderware Intelligence Versions 2014R3 and prior. These versions contain a system account that is installed by default. The default system account is difficult to configure with non-default credentials...

CVE-2017-5178: Initialization of a Resource with an Insecure Default

An issue was discovered in Schneider Electric Tableau Server/Desktop Versions 7.0 to 10.1.3 in Wonderware Intelligence Versions 2014R3 and prior. These versions contain a system account that is installed by default. The default system account is difficult to configure with non-default credentials...

PT-2017-3179

Name of the Vulnerable Software and Affected Versions Tableau Server versions 7.0 through 10.1.3 Tableau Desktop versions 7.0 through 10.1.3 Wonderware Intelligence versions prior to 2014R3 Description The issue is related to the use of a pre-installed account in the affected software. This could...

CVE-2016-7601

An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "Local Authentication" component, which does not honor the configured screen-lock time interval if the Touch ID prompt is visible...

CVE-2016-7601

An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "Local Authentication" component, which does not honor the configured screen-lock time interval if the Touch ID prompt is visible...

CVE-2016-7601

An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "Local Authentication" component, which does not honor the configured screen-lock time interval if the Touch ID prompt is visible...

CVE-2016-7601

Affected product: iOS before 10.2; Local Authentication logic issue where the idle timer is not honored when the Touch ID prompt is visible. Root cause: idle-timer handling when Touch ID prompt appears, allowing prolonged unlocked state. Impact: a nearby or local user could potentially access thr...

CVE-2016-7601: Undefined Security Weakness

An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "Local Authentication" component, which does not honor the configured screen-lock time interval if the Touch ID prompt is visible...

PT-2017-1348

Name of the Vulnerable Software and Affected Versions iOS versions prior to 10.2 Description The issue is related to the Local Authentication component in the iOS operating system, which is associated with security setting errors. Exploitation of this issue may allow a local attacker to compromis...

Huawei Smart Phones Local Authentication Bypass Vulnerability

Huawei Nice is a smartphone from the Chinese company Huawei Huawei. A local authentication bypass vulnerability exists in Huawei Smart Phones. An attacker can flash or restore the phone to factory settings by following certain steps. Due to the lack of authentication in the "phone recovery"...

The vulnerability of the embedded software of the programmable logic controller OVEEN PLK110 allows a perpetrator to gain access without entering a password.

The vulnerability of the embedded software of the OVEEN PLK110 programmable logic controller is related to the resetting of the set password level when power is disconnected. Exploiting this vulnerability allows an intruder, operating locally, to authenticate without entering a password, due to t...