CVE-2014-1351

CVE-2014-1351 affects Apple iOS prior to 7.1.2. On the lock screen, a Siri request that references a contact ambiguously could cause Siri to display a contact list without the passcode, bypassing the lock-screen requirement and exposing contacts. Root cause: Siri on the lock screen can reveal the...

CVE-2014-1353

CVE-2014-1353 is an Apple iOS lock-screen vulnerability affecting iOS versions prior to 7.1.2. The issue is a state management flaw in how telephony state is handled while Airplane Mode is active, allowing a physically proximate attacker to bypass the lock and access a foreground application. The...

CVE-2014-1351

Siri in Apple iOS before 7.1.2 allows physically proximate attackers to bypass an intended lock-screen passcode requirement, and read a contact list, via a Siri request that refers to a contact ambiguously...

CVE-2014-1352

CVE-2014-1352 affects Apple iOS before 7.1.2. The vulnerability is in the Lock Screen, where the limit on failed passcode attempts was not properly enforced, enabling brute-force passcode-guessing attacks by a person with physical access. The issue is mitigated in Apple’s iOS 7.1.2 release, which...

Apple iOS 7.0.2 - Sim Lock Screen Display Bypass Vulnerability

No description provided by source...

iOS7 system aeration lock screen vulnerability:two unit operation you can control the most recent application-vulnerability warning-the black bar safety net

Recently users have discovered a new iOS 7 system vulnerabilities, this vulnerability can not help but creepy! Exploit this vulnerability to bypass the password input interface, in don't know password to open your most recently used software. And this process in just 5 seconds! After testing, thi...

openSUSE Security Update : ibus-pinyin (openSUSE-SU-2013:1825-1)

This update fixes the following issue with ibus-pinyin : - Fix visible password entry in GNOME lock screen CVE-2013-4509, bnc847718 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

Authentication flaw

pyxtrlock before 0.1 uses an incorrect variable name, which allows physically proximate attackers to bypass the lock screen via multiple failed authentication attempts, which trigger a crash...

CVE-2013-4426

Affected product: pyxtrlock prior to 0.1. The vulnerability arises from an incorrect variable name in the code, which allows physically proximate, local attackers to bypass the lock screen after multiple failed authentication attempts, ultimately triggering a crash. Exploitation details are not p...

CVE-2014-3204

Unity before 7.2.1, as used in Ubuntu 14.04, does not properly handle keyboard shortcuts, which allows physically proximate attackers to bypass the lock screen and execute arbitrary commands, as demonstrated by right-clicking on the indicator bar and then pressing the ALT and F2 keys...

CVE-2014-3203

Unity before 7.2.1, as used in Ubuntu 14.04, does not properly restrict access to the Dash when the lock screen is active, which allows physically proximate attackers to bypass the lock screen and execute arbitrary commands, as demonstrated by pressing the SUPER key before the screen auto-locks...

CVE-2014-3202

Unity before 7.2.1 does not properly handle entry activation, which allows physically proximate attackers to bypass the lock screen by holding the ENTER key, which triggers the process to crash...

CVE-2014-3203

Unity before 7.2.1, as used in Ubuntu 14.04, does not properly restrict access to the Dash when the lock screen is active, which allows physically proximate attackers to bypass the lock screen and execute arbitrary commands, as demonstrated by pressing the SUPER key before the screen auto-locks...

Code injection

Unity before 7.2.1 does not properly handle entry activation, which allows physically proximate attackers to bypass the lock screen by holding the ENTER key, which triggers the process to crash...

Design/Logic Flaw

Unity before 7.2.1, as used in Ubuntu 14.04, does not properly restrict access to the Dash when the lock screen is active, which allows physically proximate attackers to bypass the lock screen and execute arbitrary commands, as demonstrated by pressing the SUPER key before the screen auto-locks...

Design/Logic Flaw

Unity before 7.2.1, as used in Ubuntu 14.04, does not properly handle keyboard shortcuts, which allows physically proximate attackers to bypass the lock screen and execute arbitrary commands, as demonstrated by right-clicking on the indicator bar and then pressing the ALT and F2 keys...

UBUNTU-CVE-2014-3204

Unity before 7.2.1, as used in Ubuntu 14.04, does not properly handle keyboard shortcuts, which allows physically proximate attackers to bypass the lock screen and execute arbitrary commands, as demonstrated by right-clicking on the indicator bar and then pressing the ALT and F2 keys...

CVE-2014-3202

Unity before 7.2.1 does not properly handle entry activation, which allows physically proximate attackers to bypass the lock screen by holding the ENTER key, which triggers the process to crash...

CVE-2014-3204

Unity before 7.2.1, as used in Ubuntu 14.04, does not properly handle keyboard shortcuts, which allows physically proximate attackers to bypass the lock screen and execute arbitrary commands, as demonstrated by right-clicking on the indicator bar and then pressing the ALT and F2 keys...

UBUNTU-CVE-2014-3202

Unity before 7.2.1 does not properly handle entry activation, which allows physically proximate attackers to bypass the lock screen by holding the ENTER key, which triggers the process to crash...