CVE-2014-4451

Apple iOS before 8.1.1 does not properly enforce the failed-passcode limit, which makes it easier for physically proximate attackers to bypass the lock-screen protection mechanism via a series of guesses...

Design/Logic Flaw

Apple iOS before 8.1.1 does not properly enforce the failed-passcode limit, which makes it easier for physically proximate attackers to bypass the lock-screen protection mechanism via a series of guesses...

CVE-2014-4451

CVE-2014-4451 affects Apple iOS before 8.1.1, where the failed-passcode limit was not properly enforced, allowing a physically proximate attacker to bypass the lock‑screen protection via a series of guesses. The vulnerability is addressed in iOS 8.1.1. Affected component: iOS lock screen passcode...

CVE-2014-4451

Apple iOS before 8.1.1 does not properly enforce the failed-passcode limit, which makes it easier for physically proximate attackers to bypass the lock-screen protection mechanism via a series of guesses...

CVE-2014-4463

Apple iOS before 8.1.1 allows physically proximate attackers to bypass the lock-screen protection mechanism, and view or transmit a Photo Library photo, via the FaceTime "Leave a Message" feature...

CVE-2014-4463

Affected software: Apple iOS prior to 8.1.1. Issue: The FaceTime Leave a Message feature on the lock screen could allow a physically proximate attacker to bypass the lock-screen protection and view or transmit a Photo Library photo. Root cause / scope: a protection bypass via FaceTime Leave a Mes...

PT-2014-5923

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.1.1 Description The issue allows physically proximate attackers to bypass the lock-screen protection mechanism. This can lead to viewing or transmitting a Photo Library photo via the FaceTime "Leave a Message"...

PT-2014-5913

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.1.1 Description The issue concerns the lock-screen protection mechanism, where the failed-passcode limit is not properly enforced. This makes it easier for physically proximate attackers to bypass the lock screen...

CVE-2014-4463: Undefined Security Weakness

Apple iOS before 8.1.1 allows physically proximate attackers to bypass the lock-screen protection mechanism, and view or transmit a Photo Library photo, via the FaceTime "Leave a Message" feature...

CVE-2014-4451: Undefined Security Weakness

Apple iOS before 8.1.1 does not properly enforce the failed-passcode limit, which makes it easier for physically proximate attackers to bypass the lock-screen protection mechanism via a series of guesses...

Updated KDE 4 and related packages move to KDE 4.12.5

This KDE 4 update provides an upgrade to the last stable version of KDE Applications and Development Platform for the 4.12 series, and updates Plasma Workspaces to 4.11.12. This update fixes several security vulnerabilities - KMail/KIO POP3 SSL MITM Flaw CVE-2014-3494 - mga13545 - KAuth PID Reuse...

Fedora 20 : gnome-shell-3.10.4-9.fc20 (2014-12690)

Security fix for lock screen circumvention by consecutive screenshot requests triggering OOM situation Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Apple iOS v7.1.2 - Merge Apps Service Local Bypass Vulnerability

Document Title: =============== Apple iOS v7.1.2 - Merge Apps Service Local Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1280 Video: http://www.vulnerability-lab.com/getcontent.php?id=1281 Vulnerability Magazine:...

CVE-2014-6602

Microsoft Asha OS on the Microsoft Mobile Nokia Asha 501 phone 14.0.4 allows physically proximate attackers to bypass the lock-screen protection mechanism, and read or modify contact information or dial arbitrary telephone numbers, by tapping the SOS Option and then tapping the Green Call Option...

Design/Logic Flaw

Microsoft Asha OS on the Microsoft Mobile Nokia Asha 501 phone 14.0.4 allows physically proximate attackers to bypass the lock-screen protection mechanism, and read or modify contact information or dial arbitrary telephone numbers, by tapping the SOS Option and then tapping the Green Call Option...

CVE-2014-6602

CVE-2014-6602 affects Microsoft Asha OS on the Nokia Asha 501 (MS Mobile) v14.0.4. The vulnerability allows physically proximate attackers to bypass the lock-screen by tapping the SOS option, then the Green Call option, enabling reading/modifying contacts or dialing numbers. The connected documen...

PT-2014-7296

Name of the Vulnerable Software and Affected Versions Microsoft Asha OS version 14.0.4 Description The issue allows physically proximate attackers to bypass the lock-screen protection mechanism. This can lead to unauthorized access, where attackers can read or modify contact information or dial...

CVE-2014-6602: Undefined Security Weakness

Microsoft Asha OS on the Microsoft Mobile Nokia Asha 501 phone 14.0.4 allows physically proximate attackers to bypass the lock-screen protection mechanism, and read or modify contact information or dial arbitrary telephone numbers, by tapping the SOS Option and then tapping the Green Call Option...

CVE-2014-4356

Apple iOS before 8 does not follow the intended configuration setting for text-message preview on the lock screen, which allows physically proximate attackers to obtain sensitive information by reading this screen...

CVE-2014-4361

The Home & Lock Screen subsystem in Apple iOS before 8 does not properly restrict the private API for app prominence, which allows attackers to determine the frontmost app by leveraging access to a crafted background app...