Code injection

Apple iOS before 8 does not follow the intended configuration setting for text-message preview on the lock screen, which allows physically proximate attackers to obtain sensitive information by reading this screen...

Design/Logic Flaw

The Home & Lock Screen subsystem in Apple iOS before 8 does not properly restrict the private API for app prominence, which allows attackers to determine the frontmost app by leveraging access to a crafted background app...

CVE-2014-4356

Apple iOS before 8 does not follow the intended configuration setting for text-message preview on the lock screen, which allows physically proximate attackers to obtain sensitive information by reading this screen...

CVE-2014-4361

The Home & Lock Screen subsystem in Apple iOS before 8 does not properly restrict the private API for app prominence, which allows attackers to determine the frontmost app by leveraging access to a crafted background app...

CVE-2014-4361

CVE-2014-4361 affects the Home & Lock Screen subsystem in Apple iOS before 8, where the private API used to determine the frontmost app lacked sufficient access control. Exploitation would allow a crafted background app to reveal which app is frontmost. The issue is described as a lack of proper ...

PT-2014-5831

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8 Description The issue concerns the Home & Lock Screen subsystem, which does not properly restrict access to a private API for app prominence. This allows attackers to determine the frontmost app by leveraging acce...

CVE-2014-4361: Exposure of Sensitive Information to an Unauthorized Actor

The Home & Lock Screen subsystem in Apple iOS before 8 does not properly restrict the private API for app prominence, which allows attackers to determine the frontmost app by leveraging access to a crafted background app...

CVE-2014-4356: Exposure of Sensitive Information to an Unauthorized Actor

Apple iOS before 8 does not follow the intended configuration setting for text-message preview on the lock screen, which allows physically proximate attackers to obtain sensitive information by reading this screen...

PT-2014-5829

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8 Description The issue allows physically proximate attackers to obtain sensitive information by reading the lock screen, due to not following the intended configuration setting for text-message preview...

Apple iOS v7.1.2 - (Merge Apps) Bypass Vulnerability

Document Title: =============== Apple iOS v7.1.2 - Merge Apps Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1280 Video: http://www.vulnerability-lab.com/getcontent.php?id=1281 Vulnerability Magazine:...

Apple iOS v7.1.2 - (Merge Apps) Bypass Vulnerability

Document Title: =============== Apple iOS v7.1.2 - Merge Apps Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1280 Video: http://www.vulnerability-lab.com/getcontent.php?id=1281 Vulnerability Magazine:...

CVE-2014-5195

Unity before 7.2.3 and 7.3.x before 7.3.1, as used in Ubuntu, does not properly take focus of the keyboard when switching to the lock screen, which allows physically proximate attackers to bypass the lock screen by 1 leveraging a machine that had text selected when locking or 2 resuming from a...

UBUNTU-CVE-2014-5195

Unity before 7.2.3 and 7.3.x before 7.3.1, as used in Ubuntu, does not properly take focus of the keyboard when switching to the lock screen, which allows physically proximate attackers to bypass the lock screen by 1 leveraging a machine that had text selected when locking or 2 resuming from a...

Design/Logic Flaw

Unity before 7.2.3 and 7.3.x before 7.3.1, as used in Ubuntu, does not properly take focus of the keyboard when switching to the lock screen, which allows physically proximate attackers to bypass the lock screen by 1 leveraging a machine that had text selected when locking or 2 resuming from a...

CVE-2014-5195

Unity before 7.2.3 and 7.3.x before 7.3.1, as used in Ubuntu, does not properly take focus of the keyboard when switching to the lock screen, which allows physically proximate attackers to bypass the lock screen by 1 leveraging a machine that had text selected when locking or 2 resuming from a...

CVE-2014-5195

Unity components used in Ubuntu (before 7.2.3 and 7.3.x before 7.3.1) fail to grab keyboard focus when switching to the lock screen, enabling a local attacker to bypass the lock screen under scenarios such as text being selected at lock or resuming from suspend. Affected: Unity lock-screen focus ...

CVE-2014-5195

Unity before 7.2.3 and 7.3.x before 7.3.1, as used in Ubuntu, does not properly take focus of the keyboard when switching to the lock screen, which allows physically proximate attackers to bypass the lock screen by 1 leveraging a machine that had text selected when locking or 2 resuming from a...

CVE-2014-5195: Concurrent Execution using Shared Resource with Improper Synchronization

Unity before 7.2.3 and 7.3.x before 7.3.1, as used in Ubuntu, does not properly take focus of the keyboard when switching to the lock screen, which allows physically proximate attackers to bypass the lock screen by 1 leveraging a machine that had text selected when locking or 2 resuming from a...

Ubuntu: Security Advisory (USN-2303-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[USN-2303-1] Unity vulnerability

========================================================================== Ubuntu Security Notice USN-2303-1 July 31, 2014 unity vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu...