CVE-2015-1085: Undefined Security Weakness

AppleKeyStore in Apple iOS before 8.3 does not properly restrict a certain passcode-confirmation interface, which makes it easier for attackers to verify correct passcode guesses via a crafted app...

PT-2015-5069

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.3 Description The issue concerns a passcode-confirmation interface in AppleKeyStore that does not properly restrict access, making it easier for attackers to verify correct passcode guesses via a crafted app...

PT-2015-5090

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.3 Description The issue allows physically proximate attackers to discover passcodes by reading the lock screen during use of a Bluetooth keyboard, specifically exploiting the QuickType feature in the Keyboards...

PT-2015-5092

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.3 Description The issue concerns the Lock Screen component, which fails to properly enforce the limit on incorrect passcode-authentication attempts. This makes it easier for attackers with physical access to obtai...

CVE-2015-1107: Undefined Security Weakness

The Lock Screen component in Apple iOS before 8.3 does not properly implement the erasure feature for incorrect passcode-authentication attempts, which makes it easier for physically proximate attackers to obtain access by making many passcode guesses...

CVE-2015-1108: Exposure of Sensitive Information to an Unauthorized Actor

The Lock Screen component in Apple iOS before 8.3 does not properly enforce the limit on incorrect passcode-authentication attempts, which makes it easier for physically proximate attackers to obtain access by making many passcode guesses...

PT-2015-5091

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.3 Description The issue concerns the Lock Screen component, which does not properly implement the erasure feature for incorrect passcode-authentication attempts. This makes it easier for physically proximate...

Apple iOS 8.x < 8.1.1 Multiple Vulnerabilities.

Binary data 8940.prm...

Apple iOS 8.0 - 8.0.2 - Controls Re Auth Bypass Vulnerability

Document Title: =============== Apple iOS 8.0 - 8.0.2 - Controls Re Auth Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1322 Video: http://www.vulnerability-lab.com/getcontent.php?id=1334 Release Date: ============= 2015-03-02...

Apple iOS 8.0 - 8.0.2 - Controls Re Auth Bypass Vulnerability

Document Title: =============== Apple iOS 8.0 - 8.0.2 - Controls Re Auth Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1322 Video: http://www.vulnerability-lab.com/getcontent.php?id=1334 Release Date: ============= 2015-03-02...

Design/Logic Flaw

Apple iOS before 8.1.1 does not properly enforce the failed-passcode limit, which makes it easier for physically proximate attackers to bypass the lock-screen protection mechanism via a series of guesses...

CVE-2014-4451

Apple iOS before 8.1.1 does not properly enforce the failed-passcode limit, which makes it easier for physically proximate attackers to bypass the lock-screen protection mechanism via a series of guesses...

CVE-2014-4451: Undefined Security Weakness

Apple iOS before 8.1.1 does not properly enforce the failed-passcode limit, which makes it easier for physically proximate attackers to bypass the lock-screen protection mechanism via a series of guesses...

PT-2014-5913

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.1.1 Description The issue concerns the lock-screen protection mechanism, where the failed-passcode limit is not properly enforced. This makes it easier for physically proximate attackers to bypass the lock screen...

CVE-2014-1352

Lock Screen in Apple iOS before 7.1.2 does not properly enforce the limit on failed passcode attempts, which makes it easier for physically proximate attackers to conduct brute-force passcode-guessing attacks via unspecified vectors...

CVE-2014-1351

Siri in Apple iOS before 7.1.2 allows physically proximate attackers to bypass an intended lock-screen passcode requirement, and read a contact list, via a Siri request that refers to a contact ambiguously...

Code injection

Siri in Apple iOS before 7.1.2 allows physically proximate attackers to bypass an intended lock-screen passcode requirement, and read a contact list, via a Siri request that refers to a contact ambiguously...

CVE-2014-1352

Lock Screen in Apple iOS before 7.1.2 does not properly enforce the limit on failed passcode attempts, which makes it easier for physically proximate attackers to conduct brute-force passcode-guessing attacks via unspecified vectors...

CVE-2014-1351

CVE-2014-1351 affects Apple iOS prior to 7.1.2. On the lock screen, a Siri request that references a contact ambiguously could cause Siri to display a contact list without the passcode, bypassing the lock-screen requirement and exposing contacts. Root cause: Siri on the lock screen can reveal the...

PHPBB MOD [2.0.19] Invitation Only (PassCode Bypass vulnerability)

No description provided by source. PHPBB MOD 2.0.19 Invitation Only PassCode Bypass vulnerability ------------------------------------------------------------------------------- 0 | | | | | | TM 1 | | | | | | 0 | / | ' \ / | ' \ / |/ | |/ / \ '| ' \ / \ | 1 / / | | | | / | | | | | | | / | | | | |...