Lucene search
+L

627 matches found

The Hacker News
The Hacker News
•added 2015/09/17 1:54 a.m.•23 views

For Better Privacy & Security, Change these iOS 9 Settings Immediately

iOS 9 is out, and it's time to update your iPhone or iPad to the latest version of Apple's mobile operating system. The new iOS is better, faster, and more efficient than its predecessors, with a number of new features and improvements including enhanced multitasking for iPad, Proactive Assistant...

6.6AI score
SaveExploits0
NVD
NVD
•added 2015/07/26 2:59 p.m.•28 views

CVE-2015-4945

Unspecified vulnerability in the IBM Maximo Anywhere application 7.5.1 through 7.5.1.2 for Android allows attackers to bypass a passcode protection mechanism and obtain sensitive information via a crafted application...

5CVSS5.8AI score0.01043EPSS
SaveExploits0References1
Prion
Prion
•added 2015/07/26 2:59 p.m.•26 views

Design/Logic Flaw

Unspecified vulnerability in the IBM Maximo Anywhere application 7.5.1 through 7.5.1.2 for Android allows attackers to bypass a passcode protection mechanism and obtain sensitive information via a crafted application...

5CVSS6.3AI score0.01043EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2015/07/26 2:00 p.m.•60 views

CVE-2015-4945

IBM Maximo Anywhere 7.5.1 (Android) contains an unspecified vulnerability that could allow a remote attacker to bypass passcode protections and obtain sensitive information via a crafted application. Affects Maximo Anywhere 7.5.1; remediation available as 7.5.1.2 Interim Fix or Fix Pack via Fix C...

5CVSS6AI score0.01043EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2015/07/26 2:00 p.m.•44 views

CVE-2015-4945

Unspecified vulnerability in the IBM Maximo Anywhere application 7.5.1 through 7.5.1.2 for Android allows attackers to bypass a passcode protection mechanism and obtain sensitive information via a crafted application...

5.8AI score0.01043EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/07/26 12:00 a.m.•5 views

CVE-2015-4945: Exposure of Sensitive Information to an Unauthorized Actor

Unspecified vulnerability in the IBM Maximo Anywhere application 7.5.1 through 7.5.1.2 for Android allows attackers to bypass a passcode protection mechanism and obtain sensitive information via a crafted application...

5CVSS5.8AI score0.01043EPSS
SaveExploits0References2
ThreatPost
ThreatPost
•added 2015/06/11 10:00 a.m.•12 views

Apple Moving to 2FA, Six-Digit Passcodes in iOS 9

With each new release of iOS, Apple has been improving the security of the mobile operating system, adding new features, inserting exploit mitigations, and taking away avenues for attack. In the forthcoming iOS 9.0 release, the company is continuing this movement with the addition of two-factor...

0.8AI score
SaveExploits0References3
NVD
NVD
•added 2015/04/10 2:59 p.m.•32 views

CVE-2015-1108

The Lock Screen component in Apple iOS before 8.3 does not properly enforce the limit on incorrect passcode-authentication attempts, which makes it easier for physically proximate attackers to obtain access by making many passcode guesses...

2.1CVSS5.5AI score0.00395EPSS
SaveExploits0References4
NVD
NVD
•added 2015/04/10 2:59 p.m.•27 views

CVE-2015-1107

The Lock Screen component in Apple iOS before 8.3 does not properly implement the erasure feature for incorrect passcode-authentication attempts, which makes it easier for physically proximate attackers to obtain access by making many passcode guesses...

1.9CVSS5.5AI score0.0036EPSS
SaveExploits0References4
NVD
NVD
•added 2015/04/10 2:59 p.m.•34 views

CVE-2015-1085

AppleKeyStore in Apple iOS before 8.3 does not properly restrict a certain passcode-confirmation interface, which makes it easier for attackers to verify correct passcode guesses via a crafted app...

1.9CVSS5.5AI score0.00351EPSS
SaveExploits0References4
Prion
Prion
•added 2015/04/10 2:59 p.m.•25 views

Code injection

AppleKeyStore in Apple iOS before 8.3 does not properly restrict a certain passcode-confirmation interface, which makes it easier for attackers to verify correct passcode guesses via a crafted app...

1.9CVSS5.9AI score0.00351EPSS
SaveExploits0References4Affected Software1
Prion
Prion
•added 2015/04/10 2:59 p.m.•25 views

Authentication flaw

The Lock Screen component in Apple iOS before 8.3 does not properly enforce the limit on incorrect passcode-authentication attempts, which makes it easier for physically proximate attackers to obtain access by making many passcode guesses...

2.1CVSS5.9AI score0.00395EPSS
SaveExploits0References4Affected Software1
Prion
Prion
•added 2015/04/10 2:59 p.m.•25 views

Code injection

The Lock Screen component in Apple iOS before 8.3 does not properly implement the erasure feature for incorrect passcode-authentication attempts, which makes it easier for physically proximate attackers to obtain access by making many passcode guesses...

1.9CVSS5.9AI score0.0036EPSS
SaveExploits0References4Affected Software1
Prion
Prion
•added 2015/04/10 2:59 p.m.•26 views

Design/Logic Flaw

The QuickType feature in the Keyboards subsystem in Apple iOS before 8.3 allows physically proximate attackers to discover passcodes by reading the lock screen during use of a Bluetooth keyboard...

2.1CVSS6.1AI score0.00375EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2015/04/10 2:00 p.m.•38 views

CVE-2015-1108

The Lock Screen component in Apple iOS before 8.3 does not properly enforce the limit on incorrect passcode-authentication attempts, which makes it easier for physically proximate attackers to obtain access by making many passcode guesses...

5.5AI score0.00395EPSS
SaveExploits0References4
CVE
CVE
•added 2015/04/10 2:00 p.m.•61 views

CVE-2015-1108

CVE-2015-1108 affects the Lock Screen component of Apple iOS prior to 8.3, where the limit on incorrect passcode attempts was not properly enforced. This could allow a physically proximate attacker to bypass a device’s passcode via repeated guesses. The issue was addressed in iOS 8.3 by enforcing...

2.1CVSS5.6AI score0.00395EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2015/04/10 2:00 p.m.•42 views

CVE-2015-1106

The QuickType feature in the Keyboards subsystem in Apple iOS before 8.3 allows physically proximate attackers to discover passcodes by reading the lock screen during use of a Bluetooth keyboard...

5.6AI score0.00375EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2015/04/10 2:00 p.m.•42 views

CVE-2015-1085

AppleKeyStore in Apple iOS before 8.3 does not properly restrict a certain passcode-confirmation interface, which makes it easier for attackers to verify correct passcode guesses via a crafted app...

5.5AI score0.00351EPSS
SaveExploits0References4
CVE
CVE
•added 2015/04/10 2:00 p.m.•69 views

CVE-2015-1085

AppleKeyStore in iOS before 8.3 exposes a passcode-confirmation interface that can be leveraged by a crafted app to verify user passcodes. The issue stems from insufficient entitlement checks, enabling a malicious application to guess the user’s passcode. Apple released iOS 8.3 with mitigations: ...

1.9CVSS5.6AI score0.00351EPSS
SaveExploits0References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/04/10 12:00 a.m.•3 views

CVE-2015-1108: Exposure of Sensitive Information to an Unauthorized Actor

The Lock Screen component in Apple iOS before 8.3 does not properly enforce the limit on incorrect passcode-authentication attempts, which makes it easier for physically proximate attackers to obtain access by making many passcode guesses...

2.1CVSS5.8AI score0.00395EPSS
SaveExploits0References2
Rows per page
Query Builder