9395 matches found
CVE-2015-7496
GNOME Display Manager gdm before 3.18.2 allows physically proximate attackers to bypass the lock screen by holding the Escape key...
CVE-2015-7496
GNOME Display Manager gdm before 3.18.2 allows physically proximate attackers to bypass the lock screen by holding the Escape key...
Code injection
GNOME Display Manager gdm before 3.18.2 allows physically proximate attackers to bypass the lock screen by holding the Escape key...
Design/Logic Flaw
The grub2 package before 2.02-0.29 in Red Hat Enterprise Linux RHEL 7, when used on UEFI systems, allows local users to bypass intended Secure Boot restrictions and execute non-verified code via a crafted 1 multiboot or 2 multiboot2 module in the configuration file or physically proximate attacke...
Cisco IOS Tunnel Interfaces Security Bypass
The remote Cisco device is affected by a security bypass vulnerability due to physical-interface ACLs superseding tunnel-interface ACLs. An authenticated, remote attacker connected to a tunnel interface can exploit this to bypass intended network-traffic restrictions. C Tenable Network Security,...
Cisco Firepower 9000 USB Kernel Denial of Service Vulnerability
A vulnerability in the USB driver of Cisco Firepower 9000 could allow an unauthenticated, local attacker with physical access to the device to send invalid USB commands to the kernel and cause a denial of service DoS condition. The vulnerability is due to insufficient sanitization of USB input...
Cisco IOS Virtual PPP ACL Control Bypass Vulnerability
Cisco IOS is a popular Internet operating system. Cisco IOS has a security vulnerability that allows a remote authenticated user who can connect to a virtual PPP interface to bypass the ACL on the virtual PPP interface and gain unauthorized access if the ACL on the physical interface allows...
Cisco IOS ACL Control Bypass Vulnerability
Cisco IOS is a popular Internet operating system. Cisco IOS has a security vulnerability that allows remote users who can connect to the channel interface to bypass the ACL controls if the physical interface ACLs allow communication to pass...
Design/Logic Flaw
Cisco IOS 15.204M and 15.403M lets physical-interface ACLs supersede virtual PPP interface ACLs, which allows remote authenticated users to bypass intended network-traffic restrictions in opportunistic circumstances by using PPP, aka Bug ID CSCur61303...
Cisco IOS Software Virtual PPP Interfaces Security Bypass Vulnerability
A vulnerability in Cisco devices that are running Cisco IOS Software Release 15.204M or Cisco IOS Software Release 15.403M and are configured to use access control lists ACLs could allow a user who is connected to an authenticated PPP session to bypass ACLs that are configured on virtual PPP...
Cisco IOS Software Tunnel Interfaces Security Bypass Vulnerability
A vulnerability in Cisco devices running IOS Software versions 15.204M6 and 15.403S configured with access control lists ACLs could allow an unauthenticated, remote user connected to a tunnel interface to bypass configured ACLs on tunnel interfaces if the ACL on the physical interface permits the...
FreeBSD : xen-kernel -- Long latency populate-on-demand operation is not preemptible (83350009-881e-11e5-ab94-002590263bf5)
The Xen Project reports : When running an HVM domain in Populate-on-Demand mode, Xen would sometimes search the domain for memory to reclaim, in response to demands for population of other pages in the same domain. This search runs without preemption. The guest can, by suitable arrangement of its...
DEBIAN-CVE-2015-8025
driver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency check, which allows physically proximate attackers to bypass the lock screen by hot swapping monitors...
MS15-122: Description of the security update for Windows Kerberos: November 10, 2015
None None...
xen-kernel -- CPU lockup during exception delivery
The Xen Project reports: A malicious HVM guest administrator can cause a denial of service. Specifically, prevent use of a physical CPU for a significant, perhaps indefinite period. If a host watchdog Xen or dom0 is in use, this can lead to a watchdog timeout and consequently a reboot of the host...
Ubuntu: Security Advisory (USN-2789-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2008-3895
LILO 22.6.1 and earlier stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer before and after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer...
xen-kernel -- Long latency populate-on-demand operation is not preemptible
The Xen Project reports: When running an HVM domain in Populate-on-Demand mode, Xen would sometimes search the domain for memory to reclaim, in response to demands for population of other pages in the same domain. This search runs without preemption. The guest can, by suitable arrangement of its...
CVE-2015-8025
driver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency check, which allows physically proximate attackers to bypass the lock screen by hot swapping monitors...
