Information disclosure

The Killer Screen lock aka com.cc.theme.shashou application 0.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7086

The CVE-2014-7086 entry concerns the Android app Killer Screen lock (com.cc.theme.shashou) version 0.5, where the SSL/TLS client does not verify X.509 certificates. This root cause enables MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. The vulnerabilit...

CVE-2014-4431

Dock in Apple OS X before 10.10 does not properly manage the screen-lock state, which allows physically proximate attackers to view windows by leveraging an unattended workstation...

Design/Logic Flaw

Dock in Apple OS X before 10.10 does not properly manage the screen-lock state, which allows physically proximate attackers to view windows by leveraging an unattended workstation...

CVE-2014-4431

CVE-2014-4431 affects Apple OS X before 10.10, where a state-management flaw in the Dock can allow windows to be visible on screen-lock when the workstation is unattended. The issue is described as a local, state-tracking problem that could reveal content; exploitation details are not provided in...

Unity screen lock protection bypass

Under some conditions keyboard is not blocked...

Apple Mac OS X multiple security vulnerabilities

Multiple memory corruptions, information leakages, DoS, privilege escalation, screen lock bypass...

CVE-2014-1380

The Security - Keychain component in Apple OS X before 10.9.4 does not properly implement keystroke observers, which allows physically proximate attackers to bypass the screen-lock protection mechanism, and enter characters into an arbitrary window under the lock window, via keyboard input...

Input validation

The Security - Keychain component in Apple OS X before 10.9.4 does not properly implement keystroke observers, which allows physically proximate attackers to bypass the screen-lock protection mechanism, and enter characters into an arbitrary window under the lock window, via keyboard input...

CVE-2014-1380

The Security - Keychain component in Apple OS X before 10.9.4 does not properly implement keystroke observers, which allows physically proximate attackers to bypass the screen-lock protection mechanism, and enter characters into an arbitrary window under the lock window, via keyboard input...

CVE-2013-4143

The 1 checkPasswd and 2 checkGroupXlockPasswds functions in xlockmore before 5.43 do not properly handle when a NULL value is returned upon an error by the crypt or dispcrypt function as implemented in glibc 2.17 and later, which allows attackers to bypass the screen lock via vectors related to...

Code injection

The 1 checkPasswd and 2 checkGroupXlockPasswds functions in xlockmore before 5.43 do not properly handle when a NULL value is returned upon an error by the crypt or dispcrypt function as implemented in glibc 2.17 and later, which allows attackers to bypass the screen lock via vectors related to...

CVE-2013-4143

The CVE-2013-4143 entry covers Xlockmore (xlockmore) prior to version 5.43, where the functions checkPasswd and checkGroupXlockPasswds mishandle a NULL return from crypt/dispcrypt (glibc 2.17+), allowing a local attacker to bypass screen lock via invalid-salt vectors. Impact is a local denial of ...

CVE-2013-4143

The 1 checkPasswd and 2 checkGroupXlockPasswds functions in xlockmore before 5.43 do not properly handle when a NULL value is returned upon an error by the crypt or dispcrypt function as implemented in glibc 2.17 and later, which allows attackers to bypass the screen lock via vectors related to...

Ubuntu Update for unity USN-2184-1

Check for the Version of unity OpenVAS Vulnerability Test $Id: gbubuntuUSN21841.nasl 7957 2017-12-01 06:40:08Z santu $ Ubuntu Update for unity USN-2184-1 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; yo...

Ubuntu Unity protection bypass

Screen lock bypass...

CVE-2013-7221

The automatic screen lock functionality in GNOME Shell aka gnome-shell before 3.10 does not prevent access to the "Enter a Command" dialog, which allows physically proximate attackers to execute arbitrary commands by leveraging an unattended workstation...

DEBIAN-CVE-2013-7221

The automatic screen lock functionality in GNOME Shell aka gnome-shell before 3.10 does not prevent access to the "Enter a Command" dialog, which allows physically proximate attackers to execute arbitrary commands by leveraging an unattended workstation...

CVE-2013-7221

The automatic screen lock functionality in GNOME Shell aka gnome-shell before 3.10 does not prevent access to the "Enter a Command" dialog, which allows physically proximate attackers to execute arbitrary commands by leveraging an unattended workstation...

UBUNTU-CVE-2013-7221

The automatic screen lock functionality in GNOME Shell aka gnome-shell before 3.10 does not prevent access to the "Enter a Command" dialog, which allows physically proximate attackers to execute arbitrary commands by leveraging an unattended workstation...