CVE-2016-6866

CVE-2016-6866 affects the screen-locker slock. A null pointer dereference can occur when verifying a password for a user with an invalid shadow hash entry, caused by calling crypt(3) and using its return value in strcmp(3) without checking for NULL. This can lead to a crash and potential local im...

CVE-2016-6866

slock allows attackers to bypass the screen lock via vectors involving an invalid password hash, which triggers a NULL pointer dereference and crash...

CVE-2016-6866

slock allows attackers to bypass the screen lock via vectors involving an invalid password hash, which triggers a NULL pointer dereference and crash...

CVE-2016-6866

slock allows attackers to bypass the screen lock via vectors involving an invalid password hash, which triggers a NULL pointer dereference and crash...

Code injection

Turning all screens off in Plasma-workspace and kscreenlocker while the lock screen is shown can result in the screen being unlocked when turning a screen on again...

CVE-2016-1000002

gdm3 3.14.2 and possibly later has an information leak before screen lock...

The vulnerability of the Android operating system, which allows a hacker to change the screen lock password

The vulnerability of the server/LockSettingsService.java script of the LockSettingsService component in the Android operating system is related to errors in managing registration data. Exploiting this vulnerability could allow a malicious actor, operating locally, to change the screen lock passwo...

CVE-2016-3749

server/LockSettingsService.java in LockSettingsService in Android 6.x before 2016-07-01 allows attackers to modify the screen-lock password or pattern via a crafted application, aka internal bug 28163930...

CVE-2016-3749

server/LockSettingsService.java in LockSettingsService in Android 6.x before 2016-07-01 allows attackers to modify the screen-lock password or pattern via a crafted application, aka internal bug 28163930...

Default credentials

server/LockSettingsService.java in LockSettingsService in Android 6.x before 2016-07-01 allows attackers to modify the screen-lock password or pattern via a crafted application, aka internal bug 28163930...

CVE-2016-3749

server/LockSettingsService.java in LockSettingsService in Android 6.x before 2016-07-01 allows attackers to modify the screen-lock password or pattern via a crafted application, aka internal bug 28163930...

CVE-2016-3749

The CVE affects Android 6.x (LockSettingsService) where server/LockSettingsService.java could be manipulated by a crafted application to change the screen-lock password or pattern. The root cause is an internal bug (28163930) in LockSettingsService that allows a local attacker to bypass user inte...

The vulnerability of the Mac OS X operating system allows a hacker to bypass password expiration.

The vulnerability of the Screen Lock function in the Mac OS X operating system exists due to improper handling of user profile passwords. Exploiting this vulnerability can allow an intruder acting locally to reset passwords that have expired...

Apple OS X El Capitan Screen Lock Security Bypass Vulnerability

Apple OS X El Capitan is an operating system on Apple devices. An unspecified security vulnerability exists in Apple OS X El Capitan Screen Lock, which can be exploited by a local attacker to reset expired passwords in the locked screen state...

CVE-2016-1851

The Screen Lock feature in Apple OS X before 10.11.5 mishandles password profiles, which allows physically proximate attackers to reset expired passwords in the lock-screen state via unspecified vectors...

CVE-2016-1851

The Screen Lock feature in Apple OS X before 10.11.5 mishandles password profiles, which allows physically proximate attackers to reset expired passwords in the lock-screen state via unspecified vectors...

Design/Logic Flaw

The Screen Lock feature in Apple OS X before 10.11.5 mishandles password profiles, which allows physically proximate attackers to reset expired passwords in the lock-screen state via unspecified vectors...

CVE-2016-1851

CVE-2016-1851 affects macOS OS X El Capitan v10.11.0–10.11.4 and later; the Screen Lock feature mishandles password profiles, enabling a physically proximate local attacker to reset expired passwords from the lock screen via unspecified vectors. Impacted component: Screen Lock handling of passwor...

CVE-2016-1851

The Screen Lock feature in Apple OS X before 10.11.5 mishandles password profiles, which allows physically proximate attackers to reset expired passwords in the lock-screen state via unspecified vectors...

The vulnerability of the GNOME Display Manager’s graphical interface on the Fedora operating system allows a hacker to bypass the screen lock mechanism.

The vulnerability of the GNOME Display Manager’s graphical interface on the Fedora operating system is related to deficiencies in access control for files. Exploiting this vulnerability could allow a malicious individual to bypass the screen lock by pressing the Escape key...