Lucene search
K

22 matches found

CNVD
CNVD
added 2025/09/18 12:0 a.m.2 views

Apple macOS Tahoe state mismanagement vulnerability

Apple macOS Tahoe is the 26th major release of Apple's macOS operating system, which was released on June 10, 2025, and features a new "Liquid Glass" visual design that significantly optimizes interface aesthetics, feature integration, and cross-device collaboration. The 26th major version of the...

7.5CVSS6.6AI score0.0006EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2024/06/03 12:0 a.m.16 views

RHEL 7 : kde-workspace (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - kde-workspace: arbitrary code execution and local privilege escalation CVE-2014-8651 - kde-workspace 4.2....

7.2CVSS7.8AI score0.00424EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2023/02/15 5:21 a.m.1 views

SUSE CVE-2015-1308

kde-workspace 4.2.0 and plasma-workspace before 5.1.95 allows remote attackers to obtain input events, and consequently obtain passwords, by leveraging access to the X server when the screen is locked...

4.3CVSS6.7AI score0.00424EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2022/06/13 4:15 p.m.0 views

CVE-2022-31760

Dialog boxes can still be displayed even if the screen is locked in carrier-customized USSD services. Successful exploitation of this vulnerability may affect data integrity and confidentiality...

9.1CVSS5.3AI score0.00127EPSS
Exploits0References3Affected Software3
NVD
NVD
added 2022/06/13 4:15 p.m.14 views

CVE-2022-31760

Dialog boxes can still be displayed even if the screen is locked in carrier-customized USSD services. Successful exploitation of this vulnerability may affect data integrity and confidentiality...

9.1CVSS0.00127EPSS
Exploits0References2
Prion
Prion
added 2022/06/13 4:15 p.m.13 views

Design/Logic Flaw

Dialog boxes can still be displayed even if the screen is locked in carrier-customized USSD services. Successful exploitation of this vulnerability may affect data integrity and confidentiality...

6.4CVSS9.1AI score0.00127EPSS
Exploits0References2Affected Software3
CNVD
CNVD
added 2022/02/15 12:0 a.m.14 views

Google Android Input Validation Error Vulnerability (CNVD-2022-13208)

Google Android is a Linux-based open source operating system from Google, Inc. A security vulnerability exists in Google Android, which stems from a faulty access control vulnerability in the camera before Android R11, Android Q10 and Android P9. that allows untrusted applications to take picture...

6.2CVSS2.5AI score0.00183EPSS
Exploits0References1
OSV
OSV
added 2022/02/11 6:15 p.m.1 views

CVE-2022-23998

Improper access control vulnerability in Camera prior to versions 11.1.02.16 in Android R11, 10.5.03.77 in Android Q10 and 9.0.6.68 in Android P9 allows untrusted applications to take a picture in screenlock status...

5.5CVSS6.1AI score
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2022/02/11 6:15 p.m.1 views

CVE-2022-23998

Improper access control vulnerability in Camera prior to versions 11.1.02.16 in Android R11, 10.5.03.77 in Android Q10 and 9.0.6.68 in Android P9 allows untrusted applications to take a picture in screenlock status...

6.2CVSS5.4AI score0.00183EPSS
Exploits0References2
CNNVD
CNNVD
added 2022/02/11 12:0 a.m.2 views

Google Android 输入验证错误漏洞

Google Android is a Linux-based open source operating system from Google, Inc. A security vulnerability exists in Google Android, which stems from a faulty access control vulnerability in the camera before Android R11, Android Q10 and Android P9. that allows untrusted applications to take picture...

6.2CVSS5.7AI score0.00183EPSS
Exploits0References2
OSV
OSV
added 2020/05/14 9:15 p.m.0 views

CVE-2020-0105

In onKeyguardVisibilityChanged of keystoreservice.cpp, there is a missing permission check. This could lead to local escalation of privilege, allowing apps to use keyguard-bound keys when the screen is locked, with no additional execution privileges needed. User interaction is not needed for...

7.8CVSS7.2AI score0.00014EPSS
Exploits0References1
CNVD
CNVD
added 2020/03/25 12:0 a.m.1 views

Unspecified Vulnerability in Samsung Mobile Devices (CNVD-2020-34740)

Android is a free and open source operating system from Google based on the Linux kernel without GNU components. An unspecified vulnerability exists in Samsung mobile devices, which can be exploited by an attacker to establish a connection between a Samsung device and a new Bluetooth device while...

6.2CVSS6.6AI score0.00019EPSS
Exploits0References1
OSV
OSV
added 2018/11/06 5:29 p.m.1 views

CVE-2018-9458

In computeFocusedWindow of RootWindowContainer.java, and related functions, there is possible interception of keypresses due to focus being on the wrong window. This could lead to local escalation of privilege revealing the user's keypresses while the screen was locked with no additional executio...

7.8CVSS5.9AI score
Exploits0References2
securityvulns
securityvulns
added 2015/10/12 12:0 a.m.56 views

[USN-2741-1] Unity Settings Daemon vulnerability

========================================================================== Ubuntu Security Notice USN-2741-1 September 16, 2015 unity-settings-daemon vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its...

2.1CVSS0.4AI score0.00061EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2015/09/17 12:0 a.m.25 views

Ubuntu 14.04 LTS : Unity Settings Daemon vulnerability (USN-2741-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2741-1 advisory. It was discovered that the Unity Settings Daemon incorrectly allowed removable media to be mounted when the screen is locked. If a vulnerability were discovered i...

2.1CVSS5.6AI score0.00061EPSS
Exploits0References2
Ubuntu
Ubuntu
added 2015/09/16 5:12 p.m.49 views

USN-2741-1: Unity Settings Daemon vulnerability

It was discovered that the Unity Settings Daemon incorrectly allowed removable media to be mounted when the screen is locked. If a vulnerability were discovered in some other desktop component, such as an image library, a local attacker could possibly use this issue to gain access to the session...

2.1CVSS5.4AI score0.00061EPSS
Exploits0
OSV
OSV
added 2015/09/16 5:12 p.m.0 views

USN-2741-1 unity-settings-daemon vulnerability

It was discovered that the Unity Settings Daemon incorrectly allowed removable media to be mounted when the screen is locked. If a vulnerability were discovered in some other desktop component, such as an image library, a local attacker could possibly use this issue to gain access to the session...

2.1CVSS5.8AI score0.00061EPSS
Exploits0References2
NVD
NVD
added 2015/01/26 3:59 p.m.15 views

CVE-2015-1308

kde-workspace 4.2.0 and plasma-workspace before 5.1.95 allows remote attackers to obtain input events, and consequently obtain passwords, by leveraging access to the X server when the screen is locked...

4.3CVSS6.6AI score0.00424EPSS
Exploits0References4
UbuntuCve
UbuntuCve
added 2015/01/26 3:59 p.m.22 views

CVE-2015-1308

kde-workspace 4.2.0 and plasma-workspace before 5.1.95 allows remote attackers to obtain input events, and consequently obtain passwords, by leveraging access to the X server when the screen is locked...

4.3CVSS5.9AI score0.00424EPSS
Exploits0References1
Cvelist
Cvelist
added 2015/01/26 3:0 p.m.19 views

CVE-2015-1308

kde-workspace 4.2.0 and plasma-workspace before 5.1.95 allows remote attackers to obtain input events, and consequently obtain passwords, by leveraging access to the X server when the screen is locked...

6.6AI score0.00424EPSS
Exploits0References4
Rows per page
Query Builder