Cross site request forgery (csrf)

IBM Sametime Enterprise Meeting Server 8.5.2 and 9.0 could allow an authenticated user that has been invited to a Sametime meeting room, to cause the screen sharing to cease through the use of cross-site request forgery. IBM X-Force ID: 111895...

IBM Sametime Meetings Server Denial of Service Vulnerability (CNVD-2017-26409)

IBM Sametime is a suite of next-generation social communication tools from IBM in the United States. The tool helps users realize real-time business collaboration by integrating audio voice, data and video.Sametime Enterprise Meeting Server is one of the enterprise media servers. A security...

IBM Sametime Meetings Server Denial of Service Vulnerability

IBM Sametime is a suite of next-generation social communication tools from IBM in the United States. The tool helps users realize real-time business collaboration by integrating audio voice, data and video.Sametime Enterprise Meeting Server is one of the enterprise media servers. A security...

Cisco Remote Expert Manager Information Disclosure Vulnerability (CNVD-2017-08155)

Cisco Remote Expert Manager Software is the United States Cisco Cisco a remote management software. The software remote screen sharing, screen annotation and session recording and other collaborative functions. Cisco Remote Expert Manager Software has an information disclosure vulnerability in th...

Apple OS X CoreDisplay Information Disclosure Vulnerability

Apple OS X is a specialized operating system developed by Apple for Mac computers, of which CoreDisplay is a core display component. An information disclosure vulnerability exists in CoreDisplay in Apple OS X versions prior to 10.12, which can be exploited by an attacker to view any user's screen...

CVE-2016-4713

CoreDisplay in Apple OS X before 10.12 allows attackers to view arbitrary users' screens by leveraging screen-sharing access...

CVE-2016-4713

CoreDisplay in Apple OS X before 10.12 allows attackers to view arbitrary users' screens by leveraging screen-sharing access...

Design/Logic Flaw

CoreDisplay in Apple OS X before 10.12 allows attackers to view arbitrary users' screens by leveraging screen-sharing access...

CVE-2016-4713

CVE-2016-4713 affects CoreDisplay in Apple OS X prior to 10.12. The vulnerability is a session-management issue where a user with screen-sharing access could view another user’s screen. The macOS Sierra 10.12 security content indicates the issue was addressed via improved session tracking, implyi...

CVE-2016-4713

CoreDisplay in Apple OS X before 10.12 allows attackers to view arbitrary users' screens by leveraging screen-sharing access...

The vulnerability of the Mac OS X operating system, which allows a perpetrator to gain access to protected information

The vulnerability of the AppleEvents component’s implementation in the Mac OS X operating system is related to deficiencies in access control for certain functions. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information using...

CVE-2015-5849

The filtering implementation in AppleEvents in Apple OS X before 10.11 mishandles attempts to send events to a different user, which allows attackers to bypass intended access restrictions by leveraging a screen-sharing connection...

Design/Logic Flaw

The filtering implementation in AppleEvents in Apple OS X before 10.11 mishandles attempts to send events to a different user, which allows attackers to bypass intended access restrictions by leveraging a screen-sharing connection...

CVE-2015-5849

The CVE-2015-5849 issue affects Apple OS X (pre-10.11) where the AppleEvents filtering implementation mishandles attempts to send events to a different user. This allows a local user, connected via a screen-sharing session, to bypass intended access restrictions by delivering AppleEvents to anoth...

CVE-2015-5849

The filtering implementation in AppleEvents in Apple OS X before 10.11 mishandles attempts to send events to a different user, which allows attackers to bypass intended access restrictions by leveraging a screen-sharing connection...

Apple OS X Apple Event Delivery Vulnerability

Apple OS X is an operating system developed by Apple Inc. Apple OS X Apple Event Filter has a security vulnerability that allows Apple events to be sent to a local user session by a linked user via screen sharing...

CVE-2015-1148

Screen Sharing in Apple OS X before 10.10.3 stores the password of a user in a log file, which might allow context-dependent attackers to obtain sensitive information by reading this file...

CVE-2015-1148

CVE-2015-1148 affects Apple OS X versions earlier than 10.10.3. The vulnerability arises because Screen Sharing stores a user’s password in a log file, which could allow a context-dependent (local) attacker to read sensitive information from that file. The available documents specify the affected...

CVE-2015-1148

Screen Sharing in Apple OS X before 10.10.3 stores the password of a user in a log file, which might allow context-dependent attackers to obtain sensitive information by reading this file...

Apple Mac OS X User Password Recording Vulnerability

Apple Mac OS X is an operating system developed by Apple Inc. Apple Mac OS X, in some cases, screen sharing records user passwords, which can be exploited by attackers to obtain sensitive information...