CVE-2022-40297

UBports Ubuntu Touch 16.04 is affected by CVE-2022-40297 where the screen-unlock 4-digit passcode is usable as the sudo password, enabling privilege escalation to a privileged shell. The root cause described across sources is that a four-digit screen unlock code can be exploited to gain root via ...

PT-2022-25333 · Ubports · Ubports Ubuntu Touch

Name of the Vulnerable Software and Affected Versions: UBports Ubuntu Touch version 16.04 Description: The issue allows the screen-unlock passcode to be used for a privileged shell via Sudo. This passcode is only four digits, which is far below the typical length and complexity for a user account...

Denial Of Service (DoS)

XScreenSaver is vulnerable Denial of Service DoS. When a system is using a remote directory service for login credentials, a local attacker may be able to cause a network outage causing XScreenSaver to crash, unlocking the screen...

DEBIAN-CVE-2017-12164

A flaw was discovered in gdm 3.24.1 where gdm greeter was no longer setting the ranonce boolean during autologin. If autologin was enabled for a victim, an attacker could simply select 'login as another user' to unlock their screen...

CVE-2017-12164

A flaw was discovered in the gdm where gdm greeter was no longer setting the ranonce boolean during autologin. If autologin was enable for a victim, an attacker could simply select 'login as another user' to unlock their screen...

CVE-2016-2312

Turning all screens off in Plasma-workspace and kscreenlocker while the lock screen is shown can result in the screen being unlocked when turning a screen on again...

CVE-2016-2312

Turning all screens off in Plasma-workspace and kscreenlocker while the lock screen is shown can result in the screen being unlocked when turning a screen on again...

Boozt Fashion AB: ADB Backup is enabled within AndroidManifest

ADB Backup is enabled for this app. ADB Backup feature is a good tool for backing up all of your files. If it's enabled, malicious users who have your phone can copy all of the sensitive data for this app in your phone. Requirement: Unlock phone's screen; Enable the developer mode. Sensitive data...

Apple iOS multiple security vulnerabilities

Screen unlock, information disclosure, restrictions bypass, multiple memory corruptions, weak encryption, multiple vulnerabilities in different libraries...

Design/Logic Flaw

pyxtrlock before 0.2 does not properly check the return values of the 1 xcbgrabpointer and 2 xcbgrabkeyboard XCB library functions, which allows physically proximate attackers to gain access to the keyboard or mouse without unlocking the screen via unspecified vectors...

CVE-2013-4427

pyxtrlock before 0.2 does not properly check the return values of the 1 xcbgrabpointer and 2 xcbgrabkeyboard XCB library functions, which allows physically proximate attackers to gain access to the keyboard or mouse without unlocking the screen via unspecified vectors...

SuSE9 Security Update : xscreensaver (YOU Patch Number 11506)

Xscreensaver could crash under certain circumstances causing the screen to unlock. That could happen for example when LDAP is used for authentication and the network connection gets interrupted for a long time. CVE-2007-1859 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text descriptio...

Mandriva Update for xscreensaver MDKSA-2007:097 (xscreensaver)

Check for the Version of xscreensaver OpenVAS Vulnerability Test Mandriva Update for xscreensaver MDKSA-2007:097 xscreensaver Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

RedHat Update for gnome-screensaver RHSA-2008:0218-01

Check for the Version of gnome-screensaver OpenVAS Vulnerability Test RedHat Update for gnome-screensaver RHSA-2008:0218-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

gnome-screensaver security update

2.16.1-5.1 Resolves: 436521 - don't unlock the screen when pwent lookup fails...

Session fixation

xscreensaver 5.03 and earlier, when running without xscreensaver-gl-extras GL extras installed, crashes when /usr/bin/xscreensaver-gl-helper does not exist and a user attempts to unlock the screen, which allows attackers with physical access to gain access to the locked session...

Design/Logic Flaw

GNU screen 4.0.3 allows local users to unlock the screen via a CTRL-C sequence at the password prompt. NOTE: multiple third parties report inability to reproduce this issue...

CVE-2007-3048

GNU screen 4.0.3 allows local users to unlock the screen via a CTRL-C sequence at the password prompt. NOTE: multiple third parties report inability to reproduce this issue...

CVE-2007-1859

XScreenSaver 4.10, when using a remote directory service for credentials, does not properly handle the results from the getpwuid function in drivers/lock.c when there is no network connectivity, which causes XScreenSaver to crash and unlock the screen and allows local users to bypass authenticati...

CVE-2007-1859

XScreenSaver 4.10 is affected when using a remote directory service for credentials. The root cause is in drivers/lock.c where getpwuid handling can fail when there is no network connectivity, causing XScreenSaver to crash and unlock the screen, effectively allowing a local attacker to bypass aut...