CVE-2018-4238

An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Siri" component. It allows physically proximate attackers to bypass the lock-screen protection mechanism and enable Siri...

CVE-2018-4252

An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Siri" component. It allows physically proximate attackers to bypass the lock-screen protection mechanism and obtain private notification content via Siri...

Code injection

An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Siri" component. It allows physically proximate attackers to bypass the lock-screen protection mechanism and enable Siri...

Design/Logic Flaw

An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Siri" component. It allows physically proximate attackers to bypass the lock-screen protection mechanism and obtain private notification content via Siri...

Design/Logic Flaw

An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Magnifier" component. It allows physically proximate attackers to bypass the lock-screen protection mechanism and see the most recent Magnifier image...

CVE-2018-4239

An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Magnifier" component. It allows physically proximate attackers to bypass the lock-screen protection mechanism and see the most recent Magnifier image...

CVE-2018-4239

CVE-2018-4239 concerns the Magnifier component in iOS prior to 11.4. A local, physically proximate attacker could view the last image used in Magnifier from the lock screen due to a permissions issue. Apple’s security content for iOS 11.4 notes this was addressed by adding/strengthening permissio...

CVE-2018-4252

CVE-2018-4252 affects iOS before 11.4 (Siri). A physical-access attacker could enable Siri from the lock screen and access protected notification content; Apple corrected this in iOS 11.4 by tightening Siri permissions and lock-screen checks. The issue is explicitly tied to Siri permissions and l...

CVE-2018-4238

CVE-2018-4238 affects iOS

CVE-2018-4252

An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Siri" component. It allows physically proximate attackers to bypass the lock-screen protection mechanism and obtain private notification content via Siri...

CVE-2018-4238

An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Siri" component. It allows physically proximate attackers to bypass the lock-screen protection mechanism and enable Siri...

Design/Logic Flaw

Twonky Server before 8.5.1 has XSS via a folder name on the Shared Folders screen...

Fair Smart Antivirus 8 filppd.sys Driver Has Denial of Service Vulnerability

Fil Smart Antivirus 8 is an antivirus program from Beijing Fil Shield Technology Co. filppd.sys is a kernel mode driver in Fil Smart Antivirus 8. A denial of service vulnerability exists in the filppd.sys driver in Fair Smart Antivirus 8 V8.1.5.6109 and V8.1.7.6865. An attacker can exploit the...

Social Media Privacy Dominates Apple iOS 12, macOS Launches

Social media privacy is top of mind for Apple on the heels of the Facebook-Cambridge Analytica controversy. On Monday, Apple released the latest versions of its desktop and mobile operating systems at the Worldwide Developers Conference WWDC, which addresses a bevy of security and privacy concern...

Apple iOS Magnifier Permission Vulnerability

Apple iOS is an operating system developed by Apple for mobile devices, and Magnifier is one of the screen magnification components. A security vulnerability exists in the Magnifier component in Apple iOS versions prior to 11.4. An attacker in close physical proximity could exploit this...

Apple iOS Siri Permissions Vulnerability (CNVD-2018-12172)

Apple iOS is an operating system developed by Apple Inc. for mobile devices, of which Siri is a voice control component. A security vulnerability exists in the Siri component of Apple iOS prior to version 11.4. An attacker in close physical proximity could use Siri to bypass the lock screen...

Apple iOS Siri Permissions Vulnerability

Apple iOS is an operating system developed by Apple Inc. for mobile devices, of which Siri is a voice control component. A security vulnerability exists in the Siri component in Apple iOS versions prior to 11.4. An attacker in close physical proximity could exploit this vulnerability to bypass th...

Microsoft Windows: Interactive logon: Machine inactivity limit

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winilmachineinactivitylimit.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for Interactive logon: Machine inactivity limit Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Input validation

An issue was discovered in Joomla! Core before 3.8.8. The web install application would autofill password fields after either a form validation error or navigating to a previous install step, and display the plaintext password for the administrator account at the confirmation screen...

Cybozu Mailwise Cross-Site Scripting Vulnerability

Cybozu Mailwise is a Web-based e-mail system from Cybozu, and E-mail Details Screen is one of the components for viewing e-mail details. A cross-site scripting vulnerability exists in E-mail Details Screen in Cybozu Mailwise versions 5.0.0 through 5.4.1. A remote attacker can use this vulnerabili...