CVE-2014-4463

Apple iOS before 8.1.1 allows physically proximate attackers to bypass the lock-screen protection mechanism, and view or transmit a Photo Library photo, via the FaceTime "Leave a Message" feature...

Information disclosure

Apple iOS before 8.1.1 allows physically proximate attackers to bypass the lock-screen protection mechanism, and view or transmit a Photo Library photo, via the FaceTime "Leave a Message" feature...

Design/Logic Flaw

Apple iOS before 8.1.1 does not properly enforce the failed-passcode limit, which makes it easier for physically proximate attackers to bypass the lock-screen protection mechanism via a series of guesses...

CVE-2014-4451

Apple iOS before 8.1.1 does not properly enforce the failed-passcode limit, which makes it easier for physically proximate attackers to bypass the lock-screen protection mechanism via a series of guesses...

CVE-2014-4451

Apple iOS before 8.1.1 does not properly enforce the failed-passcode limit, which makes it easier for physically proximate attackers to bypass the lock-screen protection mechanism via a series of guesses...

CVE-2014-4463

Affected software: Apple iOS prior to 8.1.1. Issue: The FaceTime Leave a Message feature on the lock screen could allow a physically proximate attacker to bypass the lock-screen protection and view or transmit a Photo Library photo. Root cause / scope: a protection bypass via FaceTime Leave a Mes...

CVE-2014-4451

CVE-2014-4451 affects Apple iOS before 8.1.1, where the failed-passcode limit was not properly enforced, allowing a physically proximate attacker to bypass the lock‑screen protection via a series of guesses. The vulnerability is addressed in iOS 8.1.1. Affected component: iOS lock screen passcode...

CVE-2014-4463

Apple iOS before 8.1.1 allows physically proximate attackers to bypass the lock-screen protection mechanism, and view or transmit a Photo Library photo, via the FaceTime "Leave a Message" feature...

libvncserver: integer overflow flaw, leading to a heap-based buffer overflow in screen size handling

An integer overflow flaw, leading to a heap-based buffer overflow, was found in the way screen sizes were handled by LibVNCServer. A malicious VNC server could use this flaw to cause a client to crash or, potentially, execute arbitrary code in the client...

KLA10601 Multiple vulnerabilities in Microsoft products

Multiple serious vulnerabilities have been found in Microsoft products. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service gain privileges, execute arbitrary code or obtain sensitive information. Below is a complete list of vulnerabilities 1...

Updated KDE 4 and related packages move to KDE 4.12.5

This KDE 4 update provides an upgrade to the last stable version of KDE Applications and Development Platform for the 4.12 series, and updates Plasma Workspaces to 4.11.12. This update fixes several security vulnerabilities - KMail/KIO POP3 SSL MITM Flaw CVE-2014-3494 - mga13545 - KAuth PID Reuse...

CVE-2014-7570

The Fire Equipments Screen lock aka com.locktheworld.screen.lock.theme.FireEquipments application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Fire Equipments Screen lock aka com.locktheworld.screen.lock.theme.FireEquipments application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7570

The CVE-2014-7570 entry concerns the Android app Fire Equipments Screen lock (com.locktheworld.screen.lock.theme.FireEquipments) v1.1. The vulnerability is due to failure to verify X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and obtain sensitive information via a...

CVE-2014-7570

The Fire Equipments Screen lock aka com.locktheworld.screen.lock.theme.FireEquipments application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Fedora 20 : gnome-shell-3.10.4-9.fc20 (2014-12690)

Security fix for lock screen circumvention by consecutive screenshot requests triggering OOM situation Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Information disclosure

The Killer Screen lock aka com.cc.theme.shashou application 0.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7086

The CVE-2014-7086 entry concerns the Android app Killer Screen lock (com.cc.theme.shashou) version 0.5, where the SSL/TLS client does not verify X.509 certificates. This root cause enables MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. The vulnerabilit...

CVE-2014-4431

Dock in Apple OS X before 10.10 does not properly manage the screen-lock state, which allows physically proximate attackers to view windows by leveraging an unattended workstation...

CVE-2014-4438

Race condition in LoginWindow in Apple OS X before 10.10 allows physically proximate attackers to obtain access by leveraging an unattended workstation on which screen locking had been attempted...