CVE-2014-3203

Unity before 7.2.1, as used in Ubuntu 14.04, does not properly restrict access to the Dash when the lock screen is active, which allows physically proximate attackers to bypass the lock screen and execute arbitrary commands, as demonstrated by pressing the SUPER key before the screen auto-locks...

CVE-2014-3202

Unity before 7.2.1 does not properly handle entry activation, which allows physically proximate attackers to bypass the lock screen by holding the ENTER key, which triggers the process to crash...

CVE-2014-3202

Unity before 7.2.1 improperly handles entry activation, allowing physically proximate attackers to bypass the lock screen by holding ENTER, causing the process to crash. Affected: Unity; root cause: incorrect handling of entry activation; impact: local bypass of lock screen and crash. Remediation...

CVE-2014-3204

Unity before 7.2.1, as used in Ubuntu 14.04, does not properly handle keyboard shortcuts, which allows physically proximate attackers to bypass the lock screen and execute arbitrary commands, as demonstrated by right-clicking on the indicator bar and then pressing the ALT and F2 keys...

CVE-2014-3204

Unity before 7.2.1, as used in Ubuntu 14.04, is vulnerable to local bypass of the lock screen. The issue arises when a user right-clicks the indicator bar and then presses ALT+F2, enabling a physically proximate attacker to bypass the lock screen and execute arbitrary commands. Affected component...

Ubuntu Update for unity USN-2184-1

Check for the Version of unity OpenVAS Vulnerability Test $Id: gbubuntuUSN21841.nasl 7957 2017-12-01 06:40:08Z santu $ Ubuntu Update for unity USN-2184-1 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; yo...

CVE-2014-2384 - Invalid Pointer Dereference in VMware Workstation and Player

Vulnerability title: Invalid Pointer Dereference in VMware Workstation and Player CVE: CVE-2014-2384 Vendor: VMware Product: Workstation, Player Affected version: VMware WorkStation v10.0.1 build-1379776 and VMware Player v6.0.1 build-1379776 Fixed version: N/A Reported by: Kyriakos Economou...

Ubuntu: Security Advisory (USN-2184-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for unity USN-2184-2

Check for the Version of unity OpenVAS Vulnerability Test $Id: gbubuntuUSN21842.nasl 7957 2017-12-01 06:40:08Z santu $ Ubuntu Update for unity USN-2184-2 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; yo...

[USN-2186-1] Date and Time Indicator vulnerability

========================================================================== Ubuntu Security Notice USN-2186-1 April 30, 2014 indicator-datetime vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its...

CVE-2013-7374

The Ubuntu Date and Time Indicator aka indicator-datetime 13.10.0+13.10.x before 13.10.0+13.10.20131023.2-0ubuntu1.1 does not properly restrict access to Evolution, which allows local users to bypass the greeter screen restrictions by clicking the date...

Sql injection

The Ubuntu Date and Time Indicator aka indicator-datetime 13.10.0+13.10.x before 13.10.0+13.10.20131023.2-0ubuntu1.1 does not properly restrict access to Evolution, which allows local users to bypass the greeter screen restrictions by clicking the date...

CVE-2013-7374

The Ubuntu Date and Time Indicator aka indicator-datetime 13.10.0+13.10.x before 13.10.0+13.10.20131023.2-0ubuntu1.1 does not properly restrict access to Evolution, which allows local users to bypass the greeter screen restrictions by clicking the date...

CVE-2013-7374

CVE-2013-7374 affects Ubuntu indicator-datetime (indicator-datetime package) on Ubuntu 13.10. The vulnerability allows a local user to bypass greeter screen restrictions by clicking the date, enabling access to Evolution and potentially other apps with greeter privileges. The Ubuntu Security Noti...

[USN-2184-1] Unity vulnerabilities

========================================================================== Ubuntu Security Notice USN-2184-1 April 29, 2014 unity vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

[USN-2184-2] Unity vulnerabilities

========================================================================== Ubuntu Security Notice USN-2184-2 April 30, 2014 unity vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

Ubuntu Unity protection bypass

Screen lock bypass...

Ubuntu 13.10 : indicator-datetime vulnerability (USN-2186-1)

It was discovered that the Date and Time Indicator incorrectly allowed Evolution to be opened at the greeter screen. An attacker could use this issue to possibly gain unexpected access to applications such as a web browser with privileges of the greeter user. Note that Tenable Network Security ha...

Ubuntu 14.04 LTS : Unity vulnerabilities (USN-2184-2)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2184-2 advisory. USN-2184-1 fixed lock screen vulnerabilities in Unity. Further testing has uncovered more issues which have been fixed in this update. This update also fixes a...

USN-2184-2: Unity vulnerabilities

USN-2184-1 fixed lock screen vulnerabilities in Unity. Further testing has uncovered more issues which have been fixed in this update. This update also fixes a regression with the shutdown dialogue. We apologize for the inconvenience. Original advisory details: Frédéric Bardy discovered that Unit...