Design/Logic Flaw

Apple iOS before 8.1.1 does not properly enforce the failed-passcode limit, which makes it easier for physically proximate attackers to bypass the lock-screen protection mechanism via a series of guesses...

CVE-2014-4451

Apple iOS before 8.1.1 does not properly enforce the failed-passcode limit, which makes it easier for physically proximate attackers to bypass the lock-screen protection mechanism via a series of guesses...

CVE-2014-4463

Apple iOS before 8.1.1 allows physically proximate attackers to bypass the lock-screen protection mechanism, and view or transmit a Photo Library photo, via the FaceTime "Leave a Message" feature...

CVE-2014-4463

Affected software: Apple iOS prior to 8.1.1. Issue: The FaceTime Leave a Message feature on the lock screen could allow a physically proximate attacker to bypass the lock-screen protection and view or transmit a Photo Library photo. Root cause / scope: a protection bypass via FaceTime Leave a Mes...

CVE-2014-4451

CVE-2014-4451 affects Apple iOS before 8.1.1, where the failed-passcode limit was not properly enforced, allowing a physically proximate attacker to bypass the lock‑screen protection via a series of guesses. The vulnerability is addressed in iOS 8.1.1. Affected component: iOS lock screen passcode...

PT-2014-5923

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.1.1 Description The issue allows physically proximate attackers to bypass the lock-screen protection mechanism. This can lead to viewing or transmitting a Photo Library photo via the FaceTime "Leave a Message"...

PT-2014-5913

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.1.1 Description The issue concerns the lock-screen protection mechanism, where the failed-passcode limit is not properly enforced. This makes it easier for physically proximate attackers to bypass the lock screen...

CVE-2014-4463: Undefined Security Weakness

Apple iOS before 8.1.1 allows physically proximate attackers to bypass the lock-screen protection mechanism, and view or transmit a Photo Library photo, via the FaceTime "Leave a Message" feature...

CVE-2014-4451: Undefined Security Weakness

Apple iOS before 8.1.1 does not properly enforce the failed-passcode limit, which makes it easier for physically proximate attackers to bypass the lock-screen protection mechanism via a series of guesses...

libvncserver: integer overflow flaw, leading to a heap-based buffer overflow in screen size handling

An integer overflow flaw, leading to a heap-based buffer overflow, was found in the way screen sizes were handled by LibVNCServer. A malicious VNC server could use this flaw to cause a client to crash or, potentially, execute arbitrary code in the client...

KLA10601 Multiple vulnerabilities in Microsoft products

Multiple serious vulnerabilities have been found in Microsoft products. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service gain privileges, execute arbitrary code or obtain sensitive information. Below is a complete list of vulnerabilities 1...

Updated KDE 4 and related packages move to KDE 4.12.5

This KDE 4 update provides an upgrade to the last stable version of KDE Applications and Development Platform for the 4.12 series, and updates Plasma Workspaces to 4.11.12. This update fixes several security vulnerabilities - KMail/KIO POP3 SSL MITM Flaw CVE-2014-3494 - mga13545 - KAuth PID Reuse...

CVE-2014-7570

The Fire Equipments Screen lock aka com.locktheworld.screen.lock.theme.FireEquipments application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Fire Equipments Screen lock aka com.locktheworld.screen.lock.theme.FireEquipments application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7570

The CVE-2014-7570 entry concerns the Android app Fire Equipments Screen lock (com.locktheworld.screen.lock.theme.FireEquipments) v1.1. The vulnerability is due to failure to verify X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and obtain sensitive information via a...

CVE-2014-7570

The Fire Equipments Screen lock aka com.locktheworld.screen.lock.theme.FireEquipments application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-8101

Name of the Vulnerable Software and Affected Versions Fire Equipments Screen lock version 1.1 Description The issue concerns the application's failure to verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a...

CVE-2014-7570: Undefined Security Weakness

The Fire Equipments Screen lock aka com.locktheworld.screen.lock.theme.FireEquipments application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Fedora 20 : gnome-shell-3.10.4-9.fc20 (2014-12690)

Security fix for lock screen circumvention by consecutive screenshot requests triggering OOM situation Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Information disclosure

The Killer Screen lock aka com.cc.theme.shashou application 0.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...