CVE-2014-7086

The CVE-2014-7086 entry concerns the Android app Killer Screen lock (com.cc.theme.shashou) version 0.5, where the SSL/TLS client does not verify X.509 certificates. This root cause enables MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. The vulnerabilit...

PT-2014-7758

Name of the Vulnerable Software and Affected Versions The Killer Screen lock aka com.cc.theme.shashou application version 0.5 for Android Description The application does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive...

CVE-2014-7086: Undefined Security Weakness

The Killer Screen lock aka com.cc.theme.shashou application 0.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-4438

Race condition in LoginWindow in Apple OS X before 10.10 allows physically proximate attackers to obtain access by leveraging an unattended workstation on which screen locking had been attempted...

CVE-2014-4431

Dock in Apple OS X before 10.10 does not properly manage the screen-lock state, which allows physically proximate attackers to view windows by leveraging an unattended workstation...

Design/Logic Flaw

Dock in Apple OS X before 10.10 does not properly manage the screen-lock state, which allows physically proximate attackers to view windows by leveraging an unattended workstation...

Race condition

Race condition in LoginWindow in Apple OS X before 10.10 allows physically proximate attackers to obtain access by leveraging an unattended workstation on which screen locking had been attempted...

CVE-2014-4431

CVE-2014-4431 affects Apple OS X before 10.10, where a state-management flaw in the Dock can allow windows to be visible on screen-lock when the workstation is unattended. The issue is described as a local, state-tracking problem that could reveal content; exploitation details are not provided in...

PT-2014-5901

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.10 Description A race condition exists in the LoginWindow of Apple OS X, allowing physically proximate attackers to gain access to an unattended workstation where screen locking had been attempted. Recommendatio...

CVE-2014-4438: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in LoginWindow in Apple OS X before 10.10 allows physically proximate attackers to obtain access by leveraging an unattended workstation on which screen locking had been attempted...

CVE-2014-4431: Undefined Security Weakness

Dock in Apple OS X before 10.10 does not properly manage the screen-lock state, which allows physically proximate attackers to view windows by leveraging an unattended workstation...

DEBIAN-CVE-2014-8240

Integer overflow in TigerVNC allows remote VNC servers to cause a denial of service crash and possibly execute arbitrary code via vectors related to screen size handling, which triggers a heap-based buffer overflow, a similar issue to CVE-2014-6051...

CVE-2014-8240

Integer overflow in TigerVNC allows remote VNC servers to cause a denial of service crash and possibly execute arbitrary code via vectors related to screen size handling, which triggers a heap-based buffer overflow, a similar issue to CVE-2014-6051...

CVE-2014-8240

Integer overflow in TigerVNC allows remote VNC servers to cause a denial of service crash and possibly execute arbitrary code via vectors related to screen size handling, which triggers a heap-based buffer overflow, a similar issue to CVE-2014-6051...

CVE-2014-8240

Integer overflow in TigerVNC allows remote VNC servers to cause a denial of service crash and possibly execute arbitrary code via vectors related to screen size handling, which triggers a heap-based buffer overflow, a similar issue to CVE-2014-6051...

PT-2014-8436

Name of the Vulnerable Software and Affected Versions TigerVNC affected versions not specified Description The issue is related to an integer overflow in TigerVNC, which can be triggered by remote VNC servers through vectors related to screen size handling. This can cause a denial of service cras...

CVE-2014-8240: Improper Restriction of Operations within the Bounds of a Memory Buffer

Integer overflow in TigerVNC allows remote VNC servers to cause a denial of service crash and possibly execute arbitrary code via vectors related to screen size handling, which triggers a heap-based buffer overflow, a similar issue to CVE-2014-6051...

PT-2014-7892

Name of the Vulnerable Software and Affected Versions GNOME Shell versions 3.14.x through 3.14.0 Description The issue allows physically proximate attackers to execute arbitrary commands on an unattended workstation by making many PrtSc requests. This is possible when the Screen Lock feature is...

libdmx: Multiple integer overflows leading to heap-based bufer overflows

Multiple integer overflows in X.org libdmx 1.1.2 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the 1 DMXGetScreenAttributes, 2 DMXGetWindowAttributes, and 3 DMXGetInputAttributes functions...

Website Traffic Visualization: Logstalgia

Website Traffic Visualization Logstalgia is a website traffic visualization that replays or streams web-server access logs as a pong-like battle between the web server and an never ending torrent of requests. Requests appear as colored balls the same color as the host which travel across the scre...