CVE-2013-4426: Undefined Security Weakness

pyxtrlock before 0.1 uses an incorrect variable name, which allows physically proximate attackers to bypass the lock screen via multiple failed authentication attempts, which trigger a crash...

PT-2014-2788

Name of the Vulnerable Software and Affected Versions pyxtrlock versions prior to 0.2 Description The issue arises from improper checking of return values of the xcb grab pointer and xcb grab keyboard XCB library functions. This allows physically proximate attackers to gain access to the keyboard...

PT-2014-2787

Name of the Vulnerable Software and Affected Versions pyxtrlock versions prior to 0.1 Description The issue allows physically proximate attackers to bypass the lock screen via multiple failed authentication attempts, which trigger a crash due to an incorrect variable name. Recommendations For...

CVE-2014-3203

Unity before 7.2.1, as used in Ubuntu 14.04, does not properly restrict access to the Dash when the lock screen is active, which allows physically proximate attackers to bypass the lock screen and execute arbitrary commands, as demonstrated by pressing the SUPER key before the screen auto-locks...

CVE-2014-3204

Unity before 7.2.1, as used in Ubuntu 14.04, does not properly handle keyboard shortcuts, which allows physically proximate attackers to bypass the lock screen and execute arbitrary commands, as demonstrated by right-clicking on the indicator bar and then pressing the ALT and F2 keys...

CVE-2014-3202

Unity before 7.2.1 does not properly handle entry activation, which allows physically proximate attackers to bypass the lock screen by holding the ENTER key, which triggers the process to crash...

UBUNTU-CVE-2014-3202

Unity before 7.2.1 does not properly handle entry activation, which allows physically proximate attackers to bypass the lock screen by holding the ENTER key, which triggers the process to crash...

UBUNTU-CVE-2014-3204

Unity before 7.2.1, as used in Ubuntu 14.04, does not properly handle keyboard shortcuts, which allows physically proximate attackers to bypass the lock screen and execute arbitrary commands, as demonstrated by right-clicking on the indicator bar and then pressing the ALT and F2 keys...

Design/Logic Flaw

Unity before 7.2.1, as used in Ubuntu 14.04, does not properly restrict access to the Dash when the lock screen is active, which allows physically proximate attackers to bypass the lock screen and execute arbitrary commands, as demonstrated by pressing the SUPER key before the screen auto-locks...

Design/Logic Flaw

Unity before 7.2.1, as used in Ubuntu 14.04, does not properly handle keyboard shortcuts, which allows physically proximate attackers to bypass the lock screen and execute arbitrary commands, as demonstrated by right-clicking on the indicator bar and then pressing the ALT and F2 keys...

Code injection

Unity before 7.2.1 does not properly handle entry activation, which allows physically proximate attackers to bypass the lock screen by holding the ENTER key, which triggers the process to crash...

CVE-2014-3202

Unity before 7.2.1 does not properly handle entry activation, which allows physically proximate attackers to bypass the lock screen by holding the ENTER key, which triggers the process to crash...

CVE-2014-3204

Unity before 7.2.1, as used in Ubuntu 14.04, does not properly handle keyboard shortcuts, which allows physically proximate attackers to bypass the lock screen and execute arbitrary commands, as demonstrated by right-clicking on the indicator bar and then pressing the ALT and F2 keys...

CVE-2014-3203

Unity before 7.2.1, as used in Ubuntu 14.04, does not properly restrict access to the Dash when the lock screen is active, which allows physically proximate attackers to bypass the lock screen and execute arbitrary commands, as demonstrated by pressing the SUPER key before the screen auto-locks...

CVE-2014-3202

Unity before 7.2.1 does not properly handle entry activation, which allows physically proximate attackers to bypass the lock screen by holding the ENTER key, which triggers the process to crash...

CVE-2014-3203

Unity before 7.2.1, as used in Ubuntu 14.04, does not properly restrict access to the Dash when the lock screen is active, which allows physically proximate attackers to bypass the lock screen and execute arbitrary commands, as demonstrated by pressing the SUPER key before the screen auto-locks...

CVE-2014-3204

Unity before 7.2.1, as used in Ubuntu 14.04, does not properly handle keyboard shortcuts, which allows physically proximate attackers to bypass the lock screen and execute arbitrary commands, as demonstrated by right-clicking on the indicator bar and then pressing the ALT and F2 keys...

CVE-2014-3202

Unity before 7.2.1 improperly handles entry activation, allowing physically proximate attackers to bypass the lock screen by holding ENTER, causing the process to crash. Affected: Unity; root cause: incorrect handling of entry activation; impact: local bypass of lock screen and crash. Remediation...

CVE-2014-3203

Unity before 7.2.1 (as used in Ubuntu 14.04) has a vulnerability where the Dash can be accessed while the lock screen is active, allowing physically proximate attackers to bypass the lock screen and run arbitrary commands by pressing the SUPER key before auto-lock. Root cause: insufficient restri...

CVE-2014-3204

Unity before 7.2.1, as used in Ubuntu 14.04, is vulnerable to local bypass of the lock screen. The issue arises when a user right-clicks the indicator bar and then presses ALT+F2, enabling a physically proximate attacker to bypass the lock screen and execute arbitrary commands. Affected component...