CVE-2021-30702

CVE-2021-30702 affects macOS where a logic issue with state management allowed bypass of the Login Window when a device is physically accessed. Apple lists fixes in macOS Big Sur 11.4, Catalina Security Update 2021-003, and Mojave Security Update 2021-004. The description indicates the vulnerabil...

CVE-2021-30699

A window management issue was addressed with improved state management. This issue is fixed in iOS 14.6 and iPadOS 14.6. A user may be able to view restricted content from the lockscreen...

CVE-2021-30668

CVE-2021-30668 affects macOS Big Sur, where a local attacker with physical access could bypass the Login Window during a software update. The issue was addressed by Apple with improved checks and is fixed in macOS Big Sur 11.4. The public descriptions note a logic/state management improvement, en...

CVE-2021-30668

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.4. A person with physical access to a Mac may be able to bypass Login Window during a software update...

PT-2021-18816

Name of the Vulnerable Software and Affected Versions iOS versions prior to 14.6 iPadOS versions prior to 14.6 Description A window management issue allowed a user to potentially view restricted content from the lock screen due to inadequate state management. Recommendations For iOS versions prio...

CVE-2021-30668: Improper Authentication

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.4. A person with physical access to a Mac may be able to bypass Login Window during a software update...

CVE-2021-30702: Improper Authentication

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave. A person with physical access to a Mac may be able to bypass Login Window...

Time window must be chosen carefully

Handle tensors Vulnerability details Impact The variable timeWindow in the formula of valuation/README.md must be chosen carefully. In fact, it should probably vary with the amount of user volume the protocol has on each asset. Consider what happens when timeWindow is very small 5min. A price...

Null pointer deference in fltk

An issue was discovered in the fltk crate before 0.15.3 for Rust. There is a NULL pointer dereference during attempted use of a non-raster image for a window icon...

GHSA-7QCC-G2M9-8533 Null pointer deference in fltk

An issue was discovered in the fltk crate before 0.15.3 for Rust. There is a NULL pointer dereference during attempted use of a non-raster image for a window icon...

Security Advisory 0064

Security Advisory 0064 . CSAF PDF Date: August 20th, 2021 Version: 1.0 Revision | Date | Changes ---|---|--- 1.0 | August 20th, 2021 | Initial Release The CVE-ID tracking this issue: CVE-2021-28498 CVSSv3.1 Base Score: 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H The CVE-ID tracking this issu...

[SECURITY] Fedora 33 Update: xscreensaver-5.45-2.fc33

A modular screen saver and locker for the X Window System. More than 200 display modes are included in this package. This is a metapackage for installing all default packages related to XScreenSaver...

Fedora: Security Advisory for xscreensaver (FEDORA-2021-5af4452ffd)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

X Window System Graphical Server Access Disclosure

The vulnerability of the X Window System graphical server, as well as operating systems like ALT Linux and ROSA Linux, stems from the lack of checks to ensure that a child window is created by only one application within another application’s window. Exploiting this vulnerability allows an attack...

X Window System Privilege Escalation

The vulnerability of the X Window System graphical server, as well as operating systems like ALT Linux and ROSA Linux, is related to deficiencies in access control when transmitting window events initiated by low-privilege graphical applications to windows with high privileges. Exploiting this...

Privilege Escalation

binutils is vulnerable to privilege escalation. The vulnerability exists due to an open race window when writing output in ar, objcopy, strip and ranlib...

gnome-shell-extensions bug fix and enhancement update

An update for gnome-shell-extensions is now available for Rocky LinuxEnterprise Linux 8. GNOME Shell extensions allow for modifying the default GNOME Shell interface and its parts, such as window management and application launching...

CVE-2021-33594

An address bar spoofing vulnerability was discovered in Safe Browser for Android. When user clicks on a specially crafted a malicious URL, it appears like a legitimate one on the address bar, while the content comes from other domain and presented in a window, covering the original content. A...

gnome-shell-extensions bug fix and enhancement update

GNOME Shell extensions allow for modifying the default GNOME Shell interface and its parts, such as window management and application launching. Bug Fixes and Enhancements: RFE Disable left edge gesture BZ1962169...

Liferay Portal and Liferay DXP Cross-Site Scripting Vulnerability (CNVD-2021-62969)

Liferay Portal and Liferay DXP are both products of Liferay, a J2EE-based portal solution that uses EJB and JMS technologies and serves as a web publishing and shared workspace, enterprise collaboration platform, social network, etc. Liferay DXP is a digital experience collaboration platform...