Latest CVE Feed
-
2.4
LOWCVE-2020-12039
Baxter Sigma Spectrum Infusion Pumps Sigma Spectrum Infusion System v's6.x model 35700BAX & Baxter Spectrum Infusion System v's8.x model 35700BAX2 contain hardcoded passwords when physically entered on the keypad provide access to biomedical menus includi... Read more
- EPSS Score: %0.06
- Published: Jun. 29, 2020
- Modified: Nov. 21, 2024
-
2.4
LOWCVE-2019-5452
Bypass lock protection in the Nextcloud Android app prior to version 3.6.2 causes leaking of thumbnails when requesting the Android content provider although the lock protection was not solved.... Read more
Affected Products : nextcloud- EPSS Score: %0.06
- Published: Jul. 30, 2019
- Modified: Nov. 21, 2024
-
2.4
LOWCVE-2020-4197
IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 174908.... Read more
- EPSS Score: %0.10
- Published: Mar. 03, 2020
- Modified: Nov. 21, 2024
-
2.4
LOWCVE-2020-4071
In django-basic-auth-ip-whitelist before 0.3.4, a potential timing attack exists on websites where the basic authentication is used or configured, i.e. BASIC_AUTH_LOGIN and BASIC_AUTH_PASSWORD is set. Currently the string comparison between configured cre... Read more
Affected Products : django-basic-auth-ip-whitelist- EPSS Score: %0.11
- Published: Jun. 24, 2020
- Modified: Nov. 21, 2024
-
2.4
LOWCVE-2011-2343
The Bluetooth stack in Android before 2.3.6 allows a physically proximate attacker to obtain contact information via an AT phonebook transfer.... Read more
Affected Products : android- EPSS Score: %0.02
- Published: Feb. 12, 2020
- Modified: Nov. 21, 2024
-
2.4
LOWCVE-2020-1791
HUAWEI Mate 20 smartphones with versions earlier than 10.0.0.185(C00E74R3P8) have an improper authorization vulnerability. The system has a logic judging error under certain scenario, successful exploit could allow the attacker to switch to third desktop ... Read more
- EPSS Score: %0.06
- Published: Feb. 18, 2020
- Modified: Nov. 21, 2024
-
2.4
LOWCVE-2013-0420
Unspecified vulnerability in the VirtualBox component in Oracle Virtualization 4.0, 4.1, and 4.2 allows local users to affect integrity and availability via unknown vectors related to Core. NOTE: The previous information was obtained from the January 201... Read more
- EPSS Score: %0.11
- Published: Jan. 17, 2013
- Modified: Apr. 11, 2025
-
2.4
LOWCVE-2022-20245
In WindowManager, there is a possible method to create a recording of the lock screen due to an insecure default value. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploita... Read more
Affected Products : android- EPSS Score: %0.02
- Published: Aug. 11, 2022
- Modified: Nov. 21, 2024
-
2.4
LOWCVE-2024-27814
This issue was addressed through improved state management. This issue is fixed in watchOS 10.5. A person with physical access to a device may be able to view contact information from the lock screen.... Read more
Affected Products : watchos- Published: Jun. 10, 2024
- Modified: Mar. 29, 2025
-
2.4
LOWCVE-2019-8732
The issue was addressed with improved data deletion. This issue is fixed in iOS 13. Deleted calls remained visible on the device.... Read more
Affected Products : iphone_os- EPSS Score: %0.06
- Published: Oct. 27, 2020
- Modified: Nov. 21, 2024
-
2.4
LOWCVE-2019-8777
A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra. A local attacke... Read more
- EPSS Score: %0.04
- Published: Oct. 27, 2020
- Modified: Nov. 21, 2024
-
2.4
LOWCVE-2022-48506
A flawed pseudorandom number generator in Dominion Voting Systems ImageCast Precinct (ICP and ICP2) and ImageCast Evolution (ICE) scanners allows anyone to determine the order in which ballots were cast from public ballot-level data, allowing deanonymizat... Read more
Affected Products : democracy_suite- EPSS Score: %0.06
- Published: Jun. 19, 2023
- Modified: Jan. 02, 2025
-
2.4
LOWCVE-2010-2397
Unspecified vulnerability in Oracle Sun Java System Application Server 8.0, 8.1, and 8.2; and GlassFish Enterprise Server 2.1.1; allows local users to affect confidentiality and integrity, related to the GUI.... Read more
- EPSS Score: %0.05
- Published: Jul. 13, 2010
- Modified: Apr. 11, 2025
-
2.4
LOWCVE-2024-32325
TOTOLINK EX200 V4.0.3c.7646_B20201211 contains a Cross-site scripting (XSS) vulnerability through the ssid parameter in the setWiFiExtenderConfig function.... Read more
- Published: Apr. 18, 2024
- Modified: May. 13, 2025
-
2.4
LOWCVE-2020-9251
HUAWEI Mate 20 smartphones with versions earlier than 10.1.0.160(C00E160R2P11) have an improper authorization vulnerability. The software does not properly restrict certain operation in certain scenario, the attacker should do certain configuration before... Read more
- EPSS Score: %0.03
- Published: Jul. 27, 2020
- Modified: Nov. 21, 2024
-
2.4
LOWCVE-2020-1831
HUAWEI Mate 20 smartphones with versions earlier than 10.0.0.195(SP31C00E74R3P8) have an improper authorization vulnerability. The digital balance function does not sufficiently restrict the using time of certain user, successful exploit could allow the u... Read more
- EPSS Score: %0.02
- Published: May. 29, 2020
- Modified: Nov. 21, 2024
-
2.4
LOWCVE-2022-36857
Improper Authorization vulnerability in Photo Editor prior to SMR Sep-2022 Release 1 allows physical attackers to read internal application data.... Read more
- EPSS Score: %0.09
- Published: Sep. 09, 2022
- Modified: Nov. 21, 2024
-
2.4
LOWCVE-2022-24885
Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. Prior to version 3.19.1, users can bypass a lock on the Nextcloud app on an Android device by repeatedly reopening the app. Version 3.19.1 contains a fix for t... Read more
- EPSS Score: %0.07
- Published: Apr. 27, 2022
- Modified: Nov. 21, 2024
-
2.4
LOWCVE-2020-9083
HUAWEI Mate 20 smart phones with Versions earlier than 10.1.0.163(C00E160R3P8) have a denial of service (DoS) vulnerability. The attacker can enter a large amount of text on the phone. Due to insufficient verification of the parameter, successful exploita... Read more
- EPSS Score: %0.03
- Published: Sep. 03, 2020
- Modified: Nov. 21, 2024
-
2.4
LOWCVE-2023-20528
Insufficient input validation in the SMU may allow a physical attacker to exfiltrate SMU memory contents over the I2C bus potentially leading to a loss of confidentiality. ... Read more
Affected Products : epyc_7h12_firmware epyc_7f72_firmware epyc_7f52_firmware epyc_7f32_firmware epyc_7742_firmware epyc_7702p_firmware epyc_7702_firmware epyc_7662_firmware epyc_7642_firmware epyc_7552_firmware +90 more products- EPSS Score: %0.07
- Published: Jan. 11, 2023
- Modified: Apr. 07, 2025