Latest CVE Feed
-
2.4
LOWCVE-2017-7058
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. The issue involves the "Notifications" component. It allows physically proximate attackers to read unintended notifications on the lock screen.... Read more
Affected Products : iphone_os- EPSS Score: %0.08
- Published: Jul. 20, 2017
- Modified: Apr. 20, 2025
-
2.4
LOWCVE-2017-7082
An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "Screen Lock" component. It allows physically proximate attackers to read Application Firewall prompts.... Read more
- EPSS Score: %0.08
- Published: Oct. 23, 2017
- Modified: Apr. 20, 2025
-
2.4
LOWCVE-2013-0420
Unspecified vulnerability in the VirtualBox component in Oracle Virtualization 4.0, 4.1, and 4.2 allows local users to affect integrity and availability via unknown vectors related to Core. NOTE: The previous information was obtained from the January 201... Read more
- EPSS Score: %0.11
- Published: Jan. 17, 2013
- Modified: Apr. 11, 2025
-
2.4
LOWCVE-2020-3859
An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1. A person with physical access to an iOS device may be able to access contacts from the lock screen.... Read more
- EPSS Score: %0.15
- Published: Feb. 27, 2020
- Modified: Nov. 21, 2024
-
2.4
LOWCVE-2016-7653
An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "Media Player" component, which allows physically proximate attackers to obtain sensitive photo and contact information by leveraging lockscreen access.... Read more
Affected Products : iphone_os- EPSS Score: %0.07
- Published: Feb. 20, 2017
- Modified: Apr. 20, 2025
-
2.4
LOWCVE-2024-40822
This issue was addressed by restricting options offered on a locked device. This issue is fixed in watchOS 10.6, macOS Sonoma 14.6, iOS 17.6 and iPadOS 17.6, iOS 16.7.9 and iPadOS 16.7.9. An attacker with physical access to a device may be able to access ... Read more
- Published: Jul. 29, 2024
- Modified: Mar. 27, 2025
-
2.4
LOWCVE-2021-1862
Description: A person with physical access may be able to access contacts. This issue is fixed in iOS 14.5 and iPadOS 14.5. Impact: An issue with Siri search access to information was addressed with improved logic.... Read more
- EPSS Score: %0.06
- Published: Sep. 08, 2021
- Modified: Nov. 21, 2024
-
2.4
LOWCVE-2024-40851
This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 18.1 and iPadOS 18.1. An attacker with physical access may be able to access contact photos from the lock screen.... Read more
- Published: Oct. 28, 2024
- Modified: Oct. 30, 2024
-
2.4
LOWCVE-2019-4266
IBM Maximo Anywhere 7.6.2.0, 7.6.2.1, 7.6.3.0, and 7.6.3.1 does not have device jailbreak detection which could result in an attacker gaining sensitive information about the device. IBM X-Force ID: 160199.... Read more
Affected Products : maximo_anywhere- EPSS Score: %0.05
- Published: May. 06, 2020
- Modified: Nov. 21, 2024
-
2.4
LOWCVE-2019-5308
Mate 20 RS smartphones with versions earlier than 9.1.0.135(C786E133R3P1) have an improper authorization vulnerability. The software does not properly restrict certain operation in ADB mode, successful exploit could allow the attacker to switch to third d... Read more
- EPSS Score: %0.06
- Published: Nov. 29, 2019
- Modified: Nov. 21, 2024
-
2.4
LOWCVE-2019-4352
IBM Maximo Anywhere 7.6.4.0 applications could allow obfuscation of the application source code. IBM X-Force ID: 161494.... Read more
Affected Products : maximo_anywhere- EPSS Score: %0.05
- Published: Feb. 16, 2022
- Modified: Nov. 21, 2024
-
2.4
LOWCVE-2024-12801
Server-Side Request Forgery (SSRF) in SaxEventRecorder by QOS.CH logback version 0.1 to 1.3.14 and 1.4.0 to 1.5.12 on the Java platform, allows an attacker to forge requests by compromising logback configuration files in XML. The attacks involves the... Read more
Affected Products :- Published: Dec. 19, 2024
- Modified: Jan. 03, 2025
-
2.4
LOWCVE-2006-6477
FRAgent.exe in Mandiant First Response (MFR) before 1.1.1, when run in daemon mode and configured to use only HTTP, allows local users to modify requests and responses between a client and an agent by hijacking an HTTP FRAgent daemon and conducting a man-... Read more
Affected Products : first_response- EPSS Score: %0.07
- Published: Dec. 20, 2006
- Modified: Apr. 09, 2025
-
2.4
LOWCVE-2024-20855
Improper access control vulnerability in multitasking framework prior to SMR May-2024 Release 1 allows physical attackers to access unlocked screen for a while.... Read more
- Published: May. 07, 2024
- Modified: Feb. 07, 2025
-
2.4
LOWCVE-2018-4123
An issue was discovered in certain Apple products. iOS before 11.3 is affected. The issue involves alarm and timer handling in the "Clock" component. It allows physically proximate attackers to discover the iTunes e-mail address.... Read more
Affected Products : iphone_os- EPSS Score: %0.08
- Published: Apr. 03, 2018
- Modified: Nov. 21, 2024
-
2.4
LOWCVE-2020-3828
A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1. A person with physical access to an iOS device may be able to access contacts ... Read more
- EPSS Score: %0.15
- Published: Feb. 27, 2020
- Modified: Nov. 21, 2024
-
2.4
LOWCVE-2018-4430
A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue affected versions prior to iOS 12.1.1.... Read more
Affected Products : iphone_os- EPSS Score: %0.06
- Published: Apr. 03, 2019
- Modified: Nov. 21, 2024
-
2.4
LOWCVE-2019-8799
This issue was resolved by replacing device names with a random identifier. This issue is fixed in iOS 13.1 and iPadOS 13.1, macOS Catalina 10.15, watchOS 6, tvOS 13. An attacker in physical proximity may be able to passively observe device names in AWDL ... Read more
- EPSS Score: %0.07
- Published: Oct. 27, 2020
- Modified: Nov. 21, 2024
-
2.4
LOWCVE-2025-30469
This issue was addressed through improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4. A person with physical access to an iOS device may be able to access photos from the lock screen.... Read more
- Published: Mar. 31, 2025
- Modified: Apr. 04, 2025
-
2.4
LOWCVE-2022-33706
Improper access control vulnerability in Samsung Gallery prior to version 13.1.05.8 allows physical attackers to access the pictures using S Pen air gesture.... Read more
Affected Products : samsung_gallery- EPSS Score: %0.14
- Published: Jul. 12, 2022
- Modified: Nov. 21, 2024