Latest CVE Feed
-
2.4
LOWCVE-2022-0005
Sensitive information accessible by physical probing of JTAG interface for some Intel(R) Processors with SGX may allow an unprivileged user to potentially enable information disclosure via physical access.... Read more
- Published: May. 12, 2022
- Modified: May. 05, 2025
-
2.4
LOWCVE-2022-20529
In multiple locations of WifiDialogActivity.java, there is a possible limited lockscreen bypass due to a logic error in the code. This could lead to local escalation of privilege in wifi settings with no additional execution privileges needed. User intera... Read more
Affected Products : android- Published: Dec. 16, 2022
- Modified: Apr. 18, 2025
-
2.4
LOWCVE-2022-39043
Juiker app stores debug logs which contains sensitive information to mobile external storage. An unauthenticated physical attacker can access these files to acquire partial user information such as personal contacts.... Read more
Affected Products : juiker- Published: Mar. 27, 2023
- Modified: Nov. 21, 2024
-
2.4
LOWCVE-2017-18673
An issue was discovered on Samsung mobile devices with N(7.x) software. An attacker can disable the Location service on a locked device, making it impossible for the rightful owner to find a stolen device. The Samsung ID is SVE-2017-8524 (May 2017).... Read more
Affected Products : android- Published: Apr. 07, 2020
- Modified: Nov. 21, 2024
-
2.4
LOWCVE-2025-52580
Insertion of sensitive information into log file issue exists in "region PAY" App for Android prior to 1.5.28. If exploited, sensitive user information may be exposed to an attacker who has access to the application logs.... Read more
Affected Products :- Published: Jul. 22, 2025
- Modified: Jul. 22, 2025
- Vuln Type: Information Disclosure
-
2.4
LOWCVE-2022-26703
An authorization issue was addressed with improved state management. This issue is fixed in iOS 15.5 and iPadOS 15.5. A person with physical access to an iOS device may be able to access photos from the lock screen.... Read more
- Published: May. 26, 2022
- Modified: Nov. 21, 2024
-
2.4
LOWCVE-2022-32879
A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13, iOS 16, iOS 15.7 and iPadOS 15.7, watchOS 9, tvOS 16. A user with physical access to a device may be able to access contacts from the lock screen.... Read more
- Published: Nov. 01, 2022
- Modified: May. 06, 2025
-
2.4
LOWCVE-2022-32870
A logic issue was addressed with improved state management. This issue is fixed in iOS 16, macOS Ventura 13, watchOS 9. A user with physical access to a device may be able to use Siri to obtain some call history information.... Read more
- Published: Nov. 01, 2022
- Modified: May. 06, 2025
-
2.4
LOWCVE-2022-46717
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 16.2 and iPadOS 16.2. A user with physical access to a locked Apple Watch may be able to view user photos via accessibility features... Read more
- Published: Apr. 10, 2023
- Modified: Feb. 11, 2025
-
2.4
LOWCVE-2022-46724
This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 16.4 and iPadOS 16.4. A person with physical access to an iOS device may be able to view the last image used in Magnifier from the lock screen.... Read more
- Published: Aug. 14, 2023
- Modified: Nov. 21, 2024
-
2.4
LOWCVE-2022-31224
Dell BIOS versions contain an Improper Protection Against Voltage and Clock Glitches vulnerability. An attacker with physical access to the system could potentially exploit this vulnerability by triggering a fault condition in order to change the behavior... Read more
- Published: Sep. 12, 2022
- Modified: Nov. 21, 2024
-
2.4
LOWCVE-2022-48506
A flawed pseudorandom number generator in Dominion Voting Systems ImageCast Precinct (ICP and ICP2) and ImageCast Evolution (ICE) scanners allows anyone to determine the order in which ballots were cast from public ballot-level data, allowing deanonymizat... Read more
Affected Products : democracy_suite- Published: Jun. 19, 2023
- Modified: Jan. 02, 2025
-
2.4
LOWCVE-2020-1797
HUAWEI Mate 20 smartphones with versions earlier than 10.0.0.185(C00E74R3P8) have an improper authorization vulnerability. The system does not properly restrict certain operation in ADB mode, successful exploit could allow certain user break the limit of ... Read more
- Published: May. 29, 2020
- Modified: Nov. 21, 2024
-
2.4
LOWCVE-2020-11606
An issue was discovered on Samsung mobile devices with Q(10.0) software. Information about application preview (in the Secure Folder) leaks on a locked device. The Samsung ID is SVE-2019-16463 (April 2020).... Read more
Affected Products : android- Published: Apr. 08, 2020
- Modified: Nov. 21, 2024
-
2.4
LOWCVE-2023-39842
Missing encryption in the RFID tag of Digoo DG-HAMB Smart Home Security System v1.0 allows attackers to create a cloned tag via brief physical proximity to the original device.... Read more
- Published: Aug. 15, 2023
- Modified: Nov. 21, 2024
-
2.4
LOWCVE-2024-34649
Improper access control in new Dex Mode in multitasking framework prior to SMR Sep-2024 Release 1 allows physical attackers to temporarily access an unlocked screen.... Read more
- Published: Sep. 04, 2024
- Modified: Sep. 05, 2024
-
2.4
LOWCVE-2022-33720
Improper authentication vulnerability in AppLock prior to SMR Aug-2022 Release 1 allows physical attacker to access Chrome locked by AppLock via new tap shortcut.... Read more
- Published: Aug. 05, 2022
- Modified: Nov. 21, 2024
-
2.4
LOWCVE-2019-4265
IBM Maximo Anywhere 7.6.0, 7.6.1, 7.6.2, and 7.6.3 does not have device root detection which could result in an attacker gaining sensitive information about the device. IBM X-Force ID: 160198.... Read more
Affected Products : maximo_anywhere- Published: Oct. 10, 2019
- Modified: Nov. 21, 2024
-
2.4
LOWCVE-2018-17177
An issue was discovered on Neato Botvac Connected 2.2.0 and Botvac 85 1.2.1 devices. Static encryption is used for the copying of so-called "black box" logs (event logs and core dumps) to a USB stick. These logs are RC4-encrypted with a 9-character passwo... Read more
- Published: Sep. 18, 2018
- Modified: Nov. 21, 2024
-
2.4
LOWCVE-2024-34682
Improper authorization in Settings prior to SMR Nov-2024 Release 1 allows physical attackers to access stored WiFi password in Maintenance Mode.... Read more
- Published: Nov. 06, 2024
- Modified: Nov. 13, 2024