Latest CVE Feed
-
2.4
LOWCVE-2024-23240
The issue was addressed with improved checks. This issue is fixed in iOS 17.4 and iPadOS 17.4. Shake-to-undo may allow a deleted photo to be re-surfaced without authentication.... Read more
- Published: Mar. 08, 2024
- Modified: Dec. 06, 2024
-
2.4
LOWCVE-2022-32870
A logic issue was addressed with improved state management. This issue is fixed in iOS 16, macOS Ventura 13, watchOS 9. A user with physical access to a device may be able to use Siri to obtain some call history information.... Read more
- Published: Nov. 01, 2022
- Modified: May. 06, 2025
-
2.4
LOWCVE-2022-32879
A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13, iOS 16, iOS 15.7 and iPadOS 15.7, watchOS 9, tvOS 16. A user with physical access to a device may be able to access contacts from the lock screen.... Read more
- Published: Nov. 01, 2022
- Modified: May. 06, 2025
-
2.4
LOWCVE-2022-26703
An authorization issue was addressed with improved state management. This issue is fixed in iOS 15.5 and iPadOS 15.5. A person with physical access to an iOS device may be able to access photos from the lock screen.... Read more
- Published: May. 26, 2022
- Modified: Nov. 21, 2024
-
2.4
LOWCVE-2021-30815
A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue is fixed in iOS 15 and iPadOS 15. A local attacker may be able to view contacts from the lock screen.... Read more
- Published: Oct. 19, 2021
- Modified: Nov. 21, 2024
-
2.4
LOWCVE-2025-0895
IBM Cognos Analytics Mobile 1.1 for Android could allow a user with physical access to the device, to obtain sensitive information from debugging code log messages.... Read more
Affected Products : cognos_analytics_mobile- Published: Mar. 02, 2025
- Modified: Jul. 31, 2025
- Vuln Type: Information Disclosure
-
2.4
LOWCVE-2016-9703
IBM Security Identity Manager Virtual Appliance does not invalidate session tokens which could allow an unauthorized user with physical access to the work station to obtain sensitive information.... Read more
Affected Products : security_identity_manager_virtual_appliance- Published: Feb. 01, 2017
- Modified: Apr. 20, 2025
-
2.4
LOWCVE-2025-23074
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - SocialProfile Extension allows Functionality Misuse.This issue affects Mediawiki - SocialProfile Extension: from 1.39.X before 1.39.11, from 1.41.... Read more
Affected Products :- Published: Jan. 14, 2025
- Modified: Jan. 31, 2025
- Vuln Type: Information Disclosure
-
2.4
LOWCVE-2017-7139
An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Phone" component. It allows attackers to obtain sensitive information by leveraging a timing bug to read a secure-content screenshot that occurred during... Read more
Affected Products : iphone_os- Published: Oct. 23, 2017
- Modified: Apr. 20, 2025
-
2.4
LOWCVE-2017-8087
Information Leakage in PPPoE Packet Padding in AVM Fritz!Box 7490 with Firmware versions Fritz!OS 6.80 and 6.83 allows physically proximate attackers to view slices of previously transmitted packets or portions of memory via via unspecified vectors.... Read more
- Published: Oct. 22, 2019
- Modified: Nov. 21, 2024
-
2.4
LOWCVE-2017-7407
The ourWriteOut function in tool_writeout.c in curl 7.53.1 might allow physically proximate attackers to obtain sensitive information from process memory in opportunistic circumstances by reading a workstation screen during use of a --write-out argument e... Read more
Affected Products : curl- Published: Apr. 03, 2017
- Modified: Apr. 20, 2025
-
2.4
LOWCVE-2017-7058
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. The issue involves the "Notifications" component. It allows physically proximate attackers to read unintended notifications on the lock screen.... Read more
Affected Products : iphone_os- Published: Jul. 20, 2017
- Modified: Apr. 20, 2025
-
2.4
LOWCVE-2025-1421
Data provided in a request performed to the server while activating a new device are put in a database. Other high privileged users might download this data as a CSV file and corrupt their PC by opening it in a tool such as Microsoft Excel. The attacker c... Read more
Affected Products :- Published: May. 21, 2025
- Modified: May. 21, 2025
-
2.4
LOWCVE-2018-21046
An issue was discovered on Samsung mobile devices with O(8.x) software. There is clipboard Data Exposure via the Emergency Dialer upon connecting a USB device. The Samsung ID is SVE-2018-12911 (November 2018).... Read more
Affected Products : android- Published: Apr. 08, 2020
- Modified: Nov. 21, 2024
-
2.4
LOWCVE-2017-2397
An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "Accounts" component. It allows physically proximate attackers to discover an Apple ID by reading an iCloud authentication prompt on the lock screen.... Read more
Affected Products : iphone_os- Published: Apr. 02, 2017
- Modified: Apr. 20, 2025
-
2.4
LOWCVE-2017-2351
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. The issue involves the "WiFi" component, which allows physically proximate attackers to bypass the activation-lock protection mechanism and view the home screen via unspecif... Read more
Affected Products : iphone_os- Published: Feb. 20, 2017
- Modified: Apr. 20, 2025
-
2.4
LOWCVE-2025-47274
ToolHive is a utility designed to simplify the deployment and management of Model Context Protocol (MCP) servers. Due to the ordering of code used to start an MCP server container, versions of ToolHive prior to 0.0.33 inadvertently store secrets in the ru... Read more
Affected Products :- Published: May. 12, 2025
- Modified: May. 12, 2025
- Vuln Type: Information Disclosure
-
2.4
LOWCVE-2024-27314
Zoho ManageEngine ServiceDesk Plus versions below 14730, ServiceDesk Plus MSP below 14720 and SupportCenter Plus below 14720 are vulnerable to stored XSS in the Custom Actions menu on the request details. This vulnerability can be exploited only by the SD... Read more
- Published: May. 27, 2024
- Modified: Jun. 17, 2025
-
2.4
LOWCVE-2019-19533
In the Linux kernel before 5.3.4, there is an info-leak bug that can be caused by a malicious USB device in the drivers/media/usb/ttusb-dec/ttusb_dec.c driver, aka CID-a10feaf8c464.... Read more
Affected Products : linux_kernel- Published: Dec. 03, 2019
- Modified: Nov. 21, 2024
-
2.4
LOWCVE-2013-4262
svnwcsub.py in Subversion 1.8.0 before 1.8.3, when using the --pidfile option and running in foreground mode, allows local users to gain privileges via a symlink attack on the pid file. NOTE: this issue was SPLIT due to different affected versions (ADT3)... Read more
Affected Products : subversion- Published: Jul. 28, 2014
- Modified: Apr. 12, 2025