Lucene search
K

22 matches found

CVE
CVE
added 2026/03/19 9:52 p.m.4 views

CVE-2026-32099

Discourse (open-source platform) is vulnerable in versions prior to 2026.3.0-latest.1, 2026.2.1, and 2026.1.2 due to improper exposure of hidden profile fields (bio, location, website) in the user onebox preview. An authenticated user could request a onebox for a hidden profile URL and receive th...

6.5CVSS5.8AI score0.0002EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2026/02/17 7:6 p.m.25 views

CVE-2023-38265 Improper Access Control and Exposure of Information Through Directory Listing vulnerabilities affect IBM Cloud Pak System[, ]

IBM Cloud Pak System 2.3.3.6, 2.3.3.7, 2.3.4.0, 2.3.4.1, and 2.3.5.0 could disclose folder location information to an unauthenticated attacker that could aid in further attacks against the system...

5.3CVSS0.00049EPSS
Exploits0References1
Wired Threat Level
Wired Threat Level
added 2025/09/29 9:30 a.m.3 views

Tile Tracking Tags Can Be Exploited by Tech-Savvy Stalkers, Researchers Say

A team of researchers found that, by not encrypting the data broadcast by Tile tags, users could be vulnerable to having their location information exposed to malicious actors...

6.7AI score
Exploits0
Vulnrichment
Vulnrichment
added 2025/09/04 6:34 p.m.3 views

CVE-2025-32347

In onStart of BiometricEnrollIntroduction.java, there is a possible way to determine the device's location due to an unsafe PendingIntent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

6.3AI score0.00008EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/09/03 12:0 a.m.1 views

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR Apr-2022 Release 1 prior to Release 1, which stems from improper access control and coul...

4CVSS5.9AI score0.00028EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/09/03 12:0 a.m.3 views

PT-2025-35662

Name of the Vulnerable Software and Affected Versions: SLocation versions prior to SMR Apr-2022 Release 1 Description: An improper access control issue exists in SLocation. Local attackers can obtain device location information by leveraging the com.samsung.android.wifi.GEOFENCE action...

4CVSS6.1AI score0.00028EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/05/23 6:54 a.m.4 views

CVE-2024-12993

Infinix devices contain a pre-loaded "com.rlk.weathers" application, that exposes an unsecured content provider. An attacker can communicate with the provider and reveal the user’s location without any privileges. After multiple attempts to contact the vendor we did not receive any answer. We...

4.8CVSS7AI score0.00079EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/05/18 12:0 a.m.4 views

PT-2025-21849 · O2 Uk · O2 Uk

Name of the Vulnerable Software and Affected Versions: O2 UK through 2025-05-17 Description: The issue allows subscribers to determine the Cell ID of other subscribers by initiating an IMS IP Multimedia Subsystem call and then reading the utran-cell-id-3gpp field of a "Cellular-Network-Info" SIP...

3.5CVSS5.8AI score0.00187EPSS
Exploits0References10
OSV
OSV
added 2025/01/27 10:15 p.m.0 views

CVE-2024-54475

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma 14.7.2, macOS Sequoia 15.2, macOS Ventura 13.7.2. An app may be able to determine a user’s current location...

3.3CVSS7.1AI score0.00109EPSS
Exploits0References3
CVE
CVE
added 2024/12/30 11:1 a.m.55 views

CVE-2024-12993

The CVE-2024-12993 entry describes a vulnerability in Infinix devices stemming from a pre-loaded app com.rlk.weathers that exposes an unsecured content provider. An attacker can communicate with this provider to reveal the user’s location without any privileges (local attack; no user interaction ...

4.8CVSS6.6AI score0.00079EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/12/30 11:1 a.m.12 views

CVE-2024-12993 Location information exposure in Infinix Weather app

Infinix devices contain a pre-loaded "com.rlk.weathers" application, that exposes an unsecured content provider. An attacker can communicate with the provider and reveal the user’s location without any privileges. After multiple attempts to contact the vendor we did not receive any answer. We...

4.8CVSS0.00079EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/12/30 11:1 a.m.4 views

CVE-2024-12993 Location information exposure in Infinix Weather app

Infinix devices contain a pre-loaded "com.rlk.weathers" application, that exposes an unsecured content provider. An attacker can communicate with the provider and reveal the user’s location without any privileges. After multiple attempts to contact the vendor we did not receive any answer. We...

4.8CVSS7AI score0.00079EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/07/10 12:0 a.m.1 views

PT-2024-24755 · Samsung · Samsung Galaxy Smarttag2

Name of the Vulnerable Software and Affected Versions: Samsung Galaxy SmartTag2 versions prior to 0.20.04 Description: The issue allows attackers to potentially identify the tag's location by scanning the BLE advertising, exposing sensitive information to unauthorized actors. Recommendations: For...

7CVSS6.9AI score0.00147EPSS
Exploits0References5
CNNVD
CNNVD
added 2023/02/09 12:0 a.m.2 views

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from South Korea's Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices Android R11 prior to 2.9.09.003, Android S12 prior to 3.2.01.007, which stems from incorrect access...

5.5CVSS5.8AI score0.00048EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2022/03/18 6:15 p.m.4 views

CVE-2022-22599

Description: A permissions issue was addressed with improved validation. This issue is fixed in watchOS 8.5, iOS 15.4 and iPadOS 15.4, macOS Big Sur 11.6.5, macOS Monterey 12.3. A person with physical access to a device may be able to use Siri to obtain some location information from the lock...

2.4CVSS6.7AI score0.00047EPSS
Exploits0References5
OSV
OSV
added 2020/12/18 9:15 a.m.1 views

CVE-2020-35552

An issue was discovered in the GPS daemon on Samsung mobile devices with O8.x, P9.0, and Q10.0 non-Qualcomm chipsets software. Attackers can obtain sensitive location information because the configuration file is incorrect. The Samsung ID is SVE-2020-18678 December 2020...

5.3CVSS6.1AI score
Exploits0References1
OSV
OSV
added 2020/03/02 5:15 a.m.5 views

CVE-2020-6793

When processing an email message with an ill-formed envelope, Thunderbird could read data from a random memory location. This vulnerability affects Thunderbird 68.5...

6.5CVSS8.2AI score
Exploits0References5
OpenVAS
OpenVAS
added 2013/02/22 12:0 a.m.21 views

Ubuntu Update for firefox USN-1729-1

Check for the Version of firefox OpenVAS Vulnerability Test $Id: gbubuntuUSN17291.nasl 8483 2018-01-22 06:58:04Z teissa $ Ubuntu Update for firefox USN-1729-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free softwar...

10CVSS0.9AI score0.02889EPSS
Exploits4References2
OpenVAS
OpenVAS
added 2013/02/22 12:0 a.m.22 views

Ubuntu: Security Advisory (USN-1729-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS9.8AI score0.02889EPSS
Exploits4References3
The Hacker News
The Hacker News
added 2012/03/14 1:5 p.m.7 views

Potential Security Risk of Geotagging for the Military

Potential Security Risk of Geotagging for the Military Did you know that when you upload photos to the Internet they can tell more about you, then you would want to disclose to a random stranger watching it? Where you live, where you spend time with your kids, when you are at home, and when you a...

6.6AI score
Exploits0
Rows per page
Query Builder