Lucene search
+L

54 matches found

Prion
Prion
added 2023/05/08 8:15 p.m.17 views

Design/Logic Flaw

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, tvOS 16.4, watchOS 9.4, macOS Big Sur 11.7.5. An app may be able to access information about a user’s contacts...

1.9CVSS4.5AI score0.00243EPSS
SaveExploits0References6Affected Software5
Cvelist
Cvelist
added 2023/05/08 12:0 a.m.28 views

CVE-2023-23541

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 15.7.4 and iPadOS 15.7.4, iOS 16.4 and iPadOS 16.4. An app may be able to access information about a user’s contacts...

5.2AI score0.00238EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2023/05/08 12:0 a.m.20 views

CVE-2023-27928

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, tvOS 16.4, watchOS 9.4, macOS Big Sur 11.7.5. An app may be able to access information about a user’s contacts...

5AI score0.00243EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2023/01/25 12:0 a.m.44 views

Apple iOS < 15.7.3 Multiple Vulnerabilities (HT213598)

Binary data appleios1573check.nbin...

7.8CVSS5AI score0.00339EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2023/01/23 12:0 a.m.2 views

Apple watchOS 日志信息泄露漏洞

Apple watchOS is a set of smartwatch operating systems from the US-based Apple. Versions of Apple watchOS prior to 9.3 suffer from a log information disclosure vulnerability that stems from a privacy issue in which apps may be able to access information about a user's contacts...

3.3CVSS4.8AI score0.00229EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2022/03/14 12:0 a.m.8 views

Apple macOS Monterey 访问控制错误漏洞

Apple macOS Monterey is the 18th major release of Apple Inc.'s macOS for the Macintosh desktop operating system. Apple macOS Monterey prior to 12.3 suffers from an Access Control Error vulnerability in NSSpellChecker that could allow a malicious application to access information about a user's...

5.5CVSS6.6AI score0.00649EPSS
SaveExploits0References5
CNVD
CNVD
added 2021/12/22 12:0 a.m.43 views

Google Android privilege bypass vulnerability

Google Android is a Linux-based open-source operating system from the U.S. company Google. Google Android has a privilege bypass vulnerability, which can be exploited by attackers to compromise local information of user contacts without additional execution privileges...

5CVSS6.9AI score0.00137EPSS
SaveExploits0References1
NVD
NVD
added 2021/08/24 7:15 p.m.27 views

CVE-2021-30895

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 15.0.2 and iPadOS 15.0.2, tvOS 15.1, watchOS 8.1, macOS Monterey 12.0.1. A malicious application may be able to access information about a user's contacts...

5.5CVSS0.00925EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2021/08/24 6:49 p.m.36 views

CVE-2021-30895

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 15.0.2 and iPadOS 15.0.2, tvOS 15.1, watchOS 8.1, macOS Monterey 12.0.1. A malicious application may be able to access information about a user's contacts...

5.6AI score0.00925EPSS
SaveExploits0References6
NVD
NVD
added 2021/07/16 4:15 p.m.28 views

CVE-2021-28053

An issue was discovered in Centreon-Web in Centreon Platform 20.10.0. A SQL injection vulnerability in "Configuration Users Contacts / Users" allows remote authenticated users to execute arbitrary SQL commands via the Additional Information parameters...

8.8CVSS0.01773EPSS
SaveExploits0References3
NVD
NVD
added 2020/02/13 3:15 p.m.20 views

CVE-2020-0023

In setPhonebookAccessPermission of AdapterService.java, there is a possible disclosure of user contacts over bluetooth due to a missing permission check. This could lead to local information disclosure if a malicious app enables contacts over a bluetooth connection, with User execution privileges...

5.5CVSS5.1AI score0.00332EPSS
SaveExploits0References1
Prion
Prion
added 2020/02/13 3:15 p.m.18 views

Information disclosure

In setPhonebookAccessPermission of AdapterService.java, there is a possible disclosure of user contacts over bluetooth due to a missing permission check. This could lead to local information disclosure if a malicious app enables contacts over a bluetooth connection, with User execution privileges...

4.7CVSS5.7AI score0.00332EPSS
SaveExploits0References1Affected Software1
The Hacker News
The Hacker News
added 2017/08/28 1:8 a.m.15 views

Beware! Viral Sarahah App Secretly Steals Your Entire Contact List

Are you also one of those 18 Million users using SARAHAH? You should beware of this app because the anonymous feedback application may not be as private as it really sounds. Sarahah is a newly launched app that has become one of the hottest iPhone and Android apps in the past couple of weeks,...

6.5AI score
SaveExploits0
ThreatPost
ThreatPost
added 2012/02/09 4:26 p.m.9 views

Path Reverses Course After Revelation That App Uploads User Contacts

After a researcher discovered that any person who decides to download the Path app onto their mobile device is unknowingly sending their address book to a server belonging to the social network and photo-sharing service without prior notification, the company has released a new version of the app...

6.4AI score
SaveExploits0References3
Rows per page
Query Builder