Lucene search
+L

21 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2022-33233

Malicious code in bioql PyPI...

3.3CVSS4.5AI score0.00087EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2025-28314

Malicious code in bioql PyPI...

4.8CVSS6.6AI score0.00145EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/05/24 10:19 p.m.•36 views

CVE-2025-4975

When a notification relating to low battery appears for a user with whom the device has been shared, tapping the notification grants full access to the power settings of that device...

4.8CVSS6.9AI score0.00145EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 10:43 p.m.•15 views

CVE-2022-28794

Sensitive information exposure in low-battery dumpstate log prior to SMR Jun-2022 Release 1 allows local attackers to get SIM card information...

3.3CVSS6.3AI score0.00087EPSS
SaveExploits0References1
NVD
NVD
•added 2025/05/22 10:15 p.m.•23 views

CVE-2025-4975

When a notification relating to low battery appears for a user with whom the device has been shared, tapping the notification grants full access to the power settings of that device...

4.8CVSS0.00145EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/05/22 9:17 p.m.•10 views

CVE-2025-4975 Tapo privilege escalation on shared devices using notifications

When a notification relating to low battery appears for a user with whom the device has been shared, tapping the notification grants full access to the power settings of that device...

4.8CVSS6.5AI score0.00145EPSS
SaveExploits0References2
CVE
CVE
•added 2025/05/22 9:17 p.m.•76 views

CVE-2025-4975

CVE-2025-4975 affects TP-Link TP-LINK Tapo devices. A low-battery notification on a shared device, once tapped, grants full access to the device’s power settings. The vulnerability is linked to notification handling in shared sessions, enabling local access with low privileges and no user interac...

4.8CVSS6.5AI score0.00145EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/22 12:00 a.m.•4 views

CVE-2025-4975: Incorrect Authorization

When a notification relating to low battery appears for a user with whom the device has been shared, tapping the notification grants full access to the power settings of that device...

4.8CVSS5.4AI score0.00145EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/05/22 12:00 a.m.•16 views

TP-LINK Tapo 安全漏洞

TP-LINK Tapo is a series of secure WiFi cameras from China P&L TP-LINK. A security vulnerability exists in TP-LINK Tapo versions prior to 3.10.513, which stems from a low battery notification that could lead to a user of a shared device gaining full power settings access...

4.8CVSS6.4AI score0.00145EPSS
SaveExploits0References2
Microsoft KB
Microsoft KB
•added 2024/09/30 12:00 a.m.•48 views

September 30, 2024—KB5043178 (OS Build 26100.1882) Preview

None None...

6.1AI score
SaveExploits0
CNVD
CNVD
•added 2022/06/14 12:00 a.m.•53 views

Samsung mobile low-battery dumpstate log information disclosure vulnerability (CNVD-2022-67277)

Samsung mobile is a cell phone from Samsung, South Korea. Samsung mobile low-battery dumpstate log is vulnerable to information disclosure due to a lack of protection of sensitive information in the low-battery dumpstate log. A local attacker could use this vulnerability to obtain SIM card...

3.3CVSS1.8AI score0.00087EPSS
SaveExploits0References1
NVD
NVD
•added 2022/06/07 6:15 p.m.•32 views

CVE-2022-28794

Sensitive information exposure in low-battery dumpstate log prior to SMR Jun-2022 Release 1 allows local attackers to get SIM card information...

3.3CVSS0.00087EPSS
SaveExploits0References1
OSV
OSV
•added 2022/06/07 6:15 p.m.•13 views

CVE-2022-28794

Sensitive information exposure in low-battery dumpstate log prior to SMR Jun-2022 Release 1 allows local attackers to get SIM card information...

3.3CVSS5.8AI score0.00087EPSS
SaveExploits0References1
Prion
Prion
•added 2022/06/07 6:15 p.m.•32 views

Information disclosure

Sensitive information exposure in low-battery dumpstate log prior to SMR Jun-2022 Release 1 allows local attackers to get SIM card information...

2.1CVSS3.9AI score0.00087EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/06/07 5:51 p.m.•38 views

CVE-2022-28794

Sensitive information exposure in low-battery dumpstate log prior to SMR Jun-2022 Release 1 allows local attackers to get SIM card information...

2.2CVSS4AI score0.00087EPSS
SaveExploits0References1
CVE
CVE
•added 2022/06/07 5:51 p.m.•84 views

CVE-2022-28794

CVE-2022-28794 describes a sensitive information exposure in Samsung mobile devices. The issue concerns the low-battery dumpstate log, which can reveal SIM card information to a local attacker. The root cause is exposure of stored log data prior to SMR Jun-2022 Release 1, enabling local access to...

3.3CVSS3.8AI score0.00087EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2022/06/07 12:00 a.m.•16 views

Samsung mobile 安全漏洞

Samsung mobile is a cell phone from Samsung, South Korea. Samsung mobile low-battery dumpstate log is vulnerable to information disclosure due to a lack of protection of sensitive information in the low-battery dumpstate log. A local attacker could use this vulnerability to obtain SIM card...

3.3CVSS5.5AI score0.00087EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/06/07 12:00 a.m.•1 views

PT-2022-19243

Name of the Vulnerable Software and Affected Versions SMR versions prior to Jun-2022 Release 1 Description The issue allows local attackers to expose sensitive information, including SIM card details, through the low-battery dumpstate log. Recommendations For versions prior to Jun-2022 Release 1,...

3.3CVSS0.00087EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/07 12:00 a.m.•5 views

CVE-2022-28794: Exposure of Sensitive Information Due to Incompatible Policies

Sensitive information exposure in low-battery dumpstate log prior to SMR Jun-2022 Release 1 allows local attackers to get SIM card information...

3.3CVSS5.5AI score0.00087EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2022/01/10 2:10 p.m.•15 views

CVE-2020-9059

Z-Wave devices based on Silicon Labs 500 series chipsets using S0 authentication are susceptible to uncontrolled resource consumption leading to battery exhaustion. As an example, the Schlage BE468 version 3.42 door lock is vulnerable and fails open at a low battery level...

6.5CVSS6.5AI score0.00846EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder