Lucene search
+L

927 matches found

Tenable Nessus
Tenable Nessus
•added 2025/09/10 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2016-1780

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebKit in Apple iOS before 9.3 does not prevent hidden web views from reading orientation and motion data, which allows remote attackers to obtain sensitive...

4.3CVSS6.1AI score0.01244EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/09/06 7:31 p.m.•14 views

CVE-2025-48560

In AndroidManifest.xml, there is a possible way for an app to monitor motion events due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS5.6AI score0.00075EPSS
SaveExploits0References1
OSV
OSV
•added 2025/09/04 7:15 p.m.•15 views

CVE-2025-48560

In AndroidManifest.xml, there is a possible way for an app to monitor motion events due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS6AI score0.00075EPSS
SaveExploits0References1
NVD
NVD
•added 2025/09/04 7:15 p.m.•25 views

CVE-2025-48560

In AndroidManifest.xml, there is a possible way for an app to monitor motion events due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS0.00075EPSS
SaveExploits0References1
CVE
CVE
•added 2025/09/04 6:34 p.m.•48 views

CVE-2025-48560

The Android operating system contains a vulnerability in AndroidManifest.xml where an app can monitor motion events due to a confused deputy scenario (CWE-441). This flaw allows for local information disclosure without requiring additional execution privileges or user interaction. While the vulne...

5.5CVSS6.1AI score0.00075EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2025/09/04 6:34 p.m.•29 views

CVE-2025-48560

In AndroidManifest.xml, there is a possible way for an app to monitor motion events due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00075EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/09/04 6:34 p.m.•5 views

CVE-2025-48560

In AndroidManifest.xml, there is a possible way for an app to monitor motion events due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5AI score0.00075EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/04 12:00 a.m.•1 views

CVE-2025-26450: Missing Authorization

In onInputEvent of IInputMethodSessionWrapper.java, there is a possible way for an untrusted app to inject key and motion events to the default IME due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction ...

7.8CVSS5.9AI score0.0008EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/09/04 12:00 a.m.•13 views

Google Wear OS 安全漏洞

Google Wear OS is a Google-developed operating system from Google, Inc. in the United States, designed for use in smartwatches, smart bands, and other wearable devices. Google Wear OS suffers from a security vulnerability that stems from an obfuscated agent causing an app to monitor motion events...

5.5CVSS5.8AI score0.00075EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/09/04 12:00 a.m.•15 views

PT-2025-36079

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: An issue exists in Android where an application may be able to monitor motion events due to a confused deputy condition. This could result in local information disclosure without requiring...

5.5CVSS5.5AI score0.00075EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/04 12:00 a.m.•4 views

CVE-2025-48560: Unintended Proxy or Intermediary

In AndroidManifest.xml, there is a possible way for an app to monitor motion events due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS5.8AI score0.00075EPSS
SaveExploits0References3
OSV
OSV
•added 2025/09/01 12:00 a.m.•25 views

ASB-A-419110583

In AndroidManifest.xml, there is a possible way for an app to monitor motion events due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS6.1AI score0.00075EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/08/30 12:00 a.m.•4 views

Linux Distros Unpatched Vulnerability : CVE-2021-42218

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OMPL v1.5.2 contains a memory leak in VFRRT.cpp CVE-2021-42218 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL...

7.5CVSS6.9AI score0.01066EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2025/08/27 12:00 a.m.•9 views

Linux Distros Unpatched Vulnerability : CVE-2020-26566

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Denial of Service condition in Motion-Project Motion 3.2 through 4.3.1 allows remote unauthenticated users to cause a webu.c segmentation fault and kill the...

7.5CVSS7.1AI score0.04364EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2025/08/25 12:00 a.m.•4 views

Linux Distros Unpatched Vulnerability : CVE-2015-1872

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ffmjpegdecodesof function in libavcodec/mjpegdec.c in FFmpeg before 2.5.4 does not validate the number of components in a JPEG-LS Start Of Frame segment,...

6.8CVSS6.8AI score0.02125EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/08/24 12:00 a.m.•6 views

Linux Distros Unpatched Vulnerability : CVE-2019-13602

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An Integer Underflow in MP4EIA608Convert in modules/demux/mp4/mp4.c in VideoLAN VLC media player through 3.0.7.1 allows remote attackers to cause a denial of...

7.8CVSS7.5AI score0.02098EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/08/12 12:00 a.m.•16 views

Siemens多款产品 代码问题漏洞

Siemens SIMOTION SCOUT TIA and others are products of Siemens, Germany.Siemens SIMOTION SCOUT TIA is a high-end motion control system.Siemens SIMOTION SCOUT is a high-end motion control system.Siemens SINAMICS STARTER is a drive debugging tool software. A code issue vulnerability exists in severa...

6.8CVSS7.1AI score0.00172EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/08/06 4:23 a.m.•8 views

CVE-2025-21011

Improper access control in SemSensorService for Galaxy Watch prior to SMR Aug-2025 Release 1 allows local attackers to access sensitive information related to motion and body sensors...

5.5CVSS5.9AI score0.00129EPSS
SaveExploits0References1
CVE
CVE
•added 2025/08/06 4:23 a.m.•25 views

CVE-2025-21011

CVE-2025-21011 concerns Samsung Galaxy Watch: an Improper access control flaw in the SemSensorService could allow local attackers to read motion/body sensor data. Affected component is SemSensorService on Galaxy Watch devices prior to SMR Aug-2025 Release 1. The issue stems from access control we...

5.5CVSS5.9AI score0.00129EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/08/06 4:23 a.m.•27 views

CVE-2025-21011

Improper access control in SemSensorService for Galaxy Watch prior to SMR Aug-2025 Release 1 allows local attackers to access sensitive information related to motion and body sensors...

5.5CVSS0.00129EPSS
SaveExploits0References1
Rows per page
Query Builder