Lucene search
+L

627 matches found

OSV
OSV
•added 2022/03/18 6:15 p.m.•13 views

CVE-2022-22642

This issue was addressed with improved checks. This issue is fixed in iOS 15.4 and iPadOS 15.4. A user may be able to bypass the Emergency SOS passcode prompt...

9.8CVSS7.3AI score0.0117EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/03/18 6:15 p.m.•14 views

CVE-2022-22642

This issue was addressed with improved checks. This issue is fixed in iOS 15.4 and iPadOS 15.4. A user may be able to bypass the Emergency SOS passcode prompt...

9.8CVSS7.2AI score0.0117EPSS
SaveExploits0References2
NVD
NVD
•added 2022/03/18 6:15 p.m.•40 views

CVE-2022-22642

This issue was addressed with improved checks. This issue is fixed in iOS 15.4 and iPadOS 15.4. A user may be able to bypass the Emergency SOS passcode prompt...

9.8CVSS0.0117EPSS
SaveExploits0References1
NVD
NVD
•added 2022/03/18 6:15 p.m.•33 views

CVE-2022-22618

This issue was addressed with improved checks. This issue is fixed in watchOS 8.5, iOS 15.4 and iPadOS 15.4. A user may be able to bypass the Emergency SOS passcode prompt...

7.8CVSS0.00379EPSS
SaveExploits0References2
CVE
CVE
•added 2022/03/18 5:59 p.m.•118 views

CVE-2022-22618

CVE-2022-22618 concerns iOS/iPadOS/watchOS where the Emergency SOS passcode prompt could be bypassed. The Apple advisories attribute the issue to insufficient or inadequate checks, with the fix implemented in watchOS 8.5, iOS 15.4, and iPadOS 15.4. The vulnerability is discussed with references t...

7.8CVSS7.2AI score0.00379EPSS
SaveExploits0References2Affected Software3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/18 12:00 a.m.•5 views

CVE-2022-22642: Undefined Security Weakness

This issue was addressed with improved checks. This issue is fixed in iOS 15.4 and iPadOS 15.4. A user may be able to bypass the Emergency SOS passcode prompt...

9.8CVSS8.1AI score0.0117EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/18 12:00 a.m.•4 views

CVE-2022-22618: Undefined Security Weakness

This issue was addressed with improved checks. This issue is fixed in watchOS 8.5, iOS 15.4 and iPadOS 15.4. A user may be able to bypass the Emergency SOS passcode prompt...

7.8CVSS7.2AI score0.00379EPSS
SaveExploits0References1
NVD
NVD
•added 2021/12/21 6:15 p.m.•33 views

CVE-2021-27451

Mesa Labs AmegaView Versions 3.0 and prior’s passcode is generated by an easily reversible algorithm, which may allow an attacker to gain access to the device...

9.8CVSS0.00802EPSS
SaveExploits0References1
OSV
OSV
•added 2021/12/21 6:15 p.m.•13 views

CVE-2021-27451

Mesa Labs AmegaView Versions 3.0 and prior’s passcode is generated by an easily reversible algorithm, which may allow an attacker to gain access to the device...

9.8CVSS5.8AI score0.00802EPSS
SaveExploits0References1
Prion
Prion
•added 2021/12/21 6:15 p.m.•34 views

Design/Logic Flaw

Mesa Labs AmegaView Versions 3.0 and prior’s passcode is generated by an easily reversible algorithm, which may allow an attacker to gain access to the device...

7.5CVSS9.4AI score0.00802EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2021/12/21 5:55 p.m.•62 views

CVE-2021-27451

Summary: CVE-2021-27451 affects MesaLabs AmegaView, versions 3.0 and earlier, where the passcode is generated by an easily reversible algorithm, potentially allowing an attacker to gain access to the device. The broader ICS-CERT advisory (I CS A-21-147-03) and associated NVD/NPP records describe ...

9.8CVSS8.6AI score0.00802EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/21 12:00 a.m.•3 views

CVE-2021-27451: Improper Authentication

Mesa Labs AmegaView Versions 3.0 and prior’s passcode is generated by an easily reversible algorithm, which may allow an attacker to gain access to the device...

9.8CVSS5.9AI score0.00802EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/12/01 12:00 a.m.•13 views

Wokka Lokka Q50 信息泄露漏洞

The Wokka Lokka Q50 is a children's smartwatch from Wokka Lokka USA. The Wokka Lokka Q50 suffers from an information disclosure vulnerability that originates from allowing a remote attacker knowing the SIM phone number and passcode to listen to the device's surroundings via callbacks in SMS...

9.3CVSS7.8AI score0.01076EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2021/10/22 12:00 a.m.•9 views

PT-2021-7225 · Owl · Owl Labs Meeting Owl

Name of the Vulnerable Software and Affected Versions: Owl Labs Meeting Owl version 5.2.0.15 Description: The issue is related to the implementation of Bluetooth Low Energy BLE technology in the microprogram of the Meeting Owl Pro camera for video conferencing. It involves inadequate processing o...

7.4CVSS7.3AI score0.00844EPSS
SaveExploits1References15
Veracode
Veracode
•added 2021/10/05 3:38 a.m.•24 views

Secure Encryption Bypass

github.com/wireapp/wire-ios is vulnerable to bypass of secure encryption. Mandatory encryption at rest feature can be pypassed when the device passcode is disabled or is not set. The users will not be aware of inactivation of encryption at rest as the feature is hidden to them...

4.6CVSS1.7AI score0.00175EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2021/10/04 7:15 p.m.•43 views

CVE-2021-41094

Wire is an open source secure messenger. Users of Wire by Bund may bypass the mandatory encryption at rest feature by simply disabling their device passcode. Upon launching, the app will attempt to enable encryption at rest by generating encryption keys via the Secure Enclave, however it will fai...

4.6CVSS0.00175EPSS
SaveExploits0References2
Prion
Prion
•added 2021/10/04 7:15 p.m.•39 views

Design/Logic Flaw

Wire is an open source secure messenger. Users of Wire by Bund may bypass the mandatory encryption at rest feature by simply disabling their device passcode. Upon launching, the app will attempt to enable encryption at rest by generating encryption keys via the Secure Enclave, however it will fai...

2.1CVSS4.8AI score0.00175EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2021/10/04 7:15 p.m.•14 views

CVE-2021-41094

Wire is an open source secure messenger. Users of Wire by Bund may bypass the mandatory encryption at rest feature by simply disabling their device passcode. Upon launching, the app will attempt to enable encryption at rest by generating encryption keys via the Secure Enclave, however it will fai...

4.6CVSS5.7AI score0.00175EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2021/10/04 12:00 a.m.•18 views

PT-2021-23083 · Wire · Wire

Name of the Vulnerable Software and Affected Versions: Wire versions prior to 3.70 Description: The issue allows users to bypass the mandatory encryption at rest feature by disabling their device passcode. When the app launches, it attempts to enable encryption at rest by generating encryption ke...

4.6CVSS4.5AI score0.00175EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/04 12:00 a.m.•3 views

CVE-2021-41094: Exposure of Resource to Wrong Sphere

Wire is an open source secure messenger. Users of Wire by Bund may bypass the mandatory encryption at rest feature by simply disabling their device passcode. Upon launching, the app will attempt to enable encryption at rest by generating encryption keys via the Secure Enclave, however it will fai...

4.6CVSS5.7AI score0.00175EPSS
SaveExploits0References2
Rows per page
Query Builder