Vulnerabilities (CVE)

Filtered by CWE-922
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-25266 1 Sophos 2 Authenticator, Intercept X 2022-05-06 2.1 LOW 3.9 LOW
An insecure data storage vulnerability allows a physical attacker with root privileges to retrieve TOTP secret keys from unlocked phones in Sophos Authenticator for Android version 3.4 and older, and Intercept X for Mobile (Android) before version 9.7.3495.
CVE-2021-25524 1 Samsung 1 Contacts 2021-12-13 2.1 LOW 3.3 LOW
Insecure storage of device information in Contacts prior to version 12.7.05.24 allows attacker to get Samsung Account ID.
CVE-2021-25523 1 Samsung 1 Dialer 2021-12-13 2.1 LOW 3.3 LOW
Insecure storage of device information in Samsung Dialer prior to version 12.7.05.24 allows attacker to get Samsung Account ID.
CVE-2021-25522 1 Samsung 1 Smart Capture 2021-12-13 2.1 LOW 3.3 LOW
Insecure storage of sensitive information vulnerability in Smart Capture prior to version 4.8.02.10 allows attacker to access victim's captured images without permission.
CVE-2020-4803 1 Ibm 1 Edge Application Manager 2021-09-28 2.1 LOW 3.3 LOW
IBM Edge 4.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 189535.
CVE-2020-4805 1 Ibm 1 Edge Application Manager 2021-09-28 2.1 LOW 3.3 LOW
IBM Edge 4.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 189539.
CVE-2020-4809 1 Ibm 1 Edge Application Manager 2021-09-28 2.1 LOW 3.3 LOW
IBM Edge 4.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 189633.
CVE-2019-8799 1 Apple 5 Ipados, Iphone Os, Mac Os X and 2 more 2021-07-21 2.1 LOW 2.4 LOW
This issue was resolved by replacing device names with a random identifier. This issue is fixed in iOS 13.1 and iPadOS 13.1, macOS Catalina 10.15, watchOS 6, tvOS 13. An attacker in physical proximity may be able to passively observe device names in AWDL communications.
CVE-2020-0422 1 Google 1 Android 2021-07-21 2.1 LOW 3.3 LOW
In constructImportFailureNotification of NotificationImportExportListener.java, there is a possible permissions bypass due to an unsafe PendingIntent. This could lead to local information disclosure of contact data with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-161718556
CVE-2021-20396 1 Ibm 1 Security Qradar Analyst Workflow 2021-06-21 2.1 LOW 3.3 LOW
IBM QRadar Analyst Workflow App 1.0 through 1.18.0 for IBM QRadar SIEM allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 196009.
CVE-2021-25404 1 Samsung 2 Smartthings, Smartthings Firmware 2021-06-21 2.1 LOW 3.3 LOW
Information Exposure vulnerability in SmartThings prior to version 1.7.64.21 allows attacker to access user information via log.
CVE-2021-25402 1 Samsung 1 Notes 2021-06-21 2.1 LOW 3.3 LOW
Information Exposure vulnerability in Samsung Notes prior to version 4.2.04.27 allows attacker to access s pen latency information.
CVE-2021-20575 1 Ibm 2 Application Gateway, Security Verify Access 2021-06-07 2.1 LOW 3.3 LOW
IBM Security Verify Access 20.07 allows web pages to be stored locally which can be read by another user on the system. X-Force ID: 199278.
CVE-2020-4765 1 Ibm 1 Cloud Pak For Multicloud Management 2021-05-26 2.1 LOW 3.3 LOW
IBM Cloud Pak for Multicloud Management prior to 2.3 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 188902.
CVE-2021-20391 1 Ibm 1 Qradar User Behavior Analytics 2021-05-20 2.1 LOW 3.3 LOW
IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 195999.
CVE-2020-4726 1 Ibm 1 Cloud Application Performance Management 2021-03-08 2.1 LOW 3.3 LOW
The IBM Application Performance Monitoring UI (IBM Cloud APM 8.1.4) allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 187975.
CVE-2020-4906 1 Ibm 1 Financial Transaction Manager For Multiplatform 2020-12-17 2.1 LOW 3.3 LOW
IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 allows web pages to be stored locally which can be read by another user on the system.
CVE-2019-19557 1 Harman 1 Hermes 2020-11-30 2.1 LOW 2.4 LOW
A misconfiguration in the debug interface in Mercedes-Benz HERMES 1 allows an attacker with direct physical access to device hardware to obtain cellular modem information.
CVE-2019-19561 1 Harman 1 Hermes 2020-11-30 2.1 LOW 2.4 LOW
A misconfiguration in the debug interface in Mercedes-Benz HERMES 1.5 allows an attacker with direct physical access to device hardware to obtain cellular modem information.
CVE-2020-4886 1 Ibm 1 Infosphere Information Server 2020-11-17 2.1 LOW 3.3 LOW
IBM InfoSphere Information Server 11.7 stores sensitive information in the browser's history that could be obtained by a user who has access to the same system. IBM X-Force ID: 190910.
CVE-2020-4344 1 Ibm 1 Tivoli Business Service Manager 2020-09-16 2.1 LOW 3.3 LOW
IBM Tivoli Business Service Manager 6.2.0.0 - 6.2.0.2 IF 1 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 178247.
CVE-2019-4695 1 Ibm 1 Guardium Data Encryption 2020-08-28 2.1 LOW 3.3 LOW
IBM Security Guardium Data Encryption (GDE) 3.0.0.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 171926.
CVE-2020-4371 1 Ibm 1 Verify Gateway 2020-07-24 2.1 LOW 3.3 LOW
IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 contains sensitive information in leftover debug code that could be used aid a local user in further attacks against the system. IBM X-Force ID: 179008.
CVE-2019-4265 1 Ibm 1 Maximo Anywhere 2020-04-30 2.1 LOW 2.4 LOW
IBM Maximo Anywhere 7.6.0, 7.6.1, 7.6.2, and 7.6.3 does not have device root detection which could result in an attacker gaining sensitive information about the device. IBM X-Force ID: 160198.
CVE-2020-4197 1 Ibm 1 Tivoli Netcool\/omnibus 2020-03-03 2.1 LOW 2.4 LOW
IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 174908.