11477 matches found
CVE-2021-25448
Improper access control vulnerability in Smart Touch Call prior to version 1.0.0.5 allows arbitrary webpage loading in webview...
Improper access control
Improper access control vulnerability in Smart Touch Call prior to version 1.0.0.5 allows arbitrary webpage loading in webview...
CVE-2021-25448
Improper access control vulnerability in Smart Touch Call prior to version 1.0.0.5 allows arbitrary webpage loading in webview...
CVE-2021-25447
The CVE concerns Samsung SmartThings. Affected product: SmartThings app (versions prior to 1.7.67.25). Root cause: improper access control allowing untrusted applications to perform local file inclusion in the WebView. Impact: local file inclusion in the app context (no vector details provided be...
CVE-2021-25446
CVE-2021-25446 affects Samsung SmartThings prior to version 1.7.67.25. The issue is an improper access control vulnerability that allows untrusted applications to cause arbitrary webpage loading in WebView. Evidence from multiple sources confirms the affected software version range and the root c...
SAMSUNG SmartThings 安全漏洞
SAMSUNG SmartThings is an app from South Korea's Samsung SAMSUNG that connects smart devices. A security vulnerability exists in SAMSUNG SmartThings versions prior to 1.7.67.25, which stems from the application allowing untrusted programs to include local files in the webview...
PT-2021-16638 · Unknown · Smart Touch Call
Name of the Vulnerable Software and Affected Versions: Smart Touch Call versions prior to 1.0.0.5 Description: The issue is related to improper access control, allowing arbitrary webpage loading in the webview component. Recommendations: For versions prior to 1.0.0.5, update to version 1.0.0.5 or...
SAMSUNG Smart Touch Call 安全漏洞
SAMSUNG Smart Touch Call is a smart call application from Samsung South Korea. lets users know immediately that a call is spam, blocks the call, and then lets users report the call. A security vulnerability exists in SAMSUNG Smart Touch Call prior to version 1.0.0.5, which stems from an improper...
CVE-2021-25447: Improper Access Control
Improper access control vulnerability in SmartThings prior to version 1.7.67.25 allows untrusted applications to cause local file inclusion in webview...
CVE-2021-25446: Improper Access Control
Improper access control vulnerability in SmartThings prior to version 1.7.67.25 allows untrusted applications to cause arbitrary webpage loading in webview...
PT-2021-16637 · Samsung · Smartthings
Name of the Vulnerable Software and Affected Versions: SmartThings versions prior to 1.7.67.25 Description: The issue is related to improper access control, allowing untrusted applications to cause local file inclusion in webview. Recommendations: For versions prior to 1.7.67.25, update to versio...
PT-2021-16636 · Samsung · Smartthings
Name of the Vulnerable Software and Affected Versions: SmartThings versions prior to 1.7.67.25 Description: The issue is related to improper access control, allowing untrusted applications to cause arbitrary webpage loading in webview. Recommendations: For versions prior to 1.7.67.25, update to...
SAMSUNG SmartThings 安全漏洞
SAMSUNG SmartThings is an app from South Korea's Samsung SAMSUNG that connects smart devices. A security vulnerability exists in SAMSUNG SmartThings versions prior to 1.7.67.25, which stems from the application allowing untrusted applications to arbitrarily load web pages in the webview...
CVE-2021-25448: Improper Access Control
Improper access control vulnerability in Smart Touch Call prior to version 1.0.0.5 allows arbitrary webpage loading in webview...
CVE-2021-36214
LINE client for iOS before 10.16.3 allows cross site script with specific header in WebView...
CVE-2021-36214
LINE client for iOS before 10.16.3 allows cross site script with specific header in WebView...
Cross site scripting
LINE client for iOS before 10.16.3 allows cross site script with specific header in WebView...
CVE-2021-36214
LINE client for iOS before 10.16.3 allows cross site script with specific header in WebView...
CVE-2021-36214
The CVE-2021-36214 issue affects the LINE client for iOS, specifically versions prior to 10.16.3. A cross-site scripting vulnerability exists in the WebView caused by processing headers in WebView content, allowing injected or misinterpreted content to execute script. Reported details indicate th...