Lucene search
+L

1776 matches found

OSV
OSV
added 2022/08/18 8:15 p.m.5 views

CVE-2022-27500

Incorrect default permissions for the IntelR Support Android application before 21.07.40 may allow an authenticated user to potentially enable information disclosure via local access...

5.5CVSS5.8AI score0.00182EPSS
SaveExploits0References1
NVD
NVD
added 2022/08/18 8:15 p.m.17 views

CVE-2021-44470

Incorrect default permissions for the IntelR Connect M Android application before version 1.7.4 may allow an authenticated user to potentially enable information disclosure via local access...

5.5CVSS0.00182EPSS
SaveExploits0References1
OSV
OSV
added 2022/08/18 8:15 p.m.6 views

CVE-2021-44470

Incorrect default permissions for the IntelR Connect M Android application before version 1.7.4 may allow an authenticated user to potentially enable information disclosure via local access...

5.5CVSS5.8AI score0.00182EPSS
SaveExploits0References1
Prion
Prion
added 2022/08/18 8:15 p.m.14 views

Information disclosure

Incorrect default permissions for the IntelR Connect M Android application before version 1.7.4 may allow an authenticated user to potentially enable information disclosure via local access...

1.7CVSS5.2AI score0.00182EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2022/08/18 12:0 a.m.7 views

Intel Connect M Android application 安全漏洞

Intel Connect M is an application from Intel Corporation USA. Provides a real-time experience for partners to connect with each other through meetings or messages in the program. A security vulnerability exists in the Intel Connect M Android application prior to version 1.7.4, which stems from...

5.5CVSS5.7AI score0.00182EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/08/18 12:0 a.m.9 views

Intel Datacenter Group Event 代码问题漏洞

Intel Datacenter Group Event is a data center group event consulting software from Intel Corporation USA. A security vulnerability exists in all versions of the Intel Datacenter Group Event Android application. An attacker exploited the vulnerability to escalate privileges...

7.8CVSS7.4AI score0.00208EPSS
SaveExploits0References2
NVD
NVD
added 2022/08/16 8:15 a.m.25 views

CVE-2022-35734

'Hulu / フールー' App for Android from version 3.0.47 to the version prior to 3.1.2 uses a hard-coded API key for an external service. By exploiting this vulnerability, API key for an external service may be obtained by analyzing data in the app...

7.5CVSS0.00596EPSS
SaveExploits0References1
OSV
OSV
added 2022/08/16 8:15 a.m.7 views

CVE-2022-35734

'Hulu / フールー' App for Android from version 3.0.47 to the version prior to 3.1.2 uses a hard-coded API key for an external service. By exploiting this vulnerability, API key for an external service may be obtained by analyzing data in the app...

7.5CVSS5.8AI score0.00596EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/08/16 12:0 a.m.14 views

PT-2022-22954 · Hulu · Hulu App For Android

Name of the Vulnerable Software and Affected Versions: Hulu App for Android versions 3.0.47 through 3.1.1 Description: The issue concerns the use of a hard-coded API key for an external service in the Hulu App for Android. This could potentially allow the API key to be obtained by analyzing the...

7.5CVSS7.4AI score0.00596EPSS
SaveExploits0References2
The Hacker News
The Hacker News
added 2022/08/12 12:20 p.m.62 views

Xiaomi Phones with MediaTek Chips Found Vulnerable to Forged Payments

Security flaws have been identified in Xiaomi Redmi Note 9T and Redmi Note 11 models, which could be exploited to disable the mobile payment mechanism and even forge transactions via a rogue Android app installed on the devices. Check Point said it found the flaws in devices powered by MediaTek...

7.5CVSS0.9AI score0.07112EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2022/08/12 12:0 a.m.9 views

The vulnerability of the SAP Authenticator mobile application for Android, related to information disclosure, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the SAP Authenticator mobile application for Android relates to the disclosure of information. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

7.8CVSS7.2AI score0.00751EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2022/07/30 12:15 a.m.4 views

CVE-2022-30083

EllieGrid Android Application version 3.4.1 is vulnerable to Code Injection. The application appears to evaluate user input as code remote...

9.8CVSS5.9AI score
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/07/30 12:15 a.m.3 views

CVE-2022-30083

EllieGrid Android Application version 3.4.1 is vulnerable to Code Injection. The application appears to evaluate user input as code remote...

9.8CVSS7.4AI score0.01093EPSS
SaveExploits1References2
Citrix
Citrix
added 2022/07/29 12:0 a.m.19 views

CWA Android : Citrix Workspace could not verify server or email address, Error code 437

CWA Android : Getting an error "Citrix workspace app could not verify the specified server or email address error code 437". when trying to logon to Workspace app for second time it shows this error...

7.3AI score
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2022/07/28 12:14 a.m.2 views

"Hulu" App for Android uses a hard-coded API key for an external service

Overview "Hulu" App for Android provided by HJ Holdings, Inc. uses a hard-coded API key for an external service CWE-798. Ryo Sato of BroadBand Security, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact T...

7.5CVSS6.8AI score0.00596EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2022/07/27 12:0 a.m.41 views

JVN#40907489: "Hulu / フールー" App for Android uses a hard-coded API key for an external service

"Hulu / フールー" App for Android provided by HJ Holdings, Inc. uses a hard-coded API key for an external service CWE-798. Impact The hard-coded API key may be retrieved via reverse-engineering the application binary. Note that the application users are not directly affected by this vulnerability...

7.5CVSS7.5AI score0.00596EPSS
SaveExploits0
Hacker One
Hacker One
added 2022/07/26 1:38 p.m.33 views

ownCloud: GitHub Security Lab (GHSL) Vulnerability Report: Insufficient path validation in ReceiveExternalFilesActivity.java (GHSL-2022-060)

The Owncloud Android app was found to have insufficient path validation in the ReceiveExternalFilesActivity activity, allowing attackers to read from and write to the application's internal storage. This could be exploited by uploading arbitrary files from the app's internal storage or by writing...

5CVSS4.7AI score0.00524EPSS
SaveExploits1
Hacker One
Hacker One
added 2022/07/26 1:31 p.m.36 views

ownCloud: GitHub Security Lab (GHSL) Vulnerability Report: SQLInjection in FileContentProvider.kt (GHSL-2022-059)

Vulnerability description not provided...

7.1AI score
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2022/07/18 5:15 p.m.9 views

CVE-2022-23745

A potential memory corruption issue was found in Capsule Workspace Android app running on GrapheneOS. This could result in application crashing but could not be used to gather any sensitive information...

7.5CVSS7.1AI score0.15558EPSS
SaveExploits0References2
NVD
NVD
added 2022/07/18 5:15 p.m.26 views

CVE-2022-23745

A potential memory corruption issue was found in Capsule Workspace Android app running on GrapheneOS. This could result in application crashing but could not be used to gather any sensitive information...

7.5CVSS0.15558EPSS
SaveExploits0References1
Rows per page
Query Builder