4388 matches found
CVE-2025-8364
A crafted URL using a blob: URI could have hidden the true origin of the page, resulting in a potential spoofing attack. Note: This issue only affected Android operating systems. Other operating systems are unaffected. This vulnerability affects Firefox 141...
PT-2025-33718 · Aftership · Aftership Package Tracker App
Name of the Vulnerable Software and Affected Versions: AfterShip Package Tracker App versions through 5.24.1 Description: A security vulnerability has been detected in AfterShip Package Tracker App on Android. The affected element is an unknown function within the AndroidManifest.xml file of the...
Linux Distros Unpatched Vulnerability : CVE-2017-5113
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Math overflow in Skia in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allowed a remote attacker to potentially...
Linux Distros Unpatched Vulnerability : CVE-2017-5012
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap buffer overflow in V8 in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to...
Linux Distros Unpatched Vulnerability : CVE-2016-5219
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap use after free in V8 in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to...
CVE-2025-9093
A security vulnerability has been detected in BuzzFeed App 2024.9 on Android. This affects an unknown part of the file AndroidManifest.xml of the component com.buzzfeed.android. The manipulation leads to improper export of android application components. The attack needs to be approached locally...
CVE-2025-54809
F5 Access for Android before version 3.1.2 which uses HTTPS does not verify the remote endpoint identity. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...
CVE-2025-54809
F5 Access for Android before version 3.1.2 which uses HTTPS does not verify the remote endpoint identity. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...
CVE-2025-54809 F5 Access for Android vulnerability
F5 Access for Android before version 3.1.2 which uses HTTPS does not verify the remote endpoint identity. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...
F5 Access 信任管理问题漏洞
F5 Access is a U.S.-based F5 company that uses VPN and optimization technologies to protect and accelerate mobile device access to corporate networks and applications. A trust management issue vulnerability exists in F5 Access for Android prior to version 3.1.2, which stems from failure to...
PT-2025-33006 · F5 · F5 Access For Android
Name of the Vulnerable Software and Affected Versions: F5 Access for Android versions prior to 3.1.2 Description: F5 Access for Android, when using HTTPS, does not verify the identity of the remote endpoint. Recommendations: Update to version 3.1.2 or later...
CVE-2025-49736
The CVE-2025-49736 entry concerns Microsoft Edge (Chromium-based) for Android where the UI can perform an incorrect action, enabling spoofing of the user interface over a network. The available data confirms the affected product family (Edge for Android) and the general impact (spoofing via UI ma...
Microsoft Edge 安全漏洞
Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A spoofing vulnerability exists in Microsoft Edge Chromium-based for Android, which can be exploited by attackers to conduct spoofing attacks when visiting specially crafted websites...
Linux Distros Unpatched Vulnerability : CVE-2021-23976
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When accepting a malicious intent from other installed apps, Firefox for Android accepted manifests from arbitrary file paths and allowed declaring webapp...
Linux Distros Unpatched Vulnerability : CVE-2023-0133
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in in Permission prompts in Google Chrome on Android prior to 109.0.5414.74 allowed a remote attacker to bypass main origin...
CVE-2025-8707
A vulnerability was found in Huuge Box App 1.0.3 on Android. It has been classified as problematic. This affects an unknown part of the file AndroidManifest.xml of the component com.huuge.game.zjbox. The manipulation leads to improper export of android application components. Local access is...
CVE-2025-8707
CVE-2025-8707 affects Huuge Box App 1.0.3 on Android, specifically the component com.huuge.game.zjbox through improper export of AndroidManifest.xml. The root cause is manipulation of an AndroidManifest.xml element that leads to exporting of application components, requiring local access for expl...
Linux Distros Unpatched Vulnerability : CVE-2023-6868
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In some instances, the user-agent would allow push requests which lacked a valid VAPID even though the push manager subscription defined one. This could allow...
CVE-2025-8524
A vulnerability was found in Boquan DotWallet App 2.15.2 on Android and classified as problematic. Affected by this issue is some unknown functionality of the file AndroidManifest.xml of the component com.boquanhash.dotwallet. The manipulation leads to improper export of android application...