Lucene search
+L

176 matches found

NVD
NVD
•added 2026/11/02 8:18 p.m.•4 views

CVE-2026-91900

Dell Alienware Command Center AWCC, versions Versions up to and including 6.14.20.0, contains an Improper Authorization in Handler for Custom URL Scheme vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Command execution, Launch...

5.8CVSS
SaveExploits0References1
CVE
CVE
•added 2026/11/02 8:11 p.m.•8 views

CVE-2026-91901

Dell Alienware Command Center (AWCC) versions prior to 6.14.54.0 are susceptible to an Improper Authorization in Handler for Custom URL Scheme vulnerability (CWE-939). A low privileged attacker with remote access could exploit this to perform Client-Side Request Forgery . Remediation is available...

3.5CVSS5.9AI score
SaveExploits0References1
EUVD
EUVD
•added 2026/11/02 8:11 p.m.•6 views

EUVD-2026-115459

Dell Alienware Command Center AWCC, versions prior to 6.14.54.0, contain an Improper Authorization in Handler for Custom URL Scheme vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Client-Side Request Forgery...

3.5CVSS5.9AI score
SaveExploits0References1
Cvelist
Cvelist
•added 2026/11/02 8:04 p.m.•11 views

CVE-2026-91900

Dell Alienware Command Center AWCC, versions Versions up to and including 6.14.20.0, contains an Improper Authorization in Handler for Custom URL Scheme vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Command execution, Launch...

5.8CVSS
SaveExploits0References1
EUVD
EUVD
•added 2026/11/02 8:04 p.m.•6 views

EUVD-2026-115455

Dell Alienware Command Center AWCC, versions Versions up to and including 6.14.20.0, contains an Improper Authorization in Handler for Custom URL Scheme vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Command execution, Launch...

5.8CVSS6.1AI score
SaveExploits0References1
osv_cve
osv_cve
•added 2026/10/20 2:30 p.m.•16 views

CVE-2026-113411 Nerimity Desktop Window Open mainWindow.js shell.openExternal improper authorization in handler for custom url scheme

A vulnerability was found in Nerimity Desktop up to 2.2.2. Affected by this issue is the function shell.openExternal of the file src/mainWindow.js of the component Window Open Handler. The manipulation of the argument url results in improper authorization in handler for custom url scheme. The...

5.3CVSS5.3AI score
SaveExploits0References9
Vulnrichment
Vulnrichment
•added 2026/10/20 2:30 p.m.•10 views

CVE-2026-113411 Nerimity Desktop Window Open mainWindow.js shell.openExternal improper authorization in handler for custom url scheme

A vulnerability was found in Nerimity Desktop up to 2.2.2. Affected by this issue is the function shell.openExternal of the file src/mainWindow.js of the component Window Open Handler. The manipulation of the argument url results in improper authorization in handler for custom url scheme. The...

7.5CVSS5.9AI score0.00287EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2026/10/20 2:30 p.m.•29 views

CVE-2026-113411 Nerimity Desktop Window Open mainWindow.js shell.openExternal improper authorization in handler for custom url scheme

A vulnerability was found in Nerimity Desktop up to 2.2.2. Affected by this issue is the function shell.openExternal of the file src/mainWindow.js of the component Window Open Handler. The manipulation of the argument url results in improper authorization in handler for custom url scheme. The...

7.5CVSS0.00287EPSS
SaveExploits0References7
CVE
CVE
•added 2026/10/20 2:30 p.m.•29 views

CVE-2026-113411

A vulnerability exists in Nerimity Desktop up to version 2.2.2 within the Window Open Handler component. Specifically, the shell.openExternal function in src/mainWindow.js fails to properly authorize custom URL schemes when the url argument is manipulated. This flaw allows for remote execution of...

7.5CVSS5.9AI score0.00287EPSS
SaveExploits0References7
NVD
NVD
•added 2026/10/15 9:17 a.m.•15 views

CVE-2026-96614

"ゲオアプリ" provided by GEO CORPORATION is vulnerable to improper authorization in handler for a custom URL scheme. An attacker may be able to cause the application's in-app browser to access an arbitrary website, potentially leading to phishing attacks or disclosure of a service's session ID...

5.4CVSS0.00192EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/10/15 8:25 a.m.•16 views

EUVD-2026-101935

"ゲオアプリ" provided by GEO CORPORATION is vulnerable to improper authorization in handler for a custom URL scheme. An attacker may be able to cause the application's in-app browser to access an arbitrary website, potentially leading to phishing attacks or disclosure of a service's session ID...

5.4CVSS5.9AI score0.00192EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/10/15 8:25 a.m.•48 views

CVE-2026-96614

"ゲオアプリ" provided by GEO CORPORATION is vulnerable to improper authorization in handler for a custom URL scheme. An attacker may be able to cause the application's in-app browser to access an arbitrary website, potentially leading to phishing attacks or disclosure of a service's session ID...

5.4CVSS0.00192EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/10/15 8:25 a.m.•14 views

CVE-2026-96614

"ゲオアプリ" provided by GEO CORPORATION is vulnerable to improper authorization in handler for a custom URL scheme. An attacker may be able to cause the application's in-app browser to access an arbitrary website, potentially leading to phishing attacks or disclosure of a service's session ID...

5.4CVSS5.9AI score0.00192EPSS
SaveExploits0References3
CVE
CVE
•added 2026/10/15 8:25 a.m.•33 views

CVE-2026-96614

The "ゲオアプリ" application, provided by GEO CORPORATION , is vulnerable to improper authorization within its handler for a custom URL scheme . This flaw allows an attacker to force the application's in-app browser to navigate to an arbitrary website. Such actions could potentially lead to phishing a...

5.4CVSS5.9AI score0.00192EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/15 12:00 a.m.•13 views

CVE-2026-96614: Improper Authorization in Handler for Custom URL Scheme

"ゲオアプリ" provided by GEO CORPORATION is vulnerable to improper authorization in handler for a custom URL scheme. An attacker may be able to cause the application's in-app browser to access an arbitrary website, potentially leading to phishing attacks or disclosure of a service's session ID...

5.4CVSS5.9AI score0.00192EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/15 12:00 a.m.•14 views

PT-2026-114839

"ゲオアプリ" provided by GEO CORPORATION is vulnerable to improper authorization in handler for a custom URL scheme. An attacker may be able to cause the application's in-app browser to access an arbitrary website, potentially leading to phishing attacks or disclosure of a service's session ID...

5.4CVSS5.9AI score0.00192EPSS
SaveExploits0References4
NVD
NVD
•added 2026/10/13 3:17 p.m.•18 views

CVE-2026-53418

Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace for Android before version 7.2.1 may allow an unauthenticated user to conduct an escalation of privilege via network access...

8.1CVSS0.00303EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/13 2:15 p.m.•9 views

EUVD-2026-98747

Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace for Android before version 7.2.1 may allow an unauthenticated user to conduct an escalation of privilege via network access...

8.1CVSS5.8AI score0.00303EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/13 2:15 p.m.•27 views

CVE-2026-53418

The Zoom Workplace for Android application, specifically versions before 7.2.1 , is vulnerable to Improper Authorization in Handler for Custom URL Scheme (CWE-939). This flaw may allow an unauthenticated user to perform an escalation of privilege via network access . The CVSS 3.1 score is 8.1 (Hi...

8.1CVSS5.8AI score0.00303EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/13 2:15 p.m.•38 views

CVE-2026-53418

Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace for Android before version 7.2.1 may allow an unauthenticated user to conduct an escalation of privilege via network access...

8.1CVSS0.00303EPSS
SaveExploits0References1
Rows per page
Query Builder