Lucene search
+L

13486 matches found

CVE
CVE
added 2025/12/15 6:43 a.m.18 views

CVE-2025-14022

Summary : CVE-2025-14022 affects the LINE client for iOS prior to 15.4. The root cause is improper SSL/TLS certificate validation in an integrated financial SDK, which interfered with network processing and disabled server certificate verification for a significant portion of traffic. This can al...

7.7CVSS6.2AI score0.00159EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/12/15 6:41 a.m.36 views

CVE-2025-14021

The in-app browser in LINE client for iOS versions prior to 14.14 is vulnerable to address bar spoofing, which could allow attackers to execute malicious JavaScript within iframes while displaying trusted URLs, enabling phishing attacks through overlaid malicious content...

4.3CVSS0.00207EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/15 6:41 a.m.4 views

CVE-2025-14021

The in-app browser in LINE client for iOS versions prior to 14.14 is vulnerable to address bar spoofing, which could allow attackers to execute malicious JavaScript within iframes while displaying trusted URLs, enabling phishing attacks through overlaid malicious content...

4.3CVSS6.5AI score0.00207EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/15 6:41 a.m.15 views

CVE-2025-14021

CVE-2025-14021 concerns the LINE client for iOS (pre-14.14). The in‑app browser is vulnerable to address bar spoofing, allowing an attacker to render trusted URLs while executing malicious JavaScript in iframes, enabling phishing via overlayed content. The CVSS 3.1 base score is 4.3 (Medium); att...

4.3CVSS6.5AI score0.00207EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2025/12/15 6:41 a.m.6 views

EUVD-2025-203345

The in-app browser in LINE client for iOS versions prior to 14.14 is vulnerable to address bar spoofing, which could allow attackers to execute malicious JavaScript within iframes while displaying trusted URLs, enabling phishing attacks through overlaid malicious content...

4.3CVSS6.4AI score0.00207EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/12/15 6:39 a.m.4 views

CVE-2025-14020

LINE client for Android versions prior to 14.20 contains a UI spoofing vulnerability in the in-app browser where the full-screen security Toast notification is not properly re-displayed when users return from another application, potentially allowing attackers to conduct phishing attacks by...

5.4CVSS6.2AI score0.00174EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/15 6:39 a.m.16 views

CVE-2025-14020

CVE-2025-14020 affects the LINE client for Android, prior to version 14.20. The issue is a UI spoofing vulnerability in the in-app browser: when users switch away from the app and return, the full-screen security toast notification is not reliably re-displayed, which can enable attackers to condu...

5.4CVSS6.2AI score0.00174EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/12/15 6:39 a.m.32 views

CVE-2025-14020

LINE client for Android versions prior to 14.20 contains a UI spoofing vulnerability in the in-app browser where the full-screen security Toast notification is not properly re-displayed when users return from another application, potentially allowing attackers to conduct phishing attacks by...

5.4CVSS0.00174EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/15 6:39 a.m.6 views

EUVD-2025-203348

LINE client for Android versions prior to 14.20 contains a UI spoofing vulnerability in the in-app browser where the full-screen security Toast notification is not properly re-displayed when users return from another application, potentially allowing attackers to conduct phishing attacks by...

5.4CVSS6.1AI score0.00174EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/12/15 6:38 a.m.35 views

CVE-2025-14019

LINE client for Android versions from 13.8 to 15.5 is vulnerable to UI spoofing in the in-app browser where a specific layout could obscure the full-screen warning prompt, potentially allowing attackers to conduct phishing attacks...

3.4CVSS0.00172EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/15 6:38 a.m.16 views

CVE-2025-14019

CVE-2025-14019 concerns the LINE Android client (versions 13.8–15.5). The in-app browser UI can be spoofed via a specific layout, potentially obscuring a full-screen warning prompt and enabling phishing via UI spoofing. Public sources in the provided documents describe the affected product and ge...

4.7CVSS6.3AI score0.00172EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/15 6:38 a.m.5 views

CVE-2025-14019

LINE client for Android versions from 13.8 to 15.5 is vulnerable to UI spoofing in the in-app browser where a specific layout could obscure the full-screen warning prompt, potentially allowing attackers to conduct phishing attacks...

3.4CVSS6.3AI score0.00172EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/15 12:0 a.m.8 views

PT-2025-51204

LINE client for Android versions prior to 14.20 contains a UI spoofing vulnerability in the in-app browser where the full-screen security Toast notification is not properly re-displayed when users return from another application, potentially allowing attackers to conduct phishing attacks by...

5.4CVSS6.6AI score0.00174EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/12/15 12:0 a.m.9 views

PT-2025-51207

Name of the Vulnerable Software and Affected Versions LINE client for iOS versions prior to 15.19 Description The LINE client for iOS is susceptible to a UI spoofing issue stemming from inconsistencies between the application's navigation state and the user interface of the in-app browser. This...

4.3CVSS6.3AI score0.00172EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2025/12/15 12:0 a.m.6 views

LINE client for Android 安全漏洞

LINE client for Android is an instant messaging application by South Korean company LINE. A security vulnerability exists in LINE client for Android prior to version 14.20, which originates from in-app browser UI spoofing and may lead to phishing attacks...

5.4CVSS6.6AI score0.00174EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/15 12:0 a.m.19 views

Line Corporation Line Client For Ios 安全漏洞

Line Corporation Line Client For Ios is a communication application from Line Corporation, Japan. A security vulnerability exists in Line Corporation Line Client For Ios prior to version 14.14, which originates from in-app browser address bar spoofing and may lead to phishing attacks...

4.3CVSS6.6AI score0.00207EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/15 12:0 a.m.8 views

Line Corporation Line Client For Ios 安全漏洞

Line Corporation Line Client For Ios is a communication application from Line Corporation, Japan. A security vulnerability exists in Line Corporation Line Client For Ios prior to version 15.19, which stems from an inconsistency between the navigation state and the in-app browser UI, which may lea...

4.3CVSS6.7AI score0.00172EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/15 12:0 a.m.7 views

Line Corporation Line Client For Ios 安全漏洞

Line Corporation Line Client For Ios is a communication application from Line Corporation, Japan. A security vulnerability exists in Line Corporation Line Client For Ios versions prior to 15.4, which stems from improper validation of SSL/TLS certificates and could lead to a man-in-the-middle atta...

7.7CVSS6.6AI score0.00159EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/15 12:0 a.m.9 views

PT-2025-51206

LINE client for iOS prior to 15.4 allows man-in-the-middle attacks due to improper SSL/TLS certificate validation in an integrated financial SDK. The SDK interfered with the application's network processing, causing server certificate verification to be disabled for a significant portion of netwo...

7.7CVSS6.6AI score0.00159EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/12/15 12:0 a.m.6 views

LINE client for Android 安全漏洞

LINE client for Android is an instant messaging application by South Korean company LINE. A security vulnerability exists in LINE client for Android versions 13.8 through 15.5, which originates from in-app browser UI spoofing and may lead to phishing attacks...

4.7CVSS6.6AI score0.00172EPSS
SaveExploits0References1
Rows per page
Query Builder