CVE-2021-43189

In JetBrains YouTrack Mobile before 2021.2, access token protection on Android is incomplete...

CVE-2020-25493

Oclean Mobile Application 2.1.2 communicates with an external website using HTTP so it is possible to eavesdrop the network traffic. The content of HTTP payload is encrypted using XOR with a hardcoded key, which allows for the possibility to decode the traffic...

CVE-2020-12702

Weak encryption in the Quick Pairing mode in the eWeLink mobile application Android application V4.9.2 and earlier, iOS application V4.9.1 and earlier allows physically proximate attackers to eavesdrop on Wi-Fi credentials and other sensitive information by monitoring the Wi-Fi spectrum during th...

CVE-2020-14105

The application in the mobile phone can read the SNO information of the device, Xiaomi 10 MIUI 2020.01.15...

CVE-2020-20094

Instagram iOS 106.0 and prior and Android 107.0.0.11 and prior user interface does not properly represent URI messages to the user, which results in URI spoofing via specially crafted messages...

CVE-2020-14292

In the COVIDSafe application through 1.0.21 for Android, unsafe use of the Bluetooth transport option in the GATT connection allows attackers to trick the application into establishing a connection over Bluetooth BR/EDR transport, which reveals the public Bluetooth address of the victim's phone...

CVE-2020-27258

In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, an information disclosure vulnerability in the communication protocol of the insulin pump and its AnyDana-i and AnyDana-A mobile applications allows unauthenticated attackers to extract the pump’s keypad lock PIN via Bluetooth...

CVE-2012-4004

Cross-site scripting XSS vulnerability in the Sleipnir Mobile application 2.2.0 and earlier and Sleipnir Mobile Black Edition application 2.2.0 and earlier for Android allows remote attackers to inject arbitrary web script or HTML via a crafted application that interacts with an unspecified...

CVE-2019-14757

An issue was discovered in KaiOS 2.5 and 2.5.1. The pre-installed Contacts application is vulnerable to HTML and JavaScript injection attacks. An attacker can send a vCard file to the victim that will inject HTML into the Contacts application assuming the victim chooses to import the file. At a...

CVE-2019-5627

The iOS mobile application BlueCats Reveal before 5.14 stores the username and password in the app cache as base64 encoded strings, i.e. clear text. These persist in the cache even if the user logs out. This can allow an attacker to compromise the affected BlueCats network implementation. The...

CVE-2010-4214

The Wells Fargo Mobile application 1.1 for Android stores a username and password, along with account balances, in cleartext, which might allow physically proximate attackers to obtain sensitive information by reading application data...

CVE-2025-4737

Insufficient encryption vulnerability in the mobile application com.transsion.aivoiceassistant may lead to the risk of sensitive information leakage...

PT-2025-21727 · Unknown · App Cheap Push Notification

Name of the Vulnerable Software and Affected Versions: App Cheap Push notification for Mobile and Web app versions n/a through 2.0.3 Description: The issue is related to a Missing Authorization vulnerability, which allows the exploitation of incorrectly configured access control security levels...

CVE-2025-4737

Insufficient encryption vulnerability in the mobile application com.transsion.aivoiceassistant may lead to the risk of sensitive information leakage...

CVE-2025-4737

Insufficient encryption vulnerability in the mobile application com.transsion.aivoiceassistant may lead to the risk of sensitive information leakage...

CVE-2025-4737

Insufficient encryption vulnerability in the mobile application com.transsion.aivoiceassistant may lead to the risk of sensitive information leakage...

CVE-2025-4737

CVE-2025-4737 affects the mobile app com.transsion.aivoiceassistant. The issue is described as an Insufficient encryption vulnerability that may lead to leakage of sensitive information. AV:L/AC:L/PR:N/UI:N/S:U with a Medium base score (6.2); impact is Confidentiality HIGH, others NONE/LOW. Conne...

CVE-2025-3698

Interface exposure vulnerability in the mobile application com.transsion.carlcare may lead to information leakage risk...

CVE-2025-3698

Interface exposure vulnerability in the mobile application com.transsion.carlcare may lead to information leakage risk...

CVE-2025-3698

Interface exposure vulnerability in the mobile application com.transsion.carlcare may lead to information leakage risk...