Lucene search
+L

5 matches found

NVD
NVD
•added 2024/11/20 12:15 a.m.•68 views

CVE-2018-9467

In the getHost function of UriTest.java, there is the possibility of incorrect web origin determination. This could lead to incorrect security decisions with no additional execution privileges needed. User interaction is not needed for exploitation...

9.8CVSS0.00316EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/20 12:00 a.m.•1 views

CVE-2018-9467: Incorrect Default Permissions

In the getHost function of UriTest.java, there is the possibility of incorrect web origin determination. This could lead to incorrect security decisions with no additional execution privileges needed. User interaction is not needed for exploitation...

9.8CVSS7.3AI score0.00316EPSS
SaveExploits0References1
CVE
CVE
•added 2018/04/04 4:00 p.m.•58 views

CVE-2017-13274

CVE-2017-13274 affects Android Runtime: UriTest.getHost() may misdetermine the web origin, enabling incorrect security decisions. Affected: Android 6.0–8.1. Impact described as high/critical (CVSS 3.0: 9.8; base vector CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Exploitation requires no user i...

9.8CVSS8.1AI score0.00491EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2018/04/04 4:00 p.m.•32 views

CVE-2017-13274

In the getHost function of UriTest.java, there is the possibility of incorrect web origin determination. This could lead to incorrect security decisions with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0,...

8.8AI score0.00491EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/04/04 12:00 a.m.•1 views

CVE-2017-13274: Origin Validation Error

In the getHost function of UriTest.java, there is the possibility of incorrect web origin determination. This could lead to incorrect security decisions with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0,...

9.8CVSS8.2AI score0.00491EPSS
SaveExploits0References2
Rows per page
Query Builder