11715 matches found
PT-2021-5574
Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 95.0.4638.54 Description The issue is related to inappropriate implementation in the WebView component of Google Chrome, allowing a remote attacker to leak cross-origin data via a crafted app. This...
Google Chrome Security Feature Vulnerability
Chrome is a web browsing tool developed by Google. versions prior to Google Chrome 95.0.4638.54 are vulnerable to a WebView misimplementation. An attacker could exploit this vulnerability to leak cross-domain data through a crafted application...
chromium -- multiple vulnerabilities
Chrome Releases reports: This release contains 19 security fixes, including: 1246631 High CVE-2021-37981: Heap buffer overflow in Skia. Reported by Yangkang @dnpushme of 360 ATA on 2021-09-04 1248661 High CVE-2021-37982: Use after free in Incognito. Reported by Weipeng Jiang @Krace from Codesafe...
PT-2021-7222
Name of the Vulnerable Software and Affected Versions MCE Systems affected versions not specified Description The vulnerability in the MCE Systems mobile device lifecycle management system's WebView component is related to the failure to neutralize special elements used in the operating system...
PT-2021-7240
Name of the Vulnerable Software and Affected Versions MCE Systems affected versions not specified Description The issue is related to errors in link processing before accessing a file in the MCE Systems mobile device lifecycle management system's WebView component. Exploitation of this issue may...
PT-2021-7221
Name of the Vulnerable Software and Affected Versions MCE Systems affected versions not specified Description The issue is related to the transmission of data in plain text in the MCE Systems mobile device lifecycle management system's WebView component. This could allow an attacker to implement ...
PT-2021-7244
Name of the Vulnerable Software and Affected Versions MCE Systems affected versions not specified Description The issue is related to the categoryId parameter in the WebView component of the MCE Systems mobile device lifecycle management system. It involves errors in link processing before...
Basecamp: com.basecamp.bc3 Webview Javascript Injection and JS bridge takeover
It was identified that the android com.basecamp.bc3 application, contains a Webview where the loaded URLs are not sanitised properly. As this webview's functionality is extended via javascript interfaces and has the javascript enabled it is possible to inject arbitrary javascript code which will ...
CVE-2021-25463
Improper access control vulnerability in PENUP prior to version 3.8.00.18 allows arbitrary webpage loading in webview...
Improper access control
Improper access control vulnerability in PENUP prior to version 3.8.00.18 allows arbitrary webpage loading in webview...
CVE-2021-25463
Improper access control vulnerability in PENUP prior to version 3.8.00.18 allows arbitrary webpage loading in webview...
CVE-2021-25463
Improper access control vulnerability in PENUP prior to version 3.8.00.18 allows arbitrary webpage loading in webview...
CVE-2021-25463
CVE-2021-25463 affects Samsung PENUP prior to version 3.8.00.18. The connected sources confirm an improper access control vulnerability that allows arbitrary webpage loading in the webview component. Impact is limited to the ability to load webpages within PENUP’s webview, with the CVSS details i...
CVE-2021-25463: Improper Access Control
Improper access control vulnerability in PENUP prior to version 3.8.00.18 allows arbitrary webpage loading in webview...
PT-2021-16653 · Penup · Penup
Name of the Vulnerable Software and Affected Versions: PENUP versions prior to 3.8.00.18 Description: The issue is related to improper access control, allowing arbitrary webpage loading in webview. This could potentially lead to unauthorized access or malicious activities. Recommendations: For...
CVE-2021-25446
Improper access control vulnerability in SmartThings prior to version 1.7.67.25 allows untrusted applications to cause arbitrary webpage loading in webview...
CVE-2021-25448
Improper access control vulnerability in Smart Touch Call prior to version 1.0.0.5 allows arbitrary webpage loading in webview...
Improper access control
Improper access control vulnerability in Smart Touch Call prior to version 1.0.0.5 allows arbitrary webpage loading in webview...