2010 matches found
CVE-2022-39349 Tasks.org vulnerable to data exfiltration by malicous app or adb
The Tasks.org Android app is an open-source app for to-do lists and reminders. The Tasks.org app uses the activity ShareLinkActivity.kt to handle "share" intents coming from other components in the same device and convert them to tasks. Those intents may contain arbitrary file paths as attachment...
CVE-2022-41986
Information disclosure vulnerability in Android App 'IIJ SmartKey' versions prior to 2.1.4 allows an attacker to obtain a one-time password issued by the product under certain conditions...
CVE-2022-41986
Information disclosure vulnerability in Android App 'IIJ SmartKey' versions prior to 2.1.4 allows an attacker to obtain a one-time password issued by the product under certain conditions...
Information disclosure
Information disclosure vulnerability in Android App 'IIJ SmartKey' versions prior to 2.1.4 allows an attacker to obtain a one-time password issued by the product under certain conditions...
CVE-2022-41986
Information disclosure vulnerability in Android App 'IIJ SmartKey' versions prior to 2.1.4 allows an attacker to obtain a one-time password issued by the product under certain conditions...
CVE-2022-41986
Information disclosure vulnerability in Android App 'IIJ SmartKey' versions prior to 2.1.4 allows an attacker to obtain a one-time password issued by the product under certain conditions...
PT-2022-26200 · Iij · Iij Smartkey
Name of the Vulnerable Software and Affected Versions: IIJ SmartKey versions prior to 2.1.4 Description: The issue allows an attacker to obtain a one-time password issued by the product under certain conditions. This is related to an information disclosure vulnerability in the Android App...
CVE-2022-41986
CVE-2022-41986 affects the Android app IIJ SmartKey (by Internet Initiative Japan). The vulnerability is an information-disclosure issue in versions prior to 2.1.4 that can allow an attacker to obtain a one-time password issued by the product under certain conditions. Public sources (e.g., JVN, N...
JVN#74534998: Android App "IIJ SmartKey" vulnerable to information disclosure
Android App "IIJ SmartKey" provided by Internet Initiative Japan Inc. contains an information disclosure vulnerability CWE-200. Impact Under certain conditions, an attacker may obtain a one-time password issued by the product. Solution Update the application Update the application to the latest...
CVE-2022-41209
SAP Customer Data Cloud Gigya mobile app for Android - version 7.4, uses encryption method which lacks proper diffusion and does not hide the patterns well. This can lead to information disclosure. In certain scenarios, application might also be susceptible to replay attacks...
CVE-2022-41210
SAP Customer Data Cloud Gigya mobile app for Android - version 7.4, uses insecure random number generator program which makes it easy for the attacker to predict future random numbers. This can lead to information disclosure and modification of certain user settings...
Nextcloud Android app 路径遍历漏洞
The Nextcloud Android app is an Android-based mobile application for accessing Nextcloud servers from Nextcloud Germany. A path traversal vulnerability exists in versions of the Nextcloud Android app prior to 3.21.0, which stems from an improperly protected internal path to an application file,...
CVE-2022-36782 Pal Electronics Systems - Pal Gate Authorization Errors
Pal Electronics Systems - Pal Gate Authorization Errors. The vulnerability is an authorization problem in PalGate device management android client app. Gates of bulidings and parking lots with a simple button in any smartphone. The API was found after a decompiling and static research using Jadx,...
Microsoft Discover Severe 'One-Click' Exploit for TikTok Android App
Microsoft on Wednesday disclosed details of a now-patched "high severity vulnerability" in the TikTok app for Android that could let attackers take over accounts when victims clicked on a malicious link. "Attackers could have leveraged the vulnerability to hijack an account without users' awarene...
Vulnerability in TikTok Android app could lead to one-click account hijacking
Microsoft discovered a high-severity vulnerability in the TikTok Android application, which could have allowed attackers to compromise users’ accounts with a single click. The vulnerability, which would have required several issues to be chained together to exploit, has been fixed and we did not...
Vulnerability in TikTok Android app could lead to one-click account hijacking
Microsoft discovered a high-severity vulnerability in the TikTok Android application, which could have allowed attackers to compromise users’ accounts with a single click. The vulnerability, which would have required several issues to be chained together to exploit, has been fixed and we did not...
Critical Amazon Ring Vulnerability Could Expose Camera Recordings
By Deeba Ahmed The vulnerability was discovered by Atlanta-based app security firm Checkmarx while assessing the Ring doorbell app for Android.… This is a post from HackRead.com Read the original post: Critical Amazon Ring Vulnerability Could Expose Camera Recordings...
CVE-2022-27500
Incorrect default permissions for the IntelR Support Android application before 21.07.40 may allow an authenticated user to potentially enable information disclosure via local access...