210 matches found
CVE-2021-20715
Improper access control vulnerability in Hot Pepper Gourmet App for Android ver.4.111.0 and earlier, and for iOS ver.4.111.0 and earlier allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App...
Improper access control
Improper access control vulnerability in Hot Pepper Gourmet App for Android ver.4.111.0 and earlier, and for iOS ver.4.111.0 and earlier allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App...
CVE-2021-20715
CVE-2021-20715 concerns an improper access control (CWE-284) in Hot Pepper Gourmet App for Android (v4.111.0 and earlier) and iOS (v4.111.0 and earlier). A remote attacker can cause a user to visit an arbitrary website via the vulnerable app, enabling phishing-like exposure. Mitigation: update to...
PT-2021-14174
Name of the Vulnerable Software and Affected Versions: Hot Pepper Gourmet App for Android versions 4.111.0 and earlier Hot Pepper Gourmet App for iOS versions 4.111.0 and earlier Description: The issue is related to improper access control, allowing a remote attacker to lead a user to access an...
CVE-2021-20715: Missing Authorization
Improper access control vulnerability in Hot Pepper Gourmet App for Android ver.4.111.0 and earlier, and for iOS ver.4.111.0 and earlier allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App...
CVE-2021-20693
Improper access control vulnerability in Gurunavi App for Android ver.10.0.10 and earlier and for iOS ver.11.1.2 and earlier allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App...
Improper access control
Improper access control vulnerability in Gurunavi App for Android ver.10.0.10 and earlier and for iOS ver.11.1.2 and earlier allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App...
CVE-2021-20693
Improper access control vulnerability in Gurunavi App for Android ver.10.0.10 and earlier and for iOS ver.11.1.2 and earlier allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App...
PT-2021-14152
Name of the Vulnerable Software and Affected Versions: Gurunavi App for Android versions 10.0.10 and earlier Gurunavi App for iOS versions 11.1.2 and earlier Description: The issue allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App. This is due to an...
CVE-2021-20693: Missing Authorization
Improper access control vulnerability in Gurunavi App for Android ver.10.0.10 and earlier and for iOS ver.11.1.2 and earlier allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App...
Gurunavi Apps fail to restrict access permissions
Overview Gurunavi Apps provided by Gurunavi, Inc. implement the function to access a requested URL using Custom URL Scheme. This function contains an improper access control vulnerability CWE-284 that may allow the vulnerable App to receive an request from an arbitrary App and execute an access...
Design/Logic Flaw
UNIQLO App for Android versions 7.3.3 and earlier allows remote attackers to lead a user to access an arbitrary website via a malicious App created by the third party. As a result, if the access destination is a malicious website, the user may fall victim to the social engineering attack...
Design/Logic Flaw
UNIQLO App for Android versions 7.3.3 and earlier allows remote attackers to lead a user to access an arbitrary website via the vulnerable App. As a result, if the access destination is a malicious website, the user may fall victim to the social engineering attack...
CVE-2020-5628
UNIQLO App for Android versions 7.3.3 and earlier allows remote attackers to lead a user to access an arbitrary website via the vulnerable App. As a result, if the access destination is a malicious website, the user may fall victim to the social engineering attack...
CVE-2020-5628
UNIQLO App for Android versions 7.3.3 and earlier allows remote attackers to lead a user to access an arbitrary website via the vulnerable App. As a result, if the access destination is a malicious website, the user may fall victim to the social engineering attack...
CVE-2020-5629
UNIQLO App for Android (versions 7.3.3 and earlier) contains multiple access restriction bypass vulnerabilities that can cause a user to open arbitrary URLs. Specifically, CVE-2020-5629 involves bypass via receiving an Intent from another app to navigate to an arbitrary URL, while CVE-2020-5628 (...
PT-2020-18597
Name of the Vulnerable Software and Affected Versions UNIQLO App for Android versions 7.3.3 and earlier Description The issue allows remote attackers to lead a user to access an arbitrary website via the vulnerable App, potentially resulting in the user falling victim to a social engineering atta...
CVE-2020-5629: Undefined Security Weakness
UNIQLO App for Android versions 7.3.3 and earlier allows remote attackers to lead a user to access an arbitrary website via a malicious App created by the third party. As a result, if the access destination is a malicious website, the user may fall victim to the social engineering attack...
Code injection
Yodobashi App for Android versions 1.8.7 and earlier allows remote attackers to lead a user to access an arbitrary website via the vulnerable App. As a result, the user may become a victim of a phishing attack...
CVE-2020-5627
Yodobashi App for Android versions 1.8.7 and earlier allows remote attackers to lead a user to access an arbitrary website via the vulnerable App. As a result, the user may become a victim of a phishing attack...