Lucene search
+L

953 matches found

ATTACKERKB
ATTACKERKB
added 2020/04/24 4:15 p.m.5 views

CVE-2020-6828

A malicious Android application could craft an Intent that would have been processed by Firefox for Android and potentially result in a file overwrite in the user's profile directory. One exploitation vector for this would be to supply a user.js file providing arbitrary malicious preference value...

7.5CVSS8AI score0.01471EPSS
SaveExploits0References4
Prion
Prion
added 2020/04/24 4:15 p.m.19 views

Design/Logic Flaw

A malicious Android application could craft an Intent that would have been processed by Firefox for Android and potentially result in a file overwrite in the user's profile directory. One exploitation vector for this would be to supply a user.js file providing arbitrary malicious preference value...

6.4CVSS7.6AI score0.01471EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2020/04/24 3:49 p.m.207 views

CVE-2020-6827

CVE-2020-6827 affects Mozilla Firefox for Android (Firefox ESR < 68.7) where following a link that opens an intent://-schemed URL could cause a custom tab to display an incorrect URI, enabling URI spoofing. The issue is reported across Firefox ESR

4.7CVSS5.8AI score0.00744EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
added 2020/04/24 3:49 p.m.42 views

CVE-2020-6827

When following a link that opened an intent://-schemed URL, causing a custom tab to be opened, Firefox for Android could be tricked into displaying the incorrect URI. Note: This issue only affects Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox ESR...

4.7CVSS5.2AI score0.00744EPSS
SaveExploits0
Cvelist
Cvelist
added 2020/04/24 3:48 p.m.39 views

CVE-2020-6828

A malicious Android application could craft an Intent that would have been processed by Firefox for Android and potentially result in a file overwrite in the user's profile directory. One exploitation vector for this would be to supply a user.js file providing arbitrary malicious preference value...

8.2AI score0.01471EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2020/04/08 2:05 a.m.31 views

CVE-2020-6827

The Mozilla Foundation Security Advisory describes this flaw as: When following a link that opened an intent://-schemed URL, causing a custom tab to be opened, Firefox for Android could be tricked into displaying the incorrect URI...

4.7CVSS2.8AI score0.00744EPSS
SaveExploits0References4
CNVD
CNVD
added 2020/03/13 12:00 a.m.18 views

Opera Software Opera Input Validation Error Vulnerability

Opera Software Opera is a web browser from the Norwegian company Opera Software that supports multi-window browsing, customizable user interfaces, and more. An input validation error vulnerability exists in previous versions of Opera Software Opera 53 for Android-based platforms. The vulnerabilit...

4.3CVSS6.8AI score0.00822EPSS
SaveExploits1References1
Kaspersky
Kaspersky
added 2020/01/14 12:00 a.m.91 views

KLA11633 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. A security feature bypass vulnerability in Microsoft OneDrive f...

9.3CVSS8.1AI score0.20535EPSS
SaveExploits0References16
Citrix
Citrix
added 2020/01/07 12:00 a.m.12 views

Receiver for Android 3.11.1-Getting error "General problem try connecting again" on android devices only

Getting error,"General problem try connecting again" on the android devices only...

7.2AI score
SaveExploits0
CNVD
CNVD
added 2019/12/27 12:00 a.m.9 views

Opera Software Opera Redirect Vulnerability

Opera Software Opera is a web browser from the Norwegian company Opera Software that supports multi-window browsing, customizable user interfaces, and more. A security vulnerability exists in previous versions of Opera Software Opera 54.0.2669.49432 for Android-based platforms. An attacker can...

5.5CVSS6.7AI score0.0029EPSS
SaveExploits0References1
NVD
NVD
added 2019/10/23 4:15 p.m.22 views

CVE-2019-11933

A heap buffer overflow bug in libpldroidsonroidsgif before 1.2.19, as used in WhatsApp for Android before version 2.19.291 could allow remote attackers to execute arbitrary code or cause a denial of service...

9.8CVSS9.7AI score0.04119EPSS
SaveExploits0References1
OSV
OSV
added 2019/10/23 4:15 p.m.22 views

CVE-2019-11933

A heap buffer overflow bug in libpldroidsonroidsgif before 1.2.19, as used in WhatsApp for Android before version 2.19.291 could allow remote attackers to execute arbitrary code or cause a denial of service...

9.8CVSS8.8AI score
SaveExploits0References1
Prion
Prion
added 2019/10/23 4:15 p.m.17 views

Heap overflow

A heap buffer overflow bug in libpldroidsonroidsgif before 1.2.19, as used in WhatsApp for Android before version 2.19.291 could allow remote attackers to execute arbitrary code or cause a denial of service...

7.5CVSS9.5AI score0.04119EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2019/10/23 3:40 p.m.23 views

CVE-2019-11933

A heap buffer overflow bug in libpldroidsonroidsgif before 1.2.19, as used in WhatsApp for Android before version 2.19.291 could allow remote attackers to execute arbitrary code or cause a denial of service...

9.7AI score0.04119EPSS
SaveExploits0References1
OSV
OSV
added 2019/10/03 10:15 p.m.28 views

CVE-2019-11932

A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version 1.2.18, as used in WhatsApp for Android before version 2.19.244 and many other Android applications, allows remote attackers to execute arbitrary code or cause a denial of servi...

8.8CVSS7.9AI score
SaveExploits0References9
Kaspersky
Kaspersky
added 2019/09/10 12:00 a.m.39 views

KLA11877 SB vulnerability in Microsoft Apps

A security feature bypass vulnerability was found in Microsoft Apps. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories CVE-2019-1265 Related products Yammer-Desktop-App CVE list CVE-2019-1265 warning KB list Solution Install necessary updates from...

7.5CVSS7.7AI score0.03366EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/07/04 12:00 a.m.10 views

The vulnerability of the Microsoft Outlook for Android client, related to information representation errors in the user interface, allows attackers to perform cross-site scripting attacks.

The vulnerability of the Microsoft Outlook for Android client is related to information representation errors in the user interface. Exploiting this vulnerability could allow a malicious actor, operating remotely, to carry out cross-site scripting attacks using a specially created email message...

4.2CVSS5.7AI score0.01817EPSS
SaveExploits0References4Affected Software1
CNVD
CNVD
added 2019/06/28 12:00 a.m.10 views

Microsoft Outlook for Android Spoofing Vulnerability

Microsoft Outlook for Android is an email application for the Android-based platform from Microsoft USA. A security vulnerability exists in Microsoft Outlook for Android. An attacker can exploit this vulnerability by sending a specially crafted email message to perform a cross-site scripting atta...

5.4CVSS6.1AI score0.01817EPSS
SaveExploits0References1
OSV
OSV
added 2019/06/27 5:15 p.m.7 views

UBUNTU-CVE-2019-5816

Process lifetime issue in Chrome in Google Chrome on Android prior to 74.0.3729.108 allowed a remote attacker to potentially persist an exploited process via a crafted HTML page...

8.8CVSS7AI score0.01647EPSS
SaveExploits0References2
OSV
OSV
added 2019/05/16 7:29 p.m.11 views

CVE-2019-0932

An information disclosure vulnerability exists in Skype for Android, aka 'Skype for Android Information Disclosure Vulnerability'...

5.9CVSS6.7AI score0.04937EPSS
SaveExploits0References1
Rows per page
Query Builder