Lucene search
+L

2042 matches found

SUSE CVE
SUSE CVE
added 2023/02/15 4:2 a.m.4 views

SUSE CVE-2020-6568

Insufficient policy enforcement in intent handling in Google Chrome on Android prior to 85.0.4183.83 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...

6.5CVSS6.8AI score0.01502EPSS
SaveExploits0References10
SUSE CVE
SUSE CVE
added 2023/02/15 4:2 a.m.3 views

SUSE CVE-2020-6827

When following a link that opened an intent://-schemed URL, causing a custom tab to be opened, Firefox for Android could be tricked into displaying the incorrect URI. Note: This issue only affects Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox ESR...

4.7CVSS6.4AI score0.00744EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
added 2023/02/15 3:52 a.m.7 views

SUSE CVE-2020-26975

When a malicious application installed on the user's device broadcast an Intent to Firefox for Android, arbitrary headers could have been specified, leading to attacks such as abusing ambient authority or session fixation. This was resolved by only allowing certain safe-listed headers. Note: This...

6.5CVSS8.6AI score0.00858EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2023/02/15 3:45 a.m.4 views

SUSE CVE-2021-23957

Navigations through the Android-specific intent URL scheme could have been misused to escape iframe sandbox. Note: This issue only affected Firefox for Android. Other operating systems are unaffected. This vulnerability affects Firefox 85...

7.4CVSS8.6AI score0.00793EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 3:42 a.m.4 views

SUSE CVE-2021-29993

Firefox for Android allowed navigations through the intent:// protocol, which could be used to cause crashes and UI spoofs. This bug only affects Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox 92...

8.1CVSS8.3AI score0.00703EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2023/02/15 3:36 a.m.5 views

SUSE CVE-2021-43544

When receiving a URL through a SEND intent, Firefox would have searched for the text, but subsequent usages of the address bar might have caused the URL to load unintentionally, which could lead to XSS and spoofing attacks. This bug only affects Firefox for Android. Other operating systems are...

5.4CVSS8AI score0.0051EPSS
SaveExploits0References4
Prion
Prion
added 2023/02/13 5:15 p.m.21 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF in OptinlyHQ Optinly – Exit Intent, Newsletter Popups, Gamification & Opt-in Forms plugin = 1.0.15 versions...

6.8CVSS8.8AI score0.0028EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2023/02/10 3:30 p.m.15 views

GHSA-P6XQ-9H8R-V544 CodenameOne Pending Intent vulnerability

A vulnerability was found in CodenameOne 7.0.70. The manipulation leads to use of implicit intent for sensitive communication. It is possible to launch the attack remotely. Upgrading to version 7.0.71 is able to address this issue. The name of the patch is dad49c9ef26a598619fc48d2697151a02987d478...

9.8CVSS6.3AI score0.00649EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
added 2023/02/10 3:30 p.m.21 views

CodenameOne Pending Intent vulnerability

A vulnerability was found in CodenameOne 7.0.70. The manipulation leads to use of implicit intent for sensitive communication. It is possible to launch the attack remotely. Upgrading to version 7.0.71 is able to address this issue. The name of the patch is dad49c9ef26a598619fc48d2697151a02987d478...

8.1CVSS7AI score0.00649EPSS
SaveExploits0References7Affected Software1
NVD
NVD
added 2023/02/10 3:15 p.m.25 views

CVE-2022-4903

A vulnerability was found in CodenameOne 7.0.70. It has been classified as problematic. Affected is an unknown function. The manipulation leads to use of implicit intent for sensitive communication. It is possible to launch the attack remotely. The complexity of an attack is rather high. The...

8.1CVSS6.2AI score0.00649EPSS
SaveExploits0References5
Prion
Prion
added 2023/02/10 3:15 p.m.20 views

Information disclosure

A vulnerability was found in CodenameOne 7.0.70. It has been classified as problematic. Affected is an unknown function. The manipulation leads to use of implicit intent for sensitive communication. It is possible to launch the attack remotely. The complexity of an attack is rather high. The...

5.1CVSS9.5AI score0.00649EPSS
SaveExploits0References5Affected Software1
CVE
CVE
added 2023/02/10 2:31 p.m.47 views

CVE-2022-4903

CVE-2022-4903 affects CodenameOne 7.0.70. The issue is described as a vulnerability in which manipulation of an unknown function allows use of implicit intents for sensitive communication, with remote-initiated possibility. The root cause is tied to an implicit-intent handling path, the exploitab...

8.1CVSS6.5AI score0.00649EPSS
SaveExploits0References5Affected Software1
Vulnrichment
Vulnrichment
added 2023/02/10 2:31 p.m.5 views

CVE-2022-4903 CodenameOne implicit intent for sensitive communication

A vulnerability was found in CodenameOne 7.0.70. It has been classified as problematic. Affected is an unknown function. The manipulation leads to use of implicit intent for sensitive communication. It is possible to launch the attack remotely. The complexity of an attack is rather high. The...

5.1CVSS7.1AI score0.00649EPSS
SaveExploits0References5
OSV
OSV
added 2023/02/10 2:31 p.m.20 views

CVE-2022-4903 CodenameOne implicit intent for sensitive communication

A vulnerability was found in CodenameOne 7.0.70. It has been classified as problematic. Affected is an unknown function. The manipulation leads to use of implicit intent for sensitive communication. It is possible to launch the attack remotely. The complexity of an attack is rather high. The...

5CVSS4.8AI score0.00649EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2023/02/10 2:31 p.m.34 views

CVE-2022-4903 CodenameOne implicit intent for sensitive communication

A vulnerability was found in CodenameOne 7.0.70. It has been classified as problematic. Affected is an unknown function. The manipulation leads to use of implicit intent for sensitive communication. It is possible to launch the attack remotely. The complexity of an attack is rather high. The...

5.1CVSS8.4AI score0.00649EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2023/02/10 12:0 a.m.7 views

PT-2023-15912 · Unknown · Codenameone

Name of the Vulnerable Software and Affected Versions: CodenameOne version 7.0.70 Description: A vulnerability was found in CodenameOne, classified as problematic. The manipulation leads to use of implicit intent for sensitive communication. It is possible to launch the attack remotely. The...

8.1CVSS7.1AI score0.00649EPSS
SaveExploits0References12
OSV
OSV
added 2023/02/09 7:15 p.m.7 views

CVE-2023-21436

Improper usage of implicit intent in Contacts prior to SMR Feb-2023 Release 1 allows attacker to get account ID...

3.3CVSS5.8AI score0.0015EPSS
SaveExploits0References1
NVD
NVD
added 2023/02/09 7:15 p.m.36 views

CVE-2023-21436

Improper usage of implicit intent in Contacts prior to SMR Feb-2023 Release 1 allows attacker to get account ID...

3.3CVSS3.8AI score0.0015EPSS
SaveExploits0References1
NVD
NVD
added 2023/02/09 7:15 p.m.14 views

CVE-2023-21447

Improper access control vulnerabilities in Samsung Cloud prior to version 5.3.0.32 allows local attackers to access information with Samsung Cloud's privilege via implicit intent...

4CVSS4.4AI score0.00149EPSS
SaveExploits0References1
NVD
NVD
added 2023/02/09 7:15 p.m.28 views

CVE-2023-21445

Improper access control vulnerability in MyFiles prior to versions 12.2.09 in Android R11, 13.1.03.501 in Android S12 and 14.1.00.422 in Android T13 allows local attacker to write file with MyFiles privilege via implicit intent...

7.8CVSS6AI score0.00186EPSS
SaveExploits0References1
Rows per page
Query Builder