2042 matches found
PT-2021-16705 · Unknown · Semrewardmanager
Name of the Vulnerable Software and Affected Versions: SemRewardManager versions prior to SMR Dec-2021 Release 1 Description: The issue is related to an improper usage of implicit intent in SemRewardManager, allowing attackers to access BSSID. Recommendations: For versions prior to SMR Dec-2021...
Samsung SMR 安全漏洞
Samsung Tags is a tagging feature for Samsung mobile devices. An information disclosure vulnerability exists in Samsung Tags that stems from improper intent redirection handling in Tags. An attacker could exploit the vulnerability to access sensitive information...
Mozilla Firefox 跨站脚本漏洞
Mozilla Firefox is an open source Web browser from the Mozilla Foundation. Mozilla Firefox has a cross-site scripting vulnerability that stems from the fact that Firefox searches for text when a URL is received via the SEND intent, but subsequent use of the address bar can cause the URL to load...
PUB-A-191283525
In onEventReceived of EventResultPersister.java, there is a possible intent redirection due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...
CVE-2021-41256
nextcloud news-android is an Android client for the Nextcloud news/feed reader app. In affected versions the Nextcloud News for Android app has a security issue by which a malicious application installed on the same device can send it an arbitrary Intent that gets reflected back, unintentionally...
CVE-2021-41256 Intent URI permissions manipulation in nextcloud news-android
nextcloud news-android is an Android client for the Nextcloud news/feed reader app. In affected versions the Nextcloud News for Android app has a security issue by which a malicious application installed on the same device can send it an arbitrary Intent that gets reflected back, unintentionally...
CVE-2021-25504
Intent redirection vulnerability in Group Sharing prior to 10.8.03.2 allows attacker to access contact information...
CVE-2021-25504
Intent redirection vulnerability in Group Sharing prior to 10.8.03.2 allows attacker to access contact information...
Information disclosure
Intent redirection vulnerability in Group Sharing prior to 10.8.03.2 allows attacker to access contact information...
CVE-2021-25504
CVE-2021-25504 affects Samsung Group Sharing prior to version 10.8.03.2. The issue is an intent redirection vulnerability that can allow an attacker to access contact information. Affected Software/Version: Group Sharing before 10.8.03.2. Root cause: intent redirection leading to information disc...
CVE-2021-25504
Intent redirection vulnerability in Group Sharing prior to 10.8.03.2 allows attacker to access contact information...
PT-2021-16694 · Unknown · Group Sharing
Name of the Vulnerable Software and Affected Versions: Group Sharing versions prior to 10.8.03.2 Description: The issue allows an attacker to access contact information due to an intent redirection vulnerability in Group Sharing. Recommendations: For versions prior to 10.8.03.2, update to version...
CVE-2021-29993
Firefox for Android allowed navigations through the intent:// protocol, which could be used to cause crashes and UI spoofs. This bug only affects Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox 92...
Android App "Mercari (Merpay) - Marketplace and Mobile Payments App" (Japan version) vulnerable to improper handling of Intent
Overview Android App "Mercari Merpay - Marketplace and Mobile Payments App" Japan version provided by Mercari, Inc. is vulnerable to improper handling of Intent CWE-939. RyotaK reported this vulnerability to Mercari, Inc. and Mercari, Inc. reported it to JPCERT/CC to disclose the vulnerability...
JVN#49465877: Android App "Mercari (Merpay) - Marketplace and Mobile Payments App" (Japan version) vulnerable to improper handling of Intent
Android App "Mercari Merpay - Marketplace and Mobile Payments App" Japan version provided by Mercari, Inc. is vulnerable to improper handling of Intent CWE-939. Impact If a user who is using the vulnerable application accesses a malicious page, the malicious page can launch an arbitrary Activity ...
Office Server Document Converter 安全漏洞
Antenna House Office Server Document Converter Osdc is an office server document converter from Antenna House USA. It is used to batch convert Word, Excel and Powerpoint into high quality Pdf or image formats that are easy to share and look accurate on any screen. A security vulnerability exists ...
Denial Of Service (DoS)
firefox is vulnerable to denial of service. The vulnerability exists due to the system allowing attackers to navigate through the intent:// protocol, which could be used to cause crashes and UI spoofs.This bug only affects Firefox for Android...
GitHub Security Lab: [Java] CWE-200: Query to detect exposure of sensitive information from android file intent
This bug was reported directly to GitHub Security Lab...