Lucene search
K

16 matches found

RedhatCVE
RedhatCVE
added 2025/12/16 6:56 a.m.6 views

CVE-2025-14020

LINE client for Android versions prior to 14.20 contains a UI spoofing vulnerability in the in-app browser where the full-screen security Toast notification is not properly re-displayed when users return from another application, potentially allowing attackers to conduct phishing attacks by...

5.4CVSS6.6AI score0.00024EPSS
Exploits0References1
OSV
OSV
added 2025/12/15 7:15 a.m.0 views

CVE-2025-14020

LINE client for Android versions prior to 14.20 contains a UI spoofing vulnerability in the in-app browser where the full-screen security Toast notification is not properly re-displayed when users return from another application, potentially allowing attackers to conduct phishing attacks by...

4.3CVSS5.8AI score
Exploits0References1
OSV
OSV
added 2025/12/15 7:15 a.m.0 views

CVE-2025-14019

LINE client for Android versions from 13.8 to 15.5 is vulnerable to UI spoofing in the in-app browser where a specific layout could obscure the full-screen warning prompt, potentially allowing attackers to conduct phishing attacks...

4.7CVSS5.8AI score
Exploits0References1
Cvelist
Cvelist
added 2025/12/15 6:39 a.m.18 views

CVE-2025-14020

LINE client for Android versions prior to 14.20 contains a UI spoofing vulnerability in the in-app browser where the full-screen security Toast notification is not properly re-displayed when users return from another application, potentially allowing attackers to conduct phishing attacks by...

5.4CVSS0.00024EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/15 6:39 a.m.1 views

EUVD-2025-203348

LINE client for Android versions prior to 14.20 contains a UI spoofing vulnerability in the in-app browser where the full-screen security Toast notification is not properly re-displayed when users return from another application, potentially allowing attackers to conduct phishing attacks by...

5.4CVSS6.1AI score0.00024EPSS
Exploits0References2
CVE
CVE
added 2025/12/15 6:39 a.m.6 views

CVE-2025-14020

CVE-2025-14020 affects the LINE client for Android, prior to version 14.20. The issue is a UI spoofing vulnerability in the in-app browser: when users switch away from the app and return, the full-screen security toast notification is not reliably re-displayed, which can enable attackers to condu...

5.4CVSS6.2AI score0.00024EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2025/12/15 12:0 a.m.1 views

LINE client for Android 安全漏洞

LINE client for Android is an instant messaging application by South Korean company LINE. A security vulnerability exists in LINE client for Android prior to version 14.20, which originates from in-app browser UI spoofing and may lead to phishing attacks...

5.4CVSS6.6AI score0.00024EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/12/15 12:0 a.m.1 views

PT-2025-51204

LINE client for Android versions prior to 14.20 contains a UI spoofing vulnerability in the in-app browser where the full-screen security Toast notification is not properly re-displayed when users return from another application, potentially allowing attackers to conduct phishing attacks by...

5.4CVSS6.6AI score0.00024EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2019-15578

Malware in sbrugna...

7.8CVSS6.8AI score0.00562EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/05/22 9:17 a.m.4 views

CVE-2019-6010

Integer overflow vulnerability in LINEAndroid from 4.4.0 to the version before 9.15.1 allows remote attackers to cause a denial of service DoS condition or execute arbitrary code via a specially crafted image...

7.8CVSS8.2AI score0.00562EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/10/31 12:0 a.m.1 views

PT-2023-10315 · Line · Line For Android +1

Name of the Vulnerable Software and Affected Versions: LINE@ for Android version 1.0.0 LINE@ for iOS version 1.0.0 Description: The issue allows for a man-in-the-middle MITM attack due to the application's acceptance of non-SSL/TLS communications. This enables an attacker to invoke any API from a...

5.9CVSS5.3AI score0.00115EPSS
Exploits0References3
Hacker One
Hacker One
added 2020/04/26 1:7 a.m.15 views

LY Corporation: Path traversal in ZIP extract routine on LINE Android

@kanytu discovered that LINE Keepa file storage service in the LINE App contains an unsafe unzipping pattern, which can potentially be exploited to launch Path traversal attack. The reporter proved that it can lead to overwriting files in the LINE app's private folders under certain conditions by...

6.6AI score
Exploits0
OSV
OSV
added 2019/09/19 2:15 p.m.0 views

CVE-2019-6010

Integer overflow vulnerability in LINEAndroid from 4.4.0 to the version before 9.15.1 allows remote attackers to cause a denial of service DoS condition or execute arbitrary code via a specially crafted image...

7.8CVSS7.1AI score0.00562EPSS
Exploits0References2
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2019/09/19 8:59 a.m.4 views

Multiple integer overflow vulnerabilities in LINE(Android)

Overview LINEAndroid provided by LINE Corporation contains multiple integer overflow vulnerabilities CWE-190 listed below. Integer overflow vulnerability in processing images using apng-drawable - CVE-2019-6007 Integer overflow vulnerability in processing images - CVE-2019-6010 LINE Corporation...

8.8CVSS7.5AI score0.00646EPSS
Exploits0References7
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2019/09/19 12:0 a.m.156 views

JVN#97845465: Multiple integer overflow vulnerabilities in LINE(Android)

LINEAndroid provided by LINE Corporation contains multiple integer overflow vulnerabilities CWE-190 listed below. Integer overflow vulnerability in processing images using apng-drawable - CVE-2019-6007 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L| Base...

8.8CVSS8.9AI score0.00646EPSS
Exploits0
OSV
OSV
added 2018/08/16 8:29 p.m.1 views

CVE-2018-13446

An issue was discovered in the LINE jp.naver.line application 8.8.1 for Android. The Passcode feature allows authentication bypass via runtime manipulation that forces a certain method's return value to true. In other words, an attacker could authenticate with an arbitrary passcode. NOTE: the...

7CVSS5.8AI score
Exploits0References1
Rows per page
Query Builder