12283 matches found
CVE-2019-12368
The CVE-2019-12368 entry concerns Edison Mail for Android (up to version 1.7.1). The issue is an XSS vulnerability via an event attribute and the ability to load arbitrary files through a src attribute when the app holds READ_EXTERNAL_STORAGE permission. Descriptions across sources consistently i...
CVE-2019-12367
CVE-2019-12367 affects the BlueMail Android app (v1.9.5.36). The issue enables XSS via an event attribute and arbitrary file loading via a src attribute when the app has READ_EXTERNAL_STORAGE permission. This is documented in the NVD entry and mirrored in Red Hat and CVE aggregations. No exploit ...
CVE-2019-12367
The BlueMail application through 1.9.5.36 for Android allows XSS via an event attribute and arbitrary file loading via a src attribute, if the application has the READEXTERNALSTORAGE permission...
CVE-2019-12366
The vulnerability CVE-2019-12366 affects the Nine Android app up to version 4.5.3a. The issue is an XSS via an event attribute and an arbitrary file loading via a src attribute when the app has READ_EXTERNAL_STORAGE permission. The Red Hat advisory reiterates this description. No concrete exploit...
CVE-2019-12366
The Nine application through 4.5.3a for Android allows XSS via an event attribute and arbitrary file loading via a src attribute, if the application has the READEXTERNALSTORAGE permission...
CVE-2019-12365
The CVE-2019-12365 entry affects the Newton Android app (version up to 10.0.23). It describes two issues: (1) XSS via an event attribute and (2) arbitrary file loading via a src attribute when the app holds READ_EXTERNAL_STORAGE permission. The related Red Hat/NVD entries confirm these descriptio...
CVE-2019-12365
The Newton application through 10.0.23 for Android allows XSS via an event attribute and arbitrary file loading via a src attribute, if the application has the READEXTERNALSTORAGE permission...
PT-2020-9305
Name of the Vulnerable Software and Affected Versions Edison Mail versions 1.7.1 and earlier Description The issue allows for XSS via an event attribute and arbitrary file loading via a src attribute, if the application has the READ EXTERNAL STORAGE permission. Recommendations For Edison Mail...
PT-2020-9303
Name of the Vulnerable Software and Affected Versions The Nine application versions 4.5.3a and earlier Description The issue allows for XSS via an event attribute and arbitrary file loading via a src attribute, if the application has the READ EXTERNAL STORAGE permission. Recommendations For...
CVE-2019-12369: Improper Neutralization of Input During Web Page Generation
The TypeApp application through 1.9.5.35 for Android allows XSS via an event attribute and arbitrary file loading via a src attribute, if the application has the READEXTERNALSTORAGE permission...
CVE-2019-12370: Improper Neutralization of Input During Web Page Generation
The Spark application through 2.0.2 for Android allows XSS via an event attribute and arbitrary file loading via a src attribute, if the application has the READEXTERNALSTORAGE permission...
CVE-2019-12366: Improper Neutralization of Input During Web Page Generation
The Nine application through 4.5.3a for Android allows XSS via an event attribute and arbitrary file loading via a src attribute, if the application has the READEXTERNALSTORAGE permission...
CVE-2019-12367: Improper Neutralization of Input During Web Page Generation
The BlueMail application through 1.9.5.36 for Android allows XSS via an event attribute and arbitrary file loading via a src attribute, if the application has the READEXTERNALSTORAGE permission...
PT-2020-9306
Name of the Vulnerable Software and Affected Versions TypeApp versions 1.9.5.35 and earlier Description The issue allows for XSS via an event attribute and arbitrary file loading via a src attribute, if the application has the READ EXTERNAL STORAGE permission. Recommendations For TypeApp versions...
PT-2020-9302
Name of the Vulnerable Software and Affected Versions Newton application versions prior to 10.0.24 Description The issue allows for cross-site scripting XSS via an event attribute and arbitrary file loading via a src attribute. This can occur if the application has the READ EXTERNAL STORAGE...
PT-2020-9304
Name of the Vulnerable Software and Affected Versions BlueMail versions 1.9.5.36 and earlier Description The issue allows for XSS via an event attribute and arbitrary file loading via a src attribute, if the application has the READ EXTERNAL STORAGE permission. Recommendations For BlueMail versio...
CVE-2019-12365: Improper Neutralization of Input During Web Page Generation
The Newton application through 10.0.23 for Android allows XSS via an event attribute and arbitrary file loading via a src attribute, if the application has the READEXTERNALSTORAGE permission...
PT-2020-9307
Name of the Vulnerable Software and Affected Versions Spark application versions 2.0.2 and earlier Description The issue allows for cross-site scripting XSS via an event attribute and arbitrary file loading via a src attribute, provided the application has the READ EXTERNAL STORAGE permission...
CVE-2019-12368: Improper Neutralization of Input During Web Page Generation
The Edison Mail application through 1.7.1 for Android allows XSS via an event attribute and arbitrary file loading via a src attribute, if the application has the READEXTERNALSTORAGE permission...
