CVE-2010-4590

Cross-site scripting XSS vulnerability in HTTP Access Services HTTP-AS in the Connection Manager in IBM Lotus Mobile Connect LMC before 6.1.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-15012

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in forcedotcom SalesforceMobileSDK-Windows up to 4.x. It has been rated as critical. This issue affects the function ComputeCountSql of the file SalesforceSDK/SmartStore/Store/QuerySpec.cs. The manipulation leads to sql injection. Upgrading to...

CVE-2016-11048

An issue was discovered on Samsung mobile devices with L5.0/5.1 Spreadtrum or Marvell chipsets software. There is a Factory Reset Protection FRP bypass. The Samsung ID is SVE-2016-5421 March 2016...

CVE-2016-11038

An issue was discovered on Samsung mobile devices with software through 2016-04-05 incorporating the Samsung Professional Audio SDK. The Jack audio service doesn't implement access control for shared memory, leading to arbitrary code execution or privilege escalation. The Samsung ID is...

CVE-2016-11039

An issue was discovered on Samsung mobile devices with KK4.4, L5.0/5.1, and M6.0 AP + CP MDM9x35, or Qualcomm Onechip software. There is a NULL pointer dereference issue in the IPC socket code. The Samsung ID is SVE-2016-5980 July 2016...

CVE-2016-11030

An issue was discovered on Samsung mobile devices with KK4.4, L5.0/5.1, and M6.0 with Hrm sensor support software. The sysfs of the MAX86902 sensor driver does not prevent concurrent access, leading to a race condition and resultant heap-based buffer overflow. The Samsung ID is SVE-2016-7341...

CVE-2015-9376

iThemes Mobile before 1.2.8 for WordPress has XSS via addqueryarg and removequeryarg...

CVE-2015-8546

An issue was discovered on Samsung mobile devices with software through 2015-11-12, affecting the Galaxy S6/S6 Edge, Galaxy S6 Edge+, and Galaxy Note5 with the Shannon333 chipset. There is a stack-based buffer overflow in the baseband process that is exploitable for remote code execution via a fa...

CVE-2012-5180

The Opera Mobile application before 12.1 and Opera Mini application before 7.5 for Android do not properly implement the WebView class, which allows attackers to obtain sensitive information via a crafted application...

CVE-2013-5554

Directory traversal vulnerability in the web-management interface in the server in Cisco Wide Area Application Services WAAS Mobile before 3.5.5 allows remote attackers to upload and execute arbitrary files via a crafted POST request, aka Bug ID CSCuh69773...

Mobile Dynamix PrinterShare Mobile Print Gmail Oauth Token Disclosure

Vulnerability Details Affected Vendor: Mobile Dynamix Affected Product: PrinterShare Mobile Print Affected Version: up to 12.15.01 Platform: Android CWE Classification: CWE-200 Exposure of Sensitive Information to an Unauthorized Actor, CWE-313: Cleartext Storage in a File or on Disk CVE ID:...

Human Metapneumovirus Testing Management System /profile.php File SQL Injection Vulnerability

Human Metapneumovirus Testing Management System is a human subpneumovirus testing management system. The Human Metapneumovirus Testing Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter...

Ivanti Endpoint Manager Mobile Installed (Linux Agent)

Binary data ivantiendpointmanagermobilenixinstalled.nbin...

Mobile Dynamix PrinterShare Mobile Print Out-of-bounds Write

Vulnerability Details Affected Vendor: Mobile Dynamix Affected Product: PrinterShare Mobile Print Affected Version: up to 12.15.01 Platform: Android CWE Classification: CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer, CWE-787: Out-of-bounds Write CVE ID:...

Mobile Dynamix PrinterShare Mobile Print Double-Free Memory Write

Vulnerability Details Affected Vendor: Mobile Dynamix Affected Product: PrinterShare Mobile Print Affected Version: up to 12.15.01 Platform: Android CWE Classification: CWE-415: Double-Free, CWE-416: Use-After-Free CVE ID: CVE-2025-5100 2. Vulnerability Description A double-free condition occurs...

Ivanti Endpoint Manager Mobile < 11.12.0.5 / < 12.3.0.2 / < 12.4.0.2 / < 12.5.0.1 Authentication Bypass

Ivanti Endpoint Manager Mobile EPMM, formerly MobileIron Core, versions prior to 11.12.0.5 or 12.3.x prior to 12.3.0.2 or 12.4.x prior to 12.4.0.2 or 12.5.x prior to 12.5.0.1 suffer from an authentication bypass vulnerability, allowing unauthorized users to access restricted functionality or...

CVE-2007-5558

Integer overflow in the LG Mobile handset allows remote attackers to cause a denial of service reboot via a crafted HTTP packet. NOTE: as of 20071016, the only disclosure is a vague pre-advisory with no actionable information. However, since it is from a well-known researcher, it is being assigne...

CVE-2007-5557

Unspecified vulnerability in the NEC mobile handset allows remote attackers to cause a denial of service reboot via crafted packets. NOTE: as of 20071016, the only disclosure is a vague pre-advisory with no actionable information. However, since it is from a well-known researcher, it is being...

CVE-2005-1676

Multiple cross-site scripting XSS vulnerabilities in Groove Mobile Workspace in Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 allow remote attackers to inject arbitrary web script or HTML via the 1 picture columns embedded within...

CVE-2009-3816

Multiple cross-site scripting XSS vulnerabilities in Activities pages in the Mobile subsystem in IBM Lotus Connections 2.5.0.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...