1075 matches found
CVE-2020-12270
React Native Bluetooth Scan in Bluezone 1.0.0 uses six-character alphanumeric IDs, which might make it easier for remote attackers to interfere with COVID-19 contact tracing by using many IDs. NOTE: the vendor disputes the relevance of this report because the recipient of an F1 alert will know it...
CVE-2020-12270
CVE-2020-12270 : Affects Bluezone 1.0.0 through the React Native Bluetooth Scan component. The root cause is use of insufficiently random values to generate six-character alphanumeric IDs, which could let a remote attacker interfere with COVID-19 contact tracing by issuing many IDs. Exploitation ...
@gsandf/react-native-oauth (>=2.1.16, <=2.2.2), react-native-oauth (>=1.1.0, <=2.2.0) +5 more potentially affected by CVE-2019-10805 via valib (2.0.0)
valib NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on valib and may be impacted: - @gsandf/react-native-oauth =2.1.16, =1.1.0, =2.1.16, =2.1.15, =0.1.0, =0.4.6 Source cves: CVE-2019-10805 Source advisory: SNYK:JS-VALIB-559015...
Denial Of Service (DoS) Through Memory Leak
react-native-camera-kit is vulnerable to denial of service DoS attacks. The vulnerability exists due to the unreleased imageRef in the function snapStillImage in file CKCamera.m, allowing an attacker to trigger a memory exhaustion attack resulting in a system hang...
Denial Of Service (DoS) Through Infinite Loop
react-native-root-siblings is vulnerable to denial of service DoS attack. The vulnerability is due to a faulty iteration logic in the function getActiveManager in RootSiblingsManager, triggering an infinite loop and consuming CPU memory...
ubuntu-server.js Code Execution
The vulnerability of the ubuntu-server.js component of the React Native Desktop development platform is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2019-12164
ubuntu-server.js in Status React Native Desktop before v0.57.8mobileui allows Remote Code Execution...
CVE-2019-12164
ubuntu-server.js in Status React Native Desktop before v0.57.8mobileui allows Remote Code Execution...
Remote code execution
ubuntu-server.js in Status React Native Desktop before v0.57.8mobileui allows Remote Code Execution...
CVE-2019-12164
Affected software: Status React Native Desktop prior to v0.57.8_mobile_ui (ubuntu-server.js). Vulnerability: remote code execution via ubuntu-server.js. Impact & scope: reported RCE in the desktop component; CVE-2019-12164. Mitigation status: no remediation details provided in the connected docum...
CVE-2019-12164
ubuntu-server.js in Status React Native Desktop before v0.57.8mobileui allows Remote Code Execution...
CVE-2019-12164: Undefined Security Weakness
ubuntu-server.js in Status React Native Desktop before v0.57.8mobileui allows Remote Code Execution...
PT-2019-2962
Name of the Vulnerable Software and Affected Versions React Native Desktop versions prior to 0.57.8 Description The issue is related to insufficient input validation in the ubuntu-server.js component of React Native Desktop, which can be exploited by a remote attacker to execute arbitrary code...
Memory Leak
react-native-video is vulnerable to memory leak. The vulnerability is possible because it does not properly handle the mp.selectTrack call to listen to timed meta data update...
How was I to find Donald Daters applications database vulnerabilities-vulnerability warning-the black bar safety net
Monday night as usual I watch TV to pass the time, but there is nothing interesting in the program. So I decided on the phone looking for fun, I started aimlessly on Twitter through various tweets, a Fox News push content caught my attention. ! Someone of Trump's supporters developed a...
GHSA-8HJ4-W233-G35Q Downloads Resources over HTTP in react-native-baidu-voice-synthesizer
Affected versions of react-native-baidu-voice-synthesizer insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in...
react-native-baidu-voice-synthesizer code execution vulnerability
react-native-baidu-voice-synthesizer is a speech synthesizer for use in Node.js. A security vulnerability exists in react-native-baidu-voice-synthesizer, which originates when the program downloads a binary file over an unencrypted HTTP connection. A remote attacker could exploit the vulnerabilit...
Unspecified vulnerability in react-native-meteor-oauth
react-native-meteor-oauth is a plugin for logging in to the Meteor server in React Native. A security vulnerability exists in react-native-meteor-oauth, which stems from the program's use of a weakly encrypted pseudo-random number generator to generate oauth random tokens Random Token. An attacke...