CVE-2025-49091

KDE Konsole before 25.04.2 allows remote code execution in a certain scenario. It supports loading URLs from the scheme handlers such as a ssh:// or telnet:// or rlogin:// URL. This can be executed regardless of whether the ssh, telnet, or rlogin binary is available. In this mode, there is a code...

CVE-2024-44081

In Jitsi Meet before 2.0.9779, the functionality to share a video file was implemented in an insecure way, resulting in clients loading videos from an arbitrary URL if a message from another participant contains a URL encoded in the expected format...

CVE-2024-13185

The MinigameCenter module has insufficient restrictions on loading URLs, which may lead to some information leakage...

CVE-2023-41898

Home assistant is an open source home automation. The Home Assistant Companion for Android app up to version 2023.8.2 is vulnerable to arbitrary URL loading in a WebView. This enables all sorts of attacks, including arbitrary JavaScript execution, limited native code execution, and credential...

CVE-2021-43544

When receiving a URL through a SEND intent, Firefox would have searched for the text, but subsequent usages of the address bar might have caused the URL to load unintentionally, which could lead to XSS and spoofing attacks. This bug only affects Firefox for Android. Other operating systems are...

CVE-2024-13186

The MinigameCenter module has insufficient restrictions on loading URLs, which may lead to some information leakage...

CVE-2024-13185

The MinigameCenter module has insufficient restrictions on loading URLs, which may lead to some information leakage...

CVE-2024-13186

CVE-2024-13186 concerns Vivo MinigameCenter. Reports consistently describe insufficient restrictions on loading URLs, enabling information leakage. Affected software is MinigameCenter (Vivo) with publicly cited detail that older releases are vulnerable due to URL loading controls; CNNVD narrows i...

CVE-2024-13186 MinigameCenter information leakage vulnerability

The MinigameCenter module has insufficient restrictions on loading URLs, which may lead to some information leakage...

CVE-2024-13185

CVE-2024-13185 affects the MinigameCenter module. Multiple sources confirm an information-leakage risk due to insufficient restrictions on loading URLs, potentially leading to partial disclosure of data. Affected evidence points to Vivo MinigameCenter prior to 2.3.5.0 (CNNVD/RH/CVE records), with...

CVE-2024-13173

The CVE-2024-13173 entry describes a vulnerability in the health module where loading URLs lacks sufficient restrictions, potentially causing information leakage. Connected sources specify affected software as Vivo Health prior to version 4.1.6.33, indicating a partial information disclosure risk...

CVE-2024-13173 Health information leakage vulnerability

The health module has insufficient restrictions on loading URLs, which may lead to some information leakage...

CVE-2024-44081

In Jitsi Meet before 2.0.9779, the functionality to share a video file was implemented in an insecure way, resulting in clients loading videos from an arbitrary URL if a message from another participant contains a URL encoded in the expected format...

CVE-2024-31393

Dragging Javascript URLs to the address bar could cause them to be loaded, bypassing restrictions and security protections This vulnerability affects Firefox for iOS 124...

CVE-2024-31393

This CVE (CVE-2024-31393) affects Mozilla Firefox for iOS prior to version 124. The issue stems from insufficient input validation when dragging Javascript URLs into the address bar, which could cause the URL to load and bypass certain security protections. Affected component is the address bar h...

CVE-2024-31393

Dragging Javascript URLs to the address bar could cause them to be loaded, bypassing restrictions and security protections This vulnerability affects Firefox for iOS 124...

CVE-2023-41898

CVE-2023-41898 affects the Home Assistant Companion for Android (up to version 2023.8.2). The vulnerability is arbitrary URL loading in a WebView, enabling arbitrary JavaScript execution, limited native code execution, and credential theft. It has been patched in version 2023.9.2; all users shoul...

PT-2023-28154 · Home Assistant · Home Assistant Companion For Android

Name of the Vulnerable Software and Affected Versions: Home Assistant Companion for Android app versions 2023.8.2 and earlier Description: The Home Assistant Companion for Android app is vulnerable to arbitrary URL loading in a WebView, enabling attacks such as arbitrary JavaScript execution,...

SUSE-SU-2023:0685-1 Security update for java-1_8_0-openj9

This update for java-180-openj9 fixes the following issues: - CVE-2023-21830: Fixed improper restrictions in CORBA deserialization bsc1207249. - CVE-2023-21843: Fixed soundbank URL remote loading bsc1207248...

SUSE CVE-2012-2869

Google Chrome before 21.0.1180.89 does not properly load URLs, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a "stale buffer."...