Lucene search
K

10960 matches found

CVE
CVE
added 2021/08/05 7:43 p.m.57 views

CVE-2021-25446

CVE-2021-25446 affects Samsung SmartThings prior to version 1.7.67.25. The issue is an improper access control vulnerability that allows untrusted applications to cause arbitrary webpage loading in WebView. Evidence from multiple sources confirms the affected software version range and the root c...

5.3CVSS5.4AI score0.00814EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2021/08/05 12:0 a.m.3 views

PT-2021-16638 · Unknown · Smart Touch Call

Name of the Vulnerable Software and Affected Versions: Smart Touch Call versions prior to 1.0.0.5 Description: The issue is related to improper access control, allowing arbitrary webpage loading in the webview component. Recommendations: For versions prior to 1.0.0.5, update to version 1.0.0.5 or...

5.3CVSS5.3AI score0.00814EPSS
Exploits0References2
CNNVD
CNNVD
added 2021/08/05 12:0 a.m.4 views

SAMSUNG Smart Touch Call 安全漏洞

SAMSUNG Smart Touch Call is a smart call application from Samsung South Korea. lets users know immediately that a call is spam, blocks the call, and then lets users report the call. A security vulnerability exists in SAMSUNG Smart Touch Call prior to version 1.0.0.5, which stems from an improper...

5.3CVSS5.9AI score0.00814EPSS
Exploits0References2
CNNVD
CNNVD
added 2021/08/05 12:0 a.m.4 views

SAMSUNG SmartThings 安全漏洞

SAMSUNG SmartThings is an app from South Korea's Samsung SAMSUNG that connects smart devices. A security vulnerability exists in SAMSUNG SmartThings versions prior to 1.7.67.25, which stems from the application allowing untrusted programs to include local files in the webview...

5.3CVSS5.7AI score0.00794EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2021/08/05 12:0 a.m.6 views

PT-2021-16637 · Samsung · Smartthings

Name of the Vulnerable Software and Affected Versions: SmartThings versions prior to 1.7.67.25 Description: The issue is related to improper access control, allowing untrusted applications to cause local file inclusion in webview. Recommendations: For versions prior to 1.7.67.25, update to versio...

5.3CVSS5.1AI score0.00794EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2021/08/05 12:0 a.m.5 views

PT-2021-16636 · Samsung · Smartthings

Name of the Vulnerable Software and Affected Versions: SmartThings versions prior to 1.7.67.25 Description: The issue is related to improper access control, allowing untrusted applications to cause arbitrary webpage loading in webview. Recommendations: For versions prior to 1.7.67.25, update to...

5.3CVSS5.3AI score0.00814EPSS
Exploits0References3
CNNVD
CNNVD
added 2021/08/05 12:0 a.m.5 views

SAMSUNG SmartThings 安全漏洞

SAMSUNG SmartThings is an app from South Korea's Samsung SAMSUNG that connects smart devices. A security vulnerability exists in SAMSUNG SmartThings versions prior to 1.7.67.25, which stems from the application allowing untrusted applications to arbitrarily load web pages in the webview...

5.3CVSS5.7AI score0.00814EPSS
Exploits0References2
NVD
NVD
added 2021/07/13 6:15 p.m.14 views

CVE-2021-36214

LINE client for iOS before 10.16.3 allows cross site script with specific header in WebView...

6.1CVSS0.00724EPSS
Exploits0References1
OSV
OSV
added 2021/07/13 6:15 p.m.4 views

CVE-2021-36214

LINE client for iOS before 10.16.3 allows cross site script with specific header in WebView...

6.1CVSS5.3AI score0.00724EPSS
Exploits0References1
Prion
Prion
added 2021/07/13 6:15 p.m.14 views

Cross site scripting

LINE client for iOS before 10.16.3 allows cross site script with specific header in WebView...

4.3CVSS5.8AI score0.00724EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2021/07/13 5:47 p.m.65 views

CVE-2021-36214

The CVE-2021-36214 issue affects the LINE client for iOS, specifically versions prior to 10.16.3. A cross-site scripting vulnerability exists in the WebView caused by processing headers in WebView content, allowing injected or misinterpreted content to execute script. Reported details indicate th...

6.1CVSS5.9AI score0.00724EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2021/07/13 5:47 p.m.17 views

CVE-2021-36214

LINE client for iOS before 10.16.3 allows cross site script with specific header in WebView...

6.1CVSS6.2AI score0.00724EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/07/13 12:0 a.m.5 views

Line for IOS 跨站脚本漏洞

Line for IOS is an instant messaging application based on the IOS platform. A cross-site scripting vulnerability exists in Line for IOS, which can be exploited to execute client-side code due to a lack of proper validation of client-side data in the product's WebView. The following products and...

6.1CVSS6.2AI score0.00724EPSS
Exploits0References1
CNVD
CNVD
added 2021/07/12 12:0 a.m.7 views

Samsung Members Access Control Error Vulnerability

Samsung Members is a community platform app from Samsung South Korea. An access control error vulnerability exists in Samsung Members. The vulnerability allows untrusted applications to load arbitrary web pages in a webview. No details of the vulnerability are provided at this time...

3.3CVSS6.7AI score0.00225EPSS
Exploits0References1
NVD
NVD
added 2021/07/08 2:15 p.m.15 views

CVE-2021-25439

Improper access control vulnerability in Samsung Members prior to versions 2.4.85.11 in Android O8.1 and below, and 3.9.10.11 in Android P9.0 and above allows untrusted applications to cause arbitrary webpage loading in webview...

3.3CVSS0.00225EPSS
Exploits0References1
OSV
OSV
added 2021/07/08 2:15 p.m.2 views

CVE-2021-25438

Improper access control vulnerability in Samsung Members prior to versions 2.4.85.11 in Android O8.1 and below, and 3.9.10.11 in Android P9.0 and above allows untrusted applications to cause local file inclusion in webview...

7.8CVSS7.1AI score0.01707EPSS
Exploits0References1
OSV
OSV
added 2021/07/08 2:15 p.m.8 views

CVE-2021-25439

Improper access control vulnerability in Samsung Members prior to versions 2.4.85.11 in Android O8.1 and below, and 3.9.10.11 in Android P9.0 and above allows untrusted applications to cause arbitrary webpage loading in webview...

3.3CVSS5.9AI score0.00225EPSS
Exploits0References1
Prion
Prion
added 2021/07/08 2:15 p.m.17 views

Improper access control

Improper access control vulnerability in Samsung Members prior to versions 2.4.85.11 in Android O8.1 and below, and 3.9.10.11 in Android P9.0 and above allows untrusted applications to cause arbitrary webpage loading in webview...

2.1CVSS4.3AI score0.00225EPSS
Exploits0References1Affected Software1
Prion
Prion
added 2021/07/08 2:15 p.m.20 views

Improper access control

Improper access control vulnerability in Samsung Members prior to versions 2.4.85.11 in Android O8.1 and below, and 3.9.10.11 in Android P9.0 and above allows untrusted applications to cause local file inclusion in webview...

4.6CVSS7.2AI score0.01707EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2021/07/08 1:47 p.m.17 views

CVE-2021-25439

Improper access control vulnerability in Samsung Members prior to versions 2.4.85.11 in Android O8.1 and below, and 3.9.10.11 in Android P9.0 and above allows untrusted applications to cause arbitrary webpage loading in webview...

4.4AI score0.00225EPSS
Exploits0References1
Rows per page
Query Builder