rainbutterfly/cve_corpus huggingface dataset:
CVE-2015-0826 
The nsTransformedTextRun::SetCapitalization function in Mozilla Firefox before 36.0 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read of heap memory) via a crafted Cascading Style Sheets (CSS) token sequence that triggers a restyle or reflow operation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-25T11:00:00.000Z
CVE-2015-0827 
Heap-based buffer overflow in the mozilla::gfx::CopyRect function in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to obtain sensitive information from uninitialized process memory via a malformed SVG graphic.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-25T11:00:00.000Z
CVE-2015-0828 
Double free vulnerability in the nsXMLHttpRequest::GetResponse function in Mozilla Firefox before 36.0, when a nonstandard memory allocator is used, allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted JavaScript code that makes an XMLHttpRequest call with zero bytes of data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-25T11:00:00.000Z
CVE-2015-0829 
Buffer overflow in libstagefright in Mozilla Firefox before 36.0 allows remote attackers to execute arbitrary code via a crafted MP4 video that is improperly handled during playback.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-25T11:00:00.000Z
CVE-2015-0830 
The WebGL implementation in Mozilla Firefox before 36.0 does not properly allocate memory for copying an unspecified string to a shader's compilation log, which allows remote attackers to cause a denial of service (application crash) via crafted WebGL content.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-25T11:00:00.000Z
CVE-2015-0831 
Use-after-free vulnerability in the mozilla::dom::IndexedDB::IDBObjectStore::CreateIndex function in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted content that is improperly handled during IndexedDB index creation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-25T11:00:00.000Z
CVE-2015-0832 
Mozilla Firefox before 36.0 does not properly recognize the equivalence of domain names with and without a trailing . (dot) character, which allows man-in-the-middle attackers to bypass the HPKP and HSTS protection mechanisms by constructing a URL with this character and leveraging access to an X.509 certificate for a domain with this character.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-25T11:00:00.000Z
CVE-2015-0833 
Multiple untrusted search path vulnerabilities in updater.exe in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 on Windows, when the Maintenance Service is not used, allow local users to gain privileges via a Trojan horse DLL in (1) the current working directory or (2) a temporary directory, as demonstrated by bcrypt.dll.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-25T11:00:00.000Z
CVE-2015-0834 
The WebRTC subsystem in Mozilla Firefox before 36.0 recognizes turns: and stuns: URIs but accesses the TURN or STUN server without using TLS, which makes it easier for man-in-the-middle attackers to discover credentials by spoofing a server and completing a brute-force attack within a short time window.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-25T11:00:00.000Z
CVE-2015-0835 
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 36.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-25T11:00:00.000Z
CVE-2015-0836 
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-25T11:00:00.000Z
CVE-2015-0837 
The mpi_powm function in Libgcrypt before 1.6.3 and GnuPG before 1.4.19 allows attackers to obtain sensitive information by leveraging timing differences when accessing a pre-computed table during modular exponentiation, related to a "Last-Level Cache Side-Channel Attack."
Problem types: description: Other
Affected products: vendor: GNU
product: Libgcrypt
vendor: GNU
product: GnuPG
Published: 2019-11-29T21:10:03.000Z
CVE-2015-0838 
Buffer overflow in the C implementation of the apply_delta function in _pack.c in Dulwich before 0.9.9 allows remote attackers to execute arbitrary code via a crafted pack file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-03-31T14:00:00.000Z
CVE-2015-0839 
The hp-plugin utility in HP Linux Imaging and Printing (HPLIP) makes it easier for man-in-the-middle attackers to execute arbitrary code by leveraging use of a short GPG key id from a keyserver to verify print plugin downloads.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-02T19:00:00.000Z
CVE-2015-0840 
The dpkg-source command in Debian dpkg before 1.16.16 and 1.17.x before 1.17.25 allows remote attackers to bypass signature verification via a crafted Debian source control file (.dsc).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-13T14:00:00.000Z
CVE-2015-0841 
Off-by-one error in the readBuf function in listener.cpp in libcapsinetwork and monopd before 0.9.8, allows remote attackers to cause a denial of service (crash) via a long line.
Problem types: description: Other
Affected products: vendor: monopd
product: monopd
Published: 2019-12-09T18:49:14.000Z
CVE-2015-0842 
yubiserver before 0.6 is prone to SQL injection issues, potentially leading to an authentication bypass.
Affected products: vendor: yubiserver
product: yubiserver
default_status: unaffected
Published: 2025-06-26T21:10:52.404Z
CVE-2015-0843 
yubiserver before 0.6 is prone to buffer overflows due to misuse of sprintf.
Affected products: vendor: yubiserver
product: yubiserver
default_status: unaffected
Published: 2025-06-26T21:11:01.801Z
CVE-2015-0844 
The WML/Lua API in Battle for Wesnoth 1.7.x through 1.11.x and 1.12.x before 1.12.2 allows remote attackers to read arbitrary files via a crafted (1) campaign or (2) map file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-14T18:00:00.000Z
CVE-2015-0845 
Format string vulnerability in Movable Type Pro, Open Source, and Advanced before 5.2.13 and Pro and Advanced 6.0.x before 6.0.8 allows remote attackers to execute arbitrary code via vectors related to localization of templates.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-17T17:00:00.000Z
CVE-2015-0846 
django-markupfield before 1.3.2 uses the default docutils RESTRUCTUREDTEXT_FILTER_SETTINGS settings, which allows remote attackers to include and read arbitrary files via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-24T14:00:00.000Z
CVE-2015-0847 
nbd-server.c in Network Block Device (nbd-server) before 3.11 does not properly handle signals, which allows remote attackers to cause a denial of service (deadlock) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-29T15:00:00.000Z
CVE-2015-0848 
Heap-based buffer overflow in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted BMP image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-01T14:00:00.000Z
CVE-2015-0849 
pycode-browser before version 1.0 is prone to a predictable temporary file vulnerability.
Affected products: vendor: pycode-browser
product: pycode-browser
default_status: unaffected
Published: 2025-06-26T21:15:16.750Z
CVE-2015-0850 
The Git plugin for FusionForge before 6.0rc4 allows remote attackers to execute arbitrary code via an unspecified parameter when creating a secondary Git repository.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-02T14:00:00.000Z
CVE-2015-0851 
XMLTooling-C before 1.5.5, as used in OpenSAML-C and Shibboleth Service Provider (SP), does not properly handle integer conversion exceptions, which allows remote attackers to cause a denial of service (crash) via schema-invalid XML data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-12T14:00:00.000Z
CVE-2015-0852 
Multiple integer underflows in PluginPCX.cpp in FreeImage 3.17.0 and earlier allow remote attackers to cause a denial of service (heap memory corruption) via vectors related to the height and width of a window.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-29T18:00:00.000Z
CVE-2015-0853 
svn-workbench 1.6.2 and earlier on a system with xeyes installed allows local users to execute arbitrary commands by using the "Command Shell" menu item while in the directory trunk/$(xeyes).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-06T21:00:00.000Z
CVE-2015-0854 
App/HelperFunctions.pm in Shutter through 0.93.1 allows user-assisted remote attackers to execute arbitrary commands via a crafted image name that is mishandled during a "Show in Folder" action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-12-29T18:00:00.000Z
CVE-2015-0855 
The _mediaLibraryPlayCb function in mainwindow.py in pitivi before 0.95 allows attackers to execute arbitrary code via shell metacharacters in a file path.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-23T20:00:00.000Z
CVE-2015-0856 
daemon/Greeter.cpp in sddm before 0.13.0 does not properly disable the KDE crash handler, which allows local users to gain privileges by crashing a greeter when using certain themes, as demonstrated by the plasma-workspace breeze theme.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-24T20:00:00.000Z
CVE-2015-0857 
Cool Projects TarDiff allows remote attackers to execute arbitrary commands via shell metacharacters in the name of a (1) tar file or (2) file within a tar file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-06T17:00:00.000Z
CVE-2015-0858 
Cool Projects TarDiff allows local users to write to arbitrary files via a symlink attack on a pathname in a /tmp/tardiff-$$ temporary directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-06T17:00:00.000Z
CVE-2015-0859 
The Debian build procedure for the smokeping package in wheezy before 2.6.8-2+deb7u1 and jessie before 2.6.9-1+deb8u1 does not properly configure the way Apache httpd passes arguments to smokeping_cgi, which allows remote attackers to execute arbitrary code via crafted CGI arguments.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-03T20:00:00.000Z
CVE-2015-0860 
Off-by-one error in the extracthalf function in dpkg-deb/extract.c in the dpkg-deb component in Debian dpkg 1.16.x before 1.16.17 and 1.17.x before 1.17.26 allows remote attackers to execute arbitrary code via the archive magic version number in an "old-style" Debian binary package, which triggers a stack-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-03T20:00:00.000Z
CVE-2015-0861 
model/modelstorage.py in trytond 3.2.x before 3.2.10, 3.4.x before 3.4.8, 3.6.x before 3.6.5, and 3.8.x before 3.8.1 allows remote authenticated users to bypass intended access restrictions and write to arbitrary fields via a sequence of records.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-04-13T15:00:00.000Z
CVE-2015-0862 
Multiple cross-site scripting (XSS) vulnerabilities in the management web UI in the RabbitMQ management plugin before 3.4.3 allow remote authenticated users to inject arbitrary web script or HTML via (1) message details when a message is unqueued, such as headers or arguments; (2) policy names, which are not properly handled when viewing policies; (3) details for AMQP network clients, such as the version; allow remote authenticated administrators to inject arbitrary web script or HTML via (4) user names, (5) the cluster name; or allow RabbitMQ cluster administrators to (6) modify unspecified content.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-18T18:00:00.000Z
CVE-2015-0863 
GALAXY Apps (aka Samsung Apps, Samsung Updates, or com.sec.android.app.samsungapps) before 14120405.03.012 allows man-in-the-middle attackers to obtain sensitive information and execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-27T17:00:00.000Z
CVE-2015-0864 
Samsung Account (AKA com.osp.app.signin) before 1.6.0069 and 2.x before 2.1.0069 allows man-in-the-middle attackers to obtain sensitive information and execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-27T17:00:00.000Z
CVE-2015-0866 
Multiple cross-site scripting (XSS) vulnerabilities in Zoho ManageEngine SupportCenter Plus 7.9 before hotfix 7941 allow remote attackers to inject arbitrary web script or HTML via the (1) fromCustomer, (2) username, or (3) password parameter to HomePage.do.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-02T15:00:00.000Z
CVE-2015-0867 
Directory traversal vulnerability in SYNCK GRAPHICA Download Log CGI 3.0 and earlier allows remote attackers to read arbitrary files via a crafted filename.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-21T11:00:00.000Z
CVE-2015-0868 
Unrestricted file upload vulnerability in Mrs. Shiromuku Perl CGI shiromuku(bu2)BBS before 2.91 allows remote attackers to execute arbitrary code by uploading an executable file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-01T15:00:00.000Z
CVE-2015-0869 
I-O DATA DEVICE NP-BBRM routers allow remote attackers to cause a denial of service (SSDP reflection) via UPnP requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-01T15:00:00.000Z
CVE-2015-0870 
Cross-site scripting (XSS) vulnerability in hb.cgi in Nishishi Factory Fumy News Clipper 2.x before 2.5.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-01T02:00:00.000Z
CVE-2015-0871 
Cross-site scripting (XSS) vulnerability in Mrs. Shiromuku Perl CGI shiromuku(u1)GUESTBOOK 1.62 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-07T15:00:00.000Z
CVE-2015-0873 
Cross-site scripting (XSS) vulnerability in Homepage Decorator PerlTreeBBS 2.30 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-13T02:00:00.000Z
CVE-2015-0874 
Smartphone Passbook 1.0.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to obtain sensitive information from encrypted communications via a crafted certificate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-26T14:00:00.000Z
CVE-2015-0875 
The Ogaki Kyoritsu Bank Smartphone Passbook application 1.0.0 for Android creates a log file containing input data from the user, which allows attackers to obtain sensitive information by reading a file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-15T02:00:00.000Z
CVE-2015-0876 
Multiple cross-site scripting (XSS) vulnerabilities in the print_language_selectbox function in classes/adminpage.inc.php in Saurus CMS Community Edition before 4.7 2015-02-04 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-07T01:00:00.000Z
CVE-2015-0877 
Unrestricted file upload vulnerability in app/lib/mlf.pl in C-BOARD Moyuku before 1.03b3 allows remote attackers to execute arbitrary code by uploading a file with a \0 character in its name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-06T01:00:00.000Z
CVE-2015-0878 
Directory traversal vulnerability in CREAR AL-Mail32 before 1.13d allows remote attackers to write to arbitrary files via a crafted filename of an attachment.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-20T11:00:00.000Z
CVE-2015-0879 
CREAR AL-Mail32 before 1.13d allows remote attackers to cause a denial of service (application crash) via a (1) CON, (2) AUX, or (3) NUL device name in the filename of an attachment.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-20T11:00:00.000Z
CVE-2015-0880 
Buffer overflow in CREAR AL-Mail32 before 1.13d allows remote attackers to execute arbitrary code via a long filename of an attachment.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-20T11:00:00.000Z
CVE-2015-0881 
CRLF injection vulnerability in Squid before 3.1.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted header in a response.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-20T11:00:00.000Z
CVE-2015-0882 
Multiple cross-site scripting (XSS) vulnerabilities in zencart-ja (aka Zen Cart Japanese edition) 1.3 jp through 1.3.0.2 jp8 and 1.5 ja through 1.5.1 ja allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, related to admin/includes/init_includes/init_sanitize.php and includes/init_includes/init_sanitize.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-27T02:00:00.000Z
CVE-2015-0883 
SYNCK GRAPHICA Mailform Pro CGI 4.1.4 and 4.1.5, when the mailauth module is enabled, does not properly send e-mail messages, which allows remote attackers to execute arbitrary code via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-27T02:00:00.000Z
CVE-2015-0884 
Unquoted Windows search path vulnerability in Toshiba Bluetooth Stack for Windows before 9.10.32(T) and Service Station before 2.2.14 allows local users to gain privileges via a Trojan horse application with a name composed of an initial substring of a path that contains a space character.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-28T02:00:00.000Z
CVE-2015-0885 
checkpw 1.02 and earlier allows remote attackers to cause a denial of service (infinite loop) via a -- (dash dash) in a username.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-28T02:00:00.000Z
CVE-2015-0886 
Integer overflow in the crypt_raw method in the key-stretching implementation in jBCrypt before 0.4 makes it easier for remote attackers to determine cleartext values of password hashes via a brute-force attack against hashes associated with the maximum exponent.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-28T02:00:00.000Z
CVE-2015-0887 
npppd in the PPP Access Concentrator (PPPAC) on SEIL SEIL/x86 Fuji routers 1.00 through 3.30, SEIL/X1 routers 3.50 through 4.70, SEIL/X2 routers 3.50 through 4.70, and SEIL/B1 routers 3.50 through 4.70 allows remote attackers to cause a denial of service (infinite loop and device hang) via a crafted SSTP packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-28T02:00:00.000Z
CVE-2015-0888 
KENT-WEB Clip Board before 4.1 allows remote attackers to delete arbitrary files via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-28T02:00:00.000Z
CVE-2015-0889 
KENT-WEB Joyful Note before 5.3 allows remote attackers to delete files or write to files, and consequently execute arbitrary code, via vectors involving an article.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-28T02:00:00.000Z
CVE-2015-0890 
The BestWebSoft Google Captcha (aka reCAPTCHA) plugin before 1.13 for WordPress allows remote attackers to bypass the CAPTCHA protection mechanism and obtain administrative access via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-03-03T11:00:00.000Z
CVE-2015-0891 
Cross-site scripting (XSS) vulnerability in Maroyaka CGI Maroyaka Simple Board allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-03-05T01:00:00.000Z
CVE-2015-0892 
Cross-site scripting (XSS) vulnerability in Maroyaka CGI Maroyaka Image Album allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-03-05T01:00:00.000Z
CVE-2015-0893 
Cross-site scripting (XSS) vulnerability in Maroyaka CGI Maroyaka Relay Novel allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-03-05T01:00:00.000Z
CVE-2015-0894 
SQL injection vulnerability in the All In One WP Security & Firewall plugin before 3.8.8 for WordPress allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-03-07T02:00:00.000Z
CVE-2015-0895 
Cross-site request forgery (CSRF) vulnerability in the All In One WP Security & Firewall plugin before 3.9.0 for WordPress allows remote attackers to hijack the authentication of administrators for requests that delete logs of 404 (aka Not Found) HTTP status codes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-03-07T02:00:00.000Z
CVE-2015-0896 
Multiple cross-site scripting (XSS) vulnerabilities in eXtplorer before 2.1.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-03-18T23:00:00.000Z
CVE-2015-0897 
LINE for Android version 5.0.2 and earlier and LINE for iOS version 5.0.0 and earlier are vulnerable to MITM (man-in-the-middle) attack since the application allows non-SSL/TLS communications. As a result, any API may be invoked from a script injected by a MITM (man-in-the-middle) attacker.
Problem types: description: Script injection
Affected products: vendor: LINE Corporation
product: LINE for Android
vendor: LINE Corporation
product: LINE for iOS
Published: 2023-10-31T09:28:50.586Z