Vendors / Fedirtsapana Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1 CVSS 9.0–10.0
CVSS high 0 CVSS 7.0–8.9
Exploited now Fedirtsapana records in CISA KEV No Fedirtsapana vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 45
The com.phlox.tvwebbrowser TV Bro application through 2.0.0 for Android mishandles external intents through WebView.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01262 · Published 2023-12-27 · No fix listed CWE-94
Priority LOW 29
Phlox com.phlox.simpleserver (aka Simple HTTP Server) 1.8 and com.phlox.simpleserver.plus (aka Simple HTTP Server PLUS) 1.8.1-plus have a hardcoded aKySWb2jjrr4dzkYXczKRt7K (AES) encryption key.
CVSS 3.1 MEDIUM 6.3· Local · Low privileges · No interaction · EPSS 0.00119 · Published 2023-12-27 · No fix listed CWE-798
Priority LOW 21
Phlox com.phlox.simpleserver.plus (aka Simple HTTP Server PLUS) 1.8.1-plus has an Android manifest file that contains an entry with the android:allowBackup attribute set to true.
CVSS 3.1 MEDIUM 4.6· Physical · No auth · No interaction · EPSS 0.00292 · Published 2023-12-27 · No fix listed CWE-798
Open these records in search → All records by CVSS severity
Critical1 High0 Medium2 Low0 No CVSS0