HJ Holdings, Inc.

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

HJ Holdings, Inc. records in CISA KEV

No HJ Holdings, Inc. vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Hulu 2 records LOW

Records

2 records

TI-2022-16178 CVE-2022-35734 · GHSA-32qc-3hm3-7969

Hard-coded credentials in HJ Holdings, Inc. 'Hulu / フールー' App for Android

LOW 34

'Hulu / フールー' App for Android from version 3.0.47 to the version prior to 3.1.2 uses a hard-coded API key for an external service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00701 Published 2022-08-16 No fix listed CWE-798

TI-2022-15072 CVE-2022-34156 · GHSA-mjxq-hc33-93vp

Improper certificate validation in HJ Holdings, Inc. 'Hulu / フールー' App for iOS

LOW 22

'Hulu / フールー' App for iOS versions prior to 3.0.81 improperly verifies server certificates, which may allow an attacker to eavesdrop on an encrypted communication via a man-in-the-middle attack.

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.00252 Published 2022-08-16 Fixed in 3.0.81 CWE-295

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0