Vendors / Nq Records 7 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 2
Exploited now Nq records in CISA KEV No Nq vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 43
In the "NQ Contacts Backup & Restore" application 1.1 for Android, no HTTPS is used for transmitting login and synced user data.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00686 · Published 2017-10-29 · No fix listed CWE-319
Priority LOW 33
In the "NQ Contacts Backup & Restore" application 1.1 for Android, DES encryption with a static key is used to secure transmitted contact data.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00509 · Published 2017-10-29 · No fix listed CWE-327
Priority LOW 33
In the "NQ Contacts Backup & Restore" application 1.1 for Android, RC4 encryption is used to secure the user password locally stored in shared preferences.
CVSS 3.0 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00133 · Published 2017-10-29 · No fix listed CWE-327
Open these records in search → All records by CVSS severity
1 2 4 0 0
