Read the docs

Tapatalk

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Tapatalk records in CISA KEV

No Tapatalk vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Tapatalk 5 records MEDIUM

Records

5 records

TI-2014-01587 CVE-2014-2023 · GHSA-pvxc-738f-66pm

Multiple SQL injection vulnerabilities in the Tapatalk plugin 4.9.0 and earlier and 5.x…

Priority MEDIUM 49

Multiple SQL injection vulnerabilities in the Tapatalk plugin 4.9.0 and earlier and 5.x through 5.2.1 for vBulletin allow remote attackers to execute arbitrary SQL commands via a crafted xmlrpc API request to (1) unsubsc…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04145 Published 2017-10-26 No fix listed CWE-89
TI-2017-10748 CVE-2017-14652 · GHSA-qj97-4j39-w47x

SQL Injection vulnerability in mobiquo/lib/classTTForum.php in the Tapatalk plugin before…

Priority MEDIUM 45

SQL Injection vulnerability in mobiquo/lib/classTTForum.php in the Tapatalk plugin before 4.5.8 for MyBB allows an unauthenticated remote attacker to inject arbitrary SQL commands via an XML-RPC encoded document sent as…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01683 Published 2017-09-21 No fix listed CWE-89
TI-2014-07246 CVE-2014-8870 · GHSA-9xv3-rrw4-9qm8

Open redirect vulnerability in mobiquo/smartbanner/welcome.php in the Tapatalk…

Priority LOW 29

Open redirect vulnerability in mobiquo/smartbanner/welcome.php in the Tapatalk (com.tapatalk.wbb4) plugin before 1.1.2 for Woltlab Burning Board 4.0 allows remote attackers to redirect users to arbitrary web sites and co…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.01268 Published 2015-01-15 No fix listed
TI-2014-04634 CVE-2014-5680 · GHSA-mxc4-mp3j-v426

The Tapatalk (aka com.quoord.tapatalkpro.activity) application 4.8.0 for Android does not…

Priority LOW 24

The Tapatalk (aka com.quoord.tapatalkpro.activity) application 4.8.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive informa…

CVSS 2.0MEDIUM 5.4 Adjacent network No auth Interaction — EPSS 0.00271 Published 2014-09-09 No fix listed CWE-310
TI-2014-07245 CVE-2014-8869 · GHSA-m8rh-p4v3-9rr7

Multiple cross-site scripting (XSS) vulnerabilities in mobiquo/smartbanner/welcome.php in…

Priority LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in mobiquo/smartbanner/welcome.php in the Tapatalk (com.tapatalk.wbb4) plugin 1.x before 1.1.2 for Woltlab Burning Board 4.0 allow remote attackers to inject arbitrary…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01221 Published 2015-01-15 No fix listed CWE-79
Open these records in search →