Yodobashi

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Yodobashi records in CISA KEV

No Yodobashi vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Yodobashi 3 records LOW

Records

3 records

TI-2015-02634 CVE-2015-2980 · GHSA-gmmj-pfw4-rp9r

The Yodobashi application 1.2.1.0 and earlier for Android allows remote attackers to…

LOW 34

The Yodobashi application 1.2.1.0 and earlier for Android allows remote attackers to execute arbitrary Java methods, and consequently obtain sensitive information or execute OS commands, via a crafted HTML document.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02031 Published 2015-08-08 No fix listed CWE-200

TI-2020-04595 CVE-2020-5627 · GHSA-755m-3mmw-86vc

Open redirect in Yodobashi App for Android

LOW 29

Yodobashi App for Android versions 1.8.7 and earlier allows remote attackers to lead a user to access an arbitrary website via the vulnerable App.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00864 Published 2020-09-09 No fix listed CWE-601

TI-2015-02635 CVE-2015-2981 · GHSA-v7j9-w82c-6xcj

The Yodobashi App for Android 1.2.1.0 and earlier does not verify X.509 certificates from…

LOW 28

The Yodobashi App for Android 1.2.1.0 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.00828 Published 2018-01-12 No fix listed CWE-295

Open these records in search →

Critical	0
High	0
Medium	3
Low	0
No CVSS	0