Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Unionpayintl Component: Union Pay Clear all filters
TI-2020-18583 CVE-2020-36285 · GHSA-9r9h-rjvp-wrff

Union Pay up to 3.3.12, for iOS mobile apps, contains a CWE-347: Improper Verification of…

Priority LOW 35

Union Pay up to 3.3.12, for iOS mobile apps, contains a CWE-347: Improper Verification of Cryptographic Signature vulnerability, allows attackers to shop for free in merchants' websites and mobile apps, via a crafted aut…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00904 Published 2021-04-06 No fix listed CWE-347