Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Swiftkey Clear all filters
TI-2015-03883 CVE-2015-4641 · GHSA-89p8-prmx-639j

Directory traversal vulnerability in the SwiftKey language-pack update implementation on…

Priority LOW 35

Directory traversal vulnerability in the SwiftKey language-pack update implementation on Samsung Galaxy S4, S4 Mini, S5, and S6 devices allows remote web servers to write to arbitrary files, and consequently execute arbi…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.03683 Published 2015-06-19 No fix listed CWE-22
TI-2015-03882 CVE-2015-4640 · GHSA-vvp6-3cxw-w3p7

The SwiftKey language-pack update implementation on Samsung Galaxy S4, S4 Mini, S5, and…

Priority LOW 16

The SwiftKey language-pack update implementation on Samsung Galaxy S4, S4 Mini, S5, and S6 devices relies on an HTTP connection to the skslm.swiftkey.net server, which allows man-in-the-middle attackers to write to langu…

CVSS 2.0LOW 2.9 Adjacent network No auth Interaction — EPSS 0.00945 Published 2015-06-19 No fix listed CWE-254
TI-2014-04675 CVE-2014-5722 · GHSA-3h3h-ghw3-v6jm

The SwiftKey Keyboard + Emoji (aka com.touchtype.swiftkey) application 5.0.2.4 for…

Priority LOW 24

The SwiftKey Keyboard + Emoji (aka com.touchtype.swiftkey) application 5.0.2.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensiti…

CVSS 2.0MEDIUM 5.4 Adjacent network No auth Interaction — EPSS 0.00271 Published 2014-09-09 No fix listed CWE-310