Vulnerabilities

TI-2017-14112 CVE-2017-20041 · GHSA-74ch-7rh8-763r

Ucweb UC Browser HTML URL improper restriction of rendered ui layers

MEDIUM 62

A vulnerability was found in Ucweb UC Browser 11.2.5.932.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00715 Published 2022-06-13 No fix listed CWE-1021

TI-2020-18721 CVE-2020-36473 · GHSA-hqhx-gh2g-hc88

UCWeb UC 12.12.3.1219 through 12.12.3.1226 uses cleartext HTTP, and thus…

LOW 18

UCWeb UC 12.12.3.1219 through 12.12.3.1226 uses cleartext HTTP, and thus man-in-the-middle attackers can discover visited URLs.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00521 Published 2021-08-14 No fix listed CWE-312

TI-2020-05955 CVE-2020-7364 · GHSA-vv5g-6772-3c6r

UCWeb UC Browser Address Bar Spooofing

LOW 21

User Interface (UI) Misrepresentation of Critical Information vulnerability in the address bar of UCWeb's UC Browser allows an attacker to obfuscate the true source of data as presented in the browser.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00742 Published 2020-10-20 No fix listed CWE-451

TI-2020-05954 CVE-2020-7363 · GHSA-mprp-f34x-hghq

UCWeb UC Browser Address Bar Spooofing

LOW 21

User Interface (UI) Misrepresentation of Critical Information vulnerability in the address bar of UCWeb's UC Browser allows an attacker to obfuscate the true source of data as presented in the browser.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00742 Published 2020-10-20 No fix listed CWE-451

TI-2019-07566 CVE-2019-10251 · GHSA-26r9-9qgm-57v8

The UCWeb UC Browser application through 2019-03-26 for Android uses HTTP to download…

LOW 28

The UCWeb UC Browser application through 2019-03-26 for Android uses HTTP to download certain modules associated with PDF and Microsoft Office files (related to libpicsel), which allows MITM attacks.

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.00803 Published 2019-03-28 No fix listed CWE-319

TI-2019-07565 CVE-2019-10250 · GHSA-5wh7-v399-9g5q

UCWeb UC Browser 7.0.185.1002 on Windows uses HTTP for downloading certain PDF modules, which allows MITM attacks.

LOW 28

UCWeb UC Browser 7.0.185.1002 on Windows uses HTTP for downloading certain PDF modules, which allows MITM attacks.

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.00723 Published 2019-03-28 No fix listed CWE-319

TI-2014-05530 CVE-2014-6691 · GHSA-fvqp-36vq-4jhh

The UC Browser HD (aka com.uc.browser.hd) application 3.3.1.469 for Android does not…

LOW 24

The UC Browser HD (aka com.uc.browser.hd) application 3.3.1.469 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information…

CVSS 2.0MEDIUM 5.4 Adjacent network No auth Interaction — EPSS 0.00271 Published 2014-09-23 No fix listed CWE-310

TI-2012-01299 CVE-2012-1478 · GHSA-v6p2-475x-8h4v

Unspecified vulnerability in the UCMobile BloveStorm (com.blovestorm) application 2.2.0…

MEDIUM 46

Unspecified vulnerability in the UCMobile BloveStorm (com.blovestorm) application 2.2.0 and 3.2.1 for Android has unknown impact and attack vectors.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.01559 Published 2012-03-14 No fix listed

Vulnerabilities

Filters