Vulnerabilities

TI-2020-04595 CVE-2020-5627 · GHSA-755m-3mmw-86vc

Open redirect in Yodobashi App for Android

LOW 29

Yodobashi App for Android versions 1.8.7 and earlier allows remote attackers to lead a user to access an arbitrary website via the vulnerable App.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00864 Published 2020-09-09 No fix listed CWE-601

TI-2015-02635 CVE-2015-2981 · GHSA-v7j9-w82c-6xcj

The Yodobashi App for Android 1.2.1.0 and earlier does not verify X.509 certificates from…

LOW 28

The Yodobashi App for Android 1.2.1.0 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.00828 Published 2018-01-12 No fix listed CWE-295

TI-2015-02634 CVE-2015-2980 · GHSA-gmmj-pfw4-rp9r

The Yodobashi application 1.2.1.0 and earlier for Android allows remote attackers to…

LOW 34

The Yodobashi application 1.2.1.0 and earlier for Android allows remote attackers to execute arbitrary Java methods, and consequently obtain sensitive information or execute OS commands, via a crafted HTML document.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02031 Published 2015-08-08 No fix listed CWE-200

Vulnerabilities

Filters

Open redirect in Yodobashi App for Android

The Yodobashi App for Android 1.2.1.0 and earlier does not verify X.509 certificates from…

The Yodobashi application 1.2.1.0 and earlier for Android allows remote attackers to…