#cwe-939

共收录 19 条相关情报。

← 返回所有主题
漏洞预警2026-10-28 发布MEDIUM

n8n before 2.41.4 and 2.42.x before 2.42.1 contains a missing confirmation vulnerability in the Local Gateway desktop app that allows its deep-link connect handler to silently r...

CVE-2026-118677

n8n before 2.41.4 and 2.42.x before 2.42.1 contains a missing confirmation vulnerability in the Local Gateway desktop ap

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-20 发布INFO

A vulnerability was found in Nerimity Desktop up to 2.2.2. Affected by this issue is the function shell.openExternal of the file src/mainWindow.js of the component Window Open H...

CVE-2026-113411

A vulnerability was found in Nerimity Desktop up to 2.2.2. Affected by this issue is the function shell.openExternal of

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace for Android before version 7.2.1 may allow an unauthenticated user to conduct an escalation of privileg...

CVE-2026-53418

Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace for Android before version 7.2.1 may allow an

历史摘要 · 未重新核验 · NVD

安全公告2026-10-08 发布INFO

The Android application "Ticket Ryutsu Center" improperly handles custom URL schemes, allowing a...

CVE-2026-92862

The Android application "Ticket Ryutsu Center" improperly handles custom URL schemes, allowing a malicious application t

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-26 发布INFO

Android application "Myna Point" is vulnerable to Improper Authorization in Handler for Custom URL Scheme (CWE-939). A malicious application installed on the user's Android devi...

CVE-2026-73335

Android application "Myna Point" is vulnerable to Improper Authorization in Handler for Custom URL Scheme (CWE-939). A m

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-10 发布INFO

Improper authorization in handler for custom URL scheme in My Galaxy prior to version 6.3 allows remote attackers to access sensitive information.

CVE-2026-21075

Improper authorization in handler for custom URL scheme in My Galaxy prior to version 6.3 allows remote attackers to acc

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-10 发布INFO

Authorization bypass in SemClipboardService prior to SMR Aug-2026 Release 1 allows local attackers to access clipboard data.

CVE-2026-21062

Authorization bypass in SemClipboardService prior to SMR Aug-2026 Release 1 allows local attackers to access clipboard d

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布INFO

Home Assistant is open source home automation software focused on local control and privacy. Prior to 2026.6.1, the Android Companion app is vulnerable to an open redirect. The ...

CVE-2026-59717

Home Assistant is open source home automation software focused on local control and privacy. Prior to 2026.6.1, the Andr

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-14 发布INFO

A vulnerability has been found in Genspark AI Workspace App 2.8.4 on Android. This vulnerability affects unknown code of the component ai.mainfunc.genspark. The manipulation lea...

CVE-2026-12190

A vulnerability has been found in Genspark AI Workspace App 2.8.4 on Android. This vulnerability affects unknown code of

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-14 发布INFO

A flaw has been found in Moovit Bus & Public Transit App 1.18 on Android. This affects an unknown part of the component com.tranzmate. Executing a manipulation can lead to impro...

CVE-2026-12189

A flaw has been found in Moovit Bus & Public Transit App 1.18 on Android. This affects an unknown part of the component

历史摘要 · 未重新核验 · NVD

安全公告2026-06-12 发布INFO

Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4...

CVE-2026-53408

Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-12 发布INFO

Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4...

CVE-2026-53407

Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-12 发布INFO

Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS may allow an unauthenticated user to conduct ...

CVE-2026-53408

Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-12 发布INFO

Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS may allow an unauthenticated user to conduct ...

CVE-2026-53407

Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-12 发布INFO

A vulnerability was identified in Groww Stock, Mutual Fund, Gold App up to 20260805 on Android. This affects an unknown part of the component WebView URL Handler. The manipulati...

CVE-2026-12065

A vulnerability was identified in Groww Stock, Mutual Fund, Gold App up to 20260805 on Android. This affects an unknown

历史摘要 · 未重新核验 · NVD

安全公告2026-06-09 发布INFO

A flaw exists in FlashArray Purity where insufficient filtering of certain data paths could...

CVE-2026-6445

A flaw exists in FlashArray Purity where insufficient filtering of certain data paths could expose sensitive information

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-09 发布INFO

A flaw exists in FlashArray Purity where insufficient filtering of certain data paths could expose sensitive information to an authenticated user with low privileges.

CVE-2026-6445

A flaw exists in FlashArray Purity where insufficient filtering of certain data paths could expose sensitive information

历史摘要 · 未重新核验 · NVD

安全公告2026-05-18 发布INFO

Mattermost Desktop App versions <=6.1 6.0.1 5.4.13.0 fail to prevent an invalid URL from loading...

CVE-2026-3471

Mattermost Desktop App versions <=6.1 6.0.1 5.4.13.0 fail to prevent an invalid URL from loading in a pop-up window in t

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-18 发布INFO

Mattermost Desktop App versions <=6.1 6.0.1 5.4.13.0 fail to prevent an invalid URL from loading in a pop-up window in the Mattermost Desktop App which allows a malicious server...

CVE-2026-3471

Mattermost Desktop App versions <=6.1 6.0.1 5.4.13.0 fail to prevent an invalid URL from loading in a pop-up window in t

历史摘要 · 未重新核验 · NVD