RSS   Vulnerabilities for 'Sleipnir mobile'   RSS

2014-01-22
 
CVE-2014-0806

CWE-200
 
 
The Sleipnir Mobile application 2.12.1 and earlier and Sleipnir Mobile Black Edition application 2.12.1 and earlier for Android provide Geolocation API data without verifying user consent, which allows remote attackers to obtain sensitive location information via a web site that makes API calls.

 
2013-06-03
 
CVE-2013-2317

CWE-noinfo
 
 
The Sleipnir Mobile application 2.9.1 and earlier and Sleipnir Mobile Black Edition application 2.9.1 and earlier for Android allow remote attackers to spoof the address bar via vectors involving the opening of a new window.

 
2012-08-08
 
CVE-2012-4004

CWE-79
 
 
Cross-site scripting (XSS) vulnerability in the Sleipnir Mobile application 2.2.0 and earlier and Sleipnir Mobile Black Edition application 2.2.0 and earlier for Android allows remote attackers to inject arbitrary web script or HTML via a crafted application that interacts with an unspecified Sleipnir Mobile function.

 
 
CVE-2012-2649

CWE-94
 
 
The Sleipnir Mobile application 2.2.0 and earlier and Sleipnir Mobile Black Edition application 2.2.0 and earlier for Android allow remote attackers to execute arbitrary Java methods, and obtain sensitive information or execute arbitrary commands, via a crafted web site.

 
2012-07-25
 
CVE-2012-2646

CWE-200
 
 
The Sleipnir Mobile application before 2.1.0 and Sleipnir Mobile Black Edition application before 2.1.0 for Android do not properly implement the WebView class, which allows remote attackers to obtain sensitive information via a crafted application.

 

 >>> Vendor: Fenrir-inc 3 Products
Sleipnir
Activegeckobrowser
Sleipnir mobile

Copyright 2024, cxsecurity.com

 

Back to Top