Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

adobe phonegap vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2014-1883
Adobe PhoneGap prior to 2.6.0 on Android uses the shouldOverrideUrlLoading callback instead of the proper shouldInterceptRequest callback, which allows remote malicious users to bypass intended device-resource restrictions via content that is accessed (1) in an IFRAME element or ...
Adobe Phonegap 2.3.0Adobe Phonegap 2.4.0Adobe PhonegapAdobe Phonegap 2.2.0Adobe Phonegap 2.0.0Adobe Phonegap 2.1.0Adobe Phonegap 2.5.0
NA
CVE-2012-6637
Apache Cordova 3.3.0 and previous versions and Adobe PhoneGap 2.9.0 and previous versions do not anchor the end of domain-name regular expressions, which allows remote malicious users to bypass a whitelist protection mechanism via a domain name that contains an acceptable name as...
Apache Cordova 3.3.0Apache Cordova 3.2.0Apache CordovaApache Cordova 3.0.0Apache Cordova 3.1.0Adobe Phonegap 2.0.0Adobe Phonegap 2.1.0Adobe Phonegap 2.7.0Adobe Phonegap 2.2.0Adobe Phonegap 2.3.0Adobe Phonegap 2.5.0Adobe Phonegap 2.6.0Adobe Phonegap 2.9.0Adobe Phonegap 2.4.0Adobe PhonegapAdobe Phonegap 2.8.0Adobe Phonegap 2.8.1
NA
CVE-2014-1882
Apache Cordova 3.3.0 and previous versions and Adobe PhoneGap 2.9.0 and previous versions allow remote malicious users to bypass intended device-resource restrictions of an event-based bridge via a crafted library clone that leverages IFRAME script execution and directly accesses...
Adobe Phonegap 2.2.0Adobe Phonegap 2.3.0Adobe Phonegap 2.4.0Adobe Phonegap 2.0.0Adobe Phonegap 2.5.0Adobe PhonegapAdobe Phonegap 2.6.0Adobe Phonegap 2.7.0Adobe Phonegap 2.8.0Adobe Phonegap 2.1.0Adobe Phonegap 2.8.1Adobe Phonegap 2.9.0Apache Cordova 3.0.0Apache Cordova 3.1.0Apache Cordova 3.2.0Apache CordovaApache Cordova 3.3.0
NA
CVE-2014-1884
Apache Cordova 3.3.0 and previous versions and Adobe PhoneGap 2.9.0 and previous versions on Windows Phone 7 and 8 do not properly restrict navigation events, which allows remote malicious users to bypass intended device-resource restrictions via content that is accessed (1) in a...
Apache Cordova 3.0.0Apache Cordova 3.2.0Apache Cordova 3.3.0Apache Cordova 3.1.0Apache CordovaAdobe Phonegap 2.0.0Adobe Phonegap 2.6.0Adobe Phonegap 2.7.0Adobe Phonegap 2.8.0Adobe Phonegap 2.2.0Adobe Phonegap 2.4.0Adobe Phonegap 2.5.0Adobe PhonegapAdobe Phonegap 2.3.0Adobe Phonegap 2.1.0Adobe Phonegap 2.8.1Adobe Phonegap 2.9.0
NA
CVE-2014-1881
Apache Cordova 3.3.0 and previous versions and Adobe PhoneGap 2.9.0 and previous versions allow remote malicious users to bypass intended device-resource restrictions of an event-based bridge via a crafted library clone that leverages IFRAME script execution and waits a certain a...
Apache Cordova 3.2.0Apache CordovaApache Cordova 3.3.0Apache Cordova 3.0.0Apache Cordova 3.1.0Adobe Phonegap 2.6.0Adobe Phonegap 2.7.0Adobe Phonegap 2.0.0Adobe Phonegap 2.2.0Adobe Phonegap 2.4.0Adobe Phonegap 2.5.0Adobe Phonegap 2.8.0Adobe PhonegapAdobe Phonegap 2.3.0Adobe Phonegap 2.1.0Adobe Phonegap 2.8.1Adobe Phonegap 2.9.0
8.8
CVSSv3
CVE-2018-4943
Adobe PhoneGap Push Plugin versions 1.8.0 and previous versions have an exploitable Same-Origin Method Execution vulnerability. Successful exploitation could lead to JavaScript code execution in the context of the PhoneGap app.
Adobe Push Notifications
NA
CVE-2014-1885
The ForzeArmate application for Android, when Adobe PhoneGap 2.9.0 or earlier is used, allows remote malicious users to execute arbitrary JavaScript code, and consequently obtain write access to external-storage resources, by leveraging control over any Google syndication adverti...
Hsgroup Forzearmate -
NA
CVE-2014-1886
The Edinburgh by Bus application for Android, when Adobe PhoneGap 2.9.0 or earlier is used, allows remote malicious users to execute arbitrary JavaScript code, and consequently access external-storage resources, by leveraging control over one of a number of "obscure Eastern ...
Edinburghtour Edinburgh By Bus -
NA
CVE-2014-1887
The DrinkedIn BarFinder application for Android, when Adobe PhoneGap 2.9.0 or earlier is used, allows remote malicious users to execute arbitrary JavaScript code, and consequently obtain sensitive fine-geolocation information, by leveraging control over one of a number of adult s...
Drinkedin Drinkedin Barfinder -
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-21111CVE-2024-32884IDORCVE-2023-1000CVE-2024-33260CVE-2024-3682reflected XSSrace conditionCVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook