Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
apache cordova vulnerabilities and exploits
(subscribe to this query)
231
VMScore
CVE-2015-1835
Apache Cordova Android prior to 3.7.2 and 4.x prior to 4.0.2, when an application does not set explicit values in config.xml, allows remote malicious users to modify undefined secondary configuration variables (preferences) via a crafted intent: URL.
Apache Cordova 4.0.1
Apache Cordova 4.0.0
Apache Cordova
445
VMScore
CVE-2014-0072
ios/CDVFileTransfer.m in the Apache Cordova File-Transfer standalone plugin (org.apache.cordova.file-transfer) prior to 0.4.2 for iOS and the File-Transfer plugin for iOS from Cordova 2.4.0 up to and including 2.9.0 might allow remote malicious users to spoof SSL servers by lever...
Apache Cordova File Transfer
Apache Cordova
668
VMScore
CVE-2014-0073
The CDVInAppBrowser class in the Apache Cordova In-App-Browser standalone plugin (org.apache.cordova.inappbrowser) prior to 0.3.2 for iOS and the In-App-Browser plugin for iOS from Cordova 2.6.0 up to and including 2.9.0 does not properly validate callback identifiers, which allo...
Apache Cordova In-app-browser
Apache Cordova
570
VMScore
CVE-2014-3500
Apache Cordova Android prior to 3.5.1 allows remote malicious users to change the start page via a crafted intent URL.
Apache Cordova
668
VMScore
CVE-2015-5207
Apache Cordova iOS prior to 4.0.0 might allow malicious users to bypass a URL whitelist protection mechanism in an app and load arbitrary resources by leveraging unspecified methods.
Apache Cordova
383
VMScore
CVE-2015-5208
Apache Cordova iOS prior to 4.0.0 allows remote malicious users to execute arbitrary plugins via a link.
Apache Cordova
384
VMScore
CVE-2015-5256
Apache Cordova-Android prior to 4.1.0, when an application relies on a remote server, improperly implements a JavaScript whitelist protection mechanism, which allows malicious users to bypass intended access restrictions via a crafted URI.
Apache Cordova
516
VMScore
CVE-2017-3160
After the Android platform is added to Cordova the first time, or after a project is created using the build scripts, the scripts will fetch Gradle on the first build. However, since the default URI is not using https, it is vulnerable to a MiTM and the Gradle executable is not s...
Apache Cordova
445
VMScore
CVE-2016-6799
Product: Apache Cordova Android 5.2.2 and previous versions. The application calls methods of the Log class. Messages passed to these methods (Log.v(), Log.d(), Log.i(), Log.w(), and Log.e()) are stored in a series of circular buffers on the device. By default, a maximum of four ...
Apache Cordova
446
VMScore
CVE-2015-8320
Apache Cordova-Android prior to 3.7.0 improperly generates random values for BridgeSecret data, which makes it easier for malicious users to conduct bridge hijacking attacks by predicting a value.
Apache Cordova
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
HTML injection
CVE-2024-35894
SQL
CVE-2024-5105
CVE-2014-100005
CVE-2024-35895
unauthorized
CVE-2024-22120
CVE-2024-35890
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
NEXT »