Apache

Cordova

18 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2015-5256

  • EPSS 0.71%
  • Published 23.11.2015 11:59:00
  • Last modified 12.04.2025 10:46:40

Apache Cordova-Android before 4.1.0, when an application relies on a remote server, improperly implements a JavaScript whitelist protection mechanism, which allows attackers to bypass intended access restrictions via a crafted URI.

4.3

CVE-2014-3502

  • EPSS 1.49%
  • Published 15.11.2014 21:59:04
  • Last modified 12.04.2025 10:46:40

Apache Cordova Android before 3.5.1 allows remote attackers to open and send data to arbitrary applications via a URL with a crafted URI scheme for an Android intent.

4.3

CVE-2014-3501

  • EPSS 1.65%
  • Published 15.11.2014 21:59:03
  • Last modified 12.04.2025 10:46:40

Apache Cordova Android before 3.5.1 allows remote attackers to bypass the HTTP whitelist and connect to arbitrary servers by using JavaScript to open WebSocket connections through WebView.

6.4

CVE-2014-3500

  • EPSS 1.25%
  • Published 15.11.2014 21:59:01
  • Last modified 12.04.2025 10:46:40

Apache Cordova Android before 3.5.1 allows remote attackers to change the start page via a crafted intent URL.

7.5

CVE-2012-6637

Exploit
  • EPSS 1.27%
  • Published 03.03.2014 04:50:46
  • Last modified 12.04.2025 10:46:40

Apache Cordova 3.3.0 and earlier and Adobe PhoneGap 2.9.0 and earlier do not anchor the end of domain-name regular expressions, which allows remote attackers to bypass a whitelist protection mechanism via a domain name that contains an acceptable nam...

7.5

CVE-2014-1884

Exploit
  • EPSS 2.05%
  • Published 03.03.2014 04:50:46
  • Last modified 12.04.2025 10:46:40

Apache Cordova 3.3.0 and earlier and Adobe PhoneGap 2.9.0 and earlier on Windows Phone 7 and 8 do not properly restrict navigation events, which allows remote attackers to bypass intended device-resource restrictions via content that is accessed (1) ...

7.5

CVE-2014-1882

  • EPSS 7.67%
  • Published 03.03.2014 04:50:46
  • Last modified 12.04.2025 10:46:40

Apache Cordova 3.3.0 and earlier and Adobe PhoneGap 2.9.0 and earlier allow remote attackers to bypass intended device-resource restrictions of an event-based bridge via a crafted library clone that leverages IFRAME script execution and directly acce...

7.5

CVE-2014-1881

Exploit
  • EPSS 1.86%
  • Published 03.03.2014 04:50:46
  • Last modified 12.04.2025 10:46:40

Apache Cordova 3.3.0 and earlier and Adobe PhoneGap 2.9.0 and earlier allow remote attackers to bypass intended device-resource restrictions of an event-based bridge via a crafted library clone that leverages IFRAME script execution and waits a certa...