Shareit (Lenovo) - vulnerabilities (CVEs)

7 CVEs, 0 in the last 30 days, 6 known versions, newest CVE from 2016-05-23. Vendor: Lenovo.

CVEs of Shareit

• CVE-2016-4783 - CVSS 6.1 (medium), 2016-05-23: Cross-site scripting (XSS) vulnerability in Lenovo SHAREit before 3.5.98_ww on Android before 4.4 allows remote attackers to inject arbitrary web script or…
• CVE-2016-4782 - CVSS 8.8 (high), 2016-05-23: Lenovo SHAREit before 3.5.98_ww on Android before 4.2 allows remote attackers to have unspecified impact via a crafted intent: URL, aka an "intent scheme URL…
• CVE-2016-1492 - CVSS 6.1 (medium), 2016-01-26: The Wifi hotspot in Lenovo SHAREit before 3.5.48_ww for Android, when configured to receive files, does not require a password, which makes it easier for…
• CVE-2016-1491 - CVSS 8.8 (high), 2016-01-26: The Wifi hotspot in Lenovo SHAREit before 3.2.0 for Windows, when configured to receive files, has a hardcoded password of 12345678, which makes it easier for…
• CVE-2016-1490 - CVSS 4.1 (medium), 2016-01-26: The Wifi hotspot in Lenovo SHAREit before 3.2.0 for Windows allows remote attackers to obtain sensitive file names via a crafted file request to /list.
• CVE-2016-1489 - CVSS 8 (high), 2016-01-26: Lenovo SHAREit before 3.2.0 for Windows and SHAREit before 3.5.48_ww for Android transfer files in cleartext, which allows remote attackers to (1) obtain…
• CVE-2014-1939 - CVSS 7.5 (high), 2014-03-03: java/android/webkit/BrowserFrame.java in Android before 4.4 uses the addJavascriptInterface API in conjunction with creating an object of the SearchBoxImpl…