Kaiostech - vulnerabilities (CVEs)
10 CVEs in 1 products, 0 in the last 30 days, newest from 2023-05-22.
Products
- Kaios - 10 CVEs
Newest CVEs of Kaiostech
- CVE-2023-33294 - CVSS 9.8 (critical), 2023-05-22: An issue was discovered in KaiOS 3.0 before 3.1. The /system/bin/tctweb_server binary exposes a local web server that responds to GET and POST requests on…
- CVE-2023-33293 - CVSS 5.3 (medium), 2023-05-22: An issue was discovered in KaiOS 3.0 and 3.1. The binary /system/kaios/api-daemon exposes a local web server on *.localhost with subdomains for each installed…
- CVE-2023-27108 - CVSS 5.3 (medium), 2023-05-01: An issue was discovered in KaiOS 3.0. The pre-installed Communications application exposes a Web Activity that returns the user's call log without origin or…
- CVE-2019-14758 - CVSS 6.1 (medium), 2020-09-14: An issue was discovered in KaiOS 2.5 and 2.5.1. The pre-installed File Manager application is vulnerable to HTML and JavaScript injection attacks. An attacker…
- CVE-2019-14761 - CVSS 4.4 (medium), 2020-09-14: An issue was discovered in KaiOS 2.5. The pre-installed Note application is vulnerable to HTML and JavaScript injection attacks. A local attacker can inject…
- CVE-2019-14757 - CVSS 6.1 (medium), 2020-09-14: An issue was discovered in KaiOS 2.5 and 2.5.1. The pre-installed Contacts application is vulnerable to HTML and JavaScript injection attacks. An attacker can…
- CVE-2019-14760 - CVSS 4.4 (medium), 2020-09-14: An issue was discovered in KaiOS 2.5. The pre-installed Recorder application is vulnerable to HTML and JavaScript injection attacks. A local attacker can…
- CVE-2019-14759 - CVSS 4.4 (medium), 2020-09-14: An issue was discovered in KaiOS 1.0, 2.5, and 2.5.1. The pre-installed Radio application is vulnerable to HTML and JavaScript injection attacks. A local…
- CVE-2019-14756 - CVSS 6.1 (medium), 2020-09-14: An issue was discovered in KaiOS 1.0, 2.5, and 2.5.12.5. The pre-installed Email application is vulnerable to HTML and JavaScript injection attacks. An…
- CVE-2019-7386 - CVSS 6.5 (medium), 2019-03-21: A Denial of Service issue has been discovered in the Gecko component of KaiOS 2.5 10.05 (platform 48.0.a2) on Nokia 8810 4G devices. When a crafted web page…
