https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-20T21:47:50.349566+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2015-07295 cnvd-2015-07295 2026-10-20T21:47:50.431067+00:00 cnvd-2015-07295 https://cve.radiocsirt.org/vuln/euvd-2026-93219 EUVD-2026-93219 2026-10-20T21:47:50.431126+00:00 EUVD-2026-93219 https://cve.radiocsirt.org/vuln/fkie_cve-2015-5204 fkie_cve-2015-5204 2026-10-20T21:47:50.431141+00:00

CRLF injection vulnerability in the Apache Cordova File Transfer Plugin (cordova-plugin-file-transfer) for Android before 1.3.0 allows remote attackers to inject arbitrary headers via CRLF sequences in the filename of an uploaded file.

 https://cve.radiocsirt.org/vuln/ghsa-5cr8-pc55-3vrc GHSA-5cr8-pc55-3vrc 2026-10-20T21:47:50.431179+00:00

CRLF injection vulnerability in the Apache Cordova File Transfer Plugin (cordova-plugin-file-transfer) for Android before 1.3.0 allows remote attackers to inject arbitrary headers via CRLF sequences in the filename of an uploaded file.

 https://cve.radiocsirt.org/vuln/gsd-2015-5204 gsd-2015-5204 2026-10-20T21:47:50.431197+00:00 gsd-2015-5204 https://cve.radiocsirt.org/vuln/jvndb-2015-000142 jvndb-2015-000142 2026-10-20T21:47:50.431209+00:00

cordova-plugin-file-transfer, a plugin for Apache Cordova provided by the Apache Software Foundation, provides functionality to upload and download files in applications created by Apache Cordova. It also provides functionality to add HTTP headers. Android applications that use cordova-plugin-file-transfer contain a HTTP header injection vulnerability due to a flaw in processing file names. Muneaki Nishimura of Sony Digital Network Applications, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.