https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-19T07:40:23.172805+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-08924 cnvd-2022-08924 2026-10-19T07:40:23.176766+00:00 cnvd-2022-08924 https://cve.radiocsirt.org/vuln/euvd-2026-21921 EUVD-2026-21921 2026-10-19T07:40:23.176796+00:00 EUVD-2026-21921 https://cve.radiocsirt.org/vuln/fkie_cve-2021-20873 fkie_cve-2021-20873 2026-10-19T07:40:23.176809+00:00

Yappli is an application development platform which provides the function to access a requested URL using Custom URL Scheme. When Android apps are developed with Yappli versions since v7.3.6 and prior to v9.30.0, they are vulnerable to improper authorization in Custom URL Scheme handler, and may be directed to unintended sites via a specially crafted URL.

 https://cve.radiocsirt.org/vuln/ghsa-qqj9-5rm5-5hhr GHSA-qqj9-5rm5-5hhr 2026-10-19T07:40:23.176838+00:00

Yappli is an application development platform which provides the function to access a requested URL using Custom URL Scheme. When Android apps are developed with Yappli versions since v7.3.6 and prior to v9.30.0, they are vulnerable to improper authorization in Custom URL Scheme handler, and may be directed to unintended sites via a specially crafted URL.

 https://cve.radiocsirt.org/vuln/gsd-2021-20873 gsd-2021-20873 2026-10-19T07:40:23.176854+00:00 gsd-2021-20873 https://cve.radiocsirt.org/vuln/jvndb-2021-000112 jvndb-2021-000112 2026-10-19T07:40:23.176865+00:00

Yappli provided by Yappli, Inc. is an application development platform. Android Apps that are developed with Yappli provide the function to access a requested URL using Custom URL Scheme. The access to the function is not restricted properly (CWE-939) which may be exploited to direct the App to connect to unintended sites. RyotaK reported and coordinated with the developer to fix this vulnerability. After coordination was completed, this case was reported to IPA, and JPCERT/CC coordinated with the developer for the publication under Information Security Early Warning Partnership.