Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 08:57:46 +0000 bdu:2018-00142 https://cve.radiocsirt.org/vuln/bdu:2018-00142 bdu:2018-00142 https://cve.radiocsirt.org/vuln/bdu:2018-00142 EUVD-2026-96622 https://cve.radiocsirt.org/vuln/euvd-2026-96622 EUVD-2026-96622 https://cve.radiocsirt.org/vuln/euvd-2026-96622 fkie_cve-2014-0073 https://cve.radiocsirt.org/vuln/fkie_cve-2014-0073 <p>The CDVInAppBrowser class in the Apache Cordova In-App-Browser standalone plugin (org.apache.cordova.inappbrowser) before 0.3.2 for iOS and the In-App-Browser plugin for iOS from Cordova 2.6.0 through 2.9.0 does not properly validate callback identifiers, which allows remote attackers to execute arbitrary JavaScript in the host page and consequently gain privileges via a crafted gap-iab: URI.</p> <p>The CDVInAppBrowser class in the Apache Cordova In-App-Browser standalone plugin (org.apache.cordova.inappbrowser) before 0.3.2 for iOS and the In-App-Browser plugin for iOS from Cordova 2.6.0 through 2.9.0 does not properly validate callback identifiers, which allows remote attackers to execute arbitrary JavaScript in the host page and consequently gain privileges via a crafted gap-iab: URI.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-0073 GHSA-5f44-2f3g-gf6q https://cve.radiocsirt.org/vuln/ghsa-5f44-2f3g-gf6q <p>The CDVInAppBrowser class in the Apache Cordova In-App-Browser standalone plugin (org.apache.cordova.inappbrowser) before 0.3.2 for iOS and the In-App-Browser plugin for iOS from Cordova 2.6.0 through 2.9.0 does not properly validate callback identifiers, which allows remote attackers to execute arbitrary JavaScript in the host page and consequently gain privileges via a crafted gap-iab: URI.</p> <p>The CDVInAppBrowser class in the Apache Cordova In-App-Browser standalone plugin (org.apache.cordova.inappbrowser) before 0.3.2 for iOS and the In-App-Browser plugin for iOS from Cordova 2.6.0 through 2.9.0 does not properly validate callback identifiers, which allows remote attackers to execute arbitrary JavaScript in the host page and consequently gain privileges via a crafted gap-iab: URI.</p> https://cve.radiocsirt.org/vuln/ghsa-5f44-2f3g-gf6q gsd-2014-0073 https://cve.radiocsirt.org/vuln/gsd-2014-0073 gsd-2014-0073 https://cve.radiocsirt.org/vuln/gsd-2014-0073