https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 06:02:23 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-21763 EUVD-2026-21763 https://cve.radiocsirt.org/vuln/euvd-2026-21763 https://cve.radiocsirt.org/vuln/fkie_cve-2021-20693 <p>Improper access control vulnerability in Gurunavi App for Android ver.10.0.10 and earlier and for iOS ver.11.1.2 and earlier allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App.</p> <p>Improper access control vulnerability in Gurunavi App for Android ver.10.0.10 and earlier and for iOS ver.11.1.2 and earlier allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-20693 https://cve.radiocsirt.org/vuln/ghsa-f9xw-hgj3-mv7h <p>Improper access control vulnerability in Gurunavi App for Android ver.10.0.10 and earlier and for iOS ver.11.1.2 and earlier allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App.</p> <p>Improper access control vulnerability in Gurunavi App for Android ver.10.0.10 and earlier and for iOS ver.11.1.2 and earlier allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App.</p> https://cve.radiocsirt.org/vuln/ghsa-f9xw-hgj3-mv7h https://cve.radiocsirt.org/vuln/gsd-2021-20693 gsd-2021-20693 https://cve.radiocsirt.org/vuln/gsd-2021-20693 https://cve.radiocsirt.org/vuln/jvndb-2021-000031 <p>Gurunavi Apps provided by Gurunavi, Inc. implement the function to access a requested URL using Custom URL Scheme. This function contains an improper access control vulnerability (CWE-284) that may allow the vulnerable App to receive an request from an arbitrary App and execute an access. Ryo Sato of BroadBand Security,Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> <p>Gurunavi Apps provided by Gurunavi, Inc. implement the function to access a requested URL using Custom URL Scheme. This function contains an improper access control vulnerability (CWE-284) that may allow the vulnerable App to receive an request from an arbitrary App and execute an access. Ryo Sato of BroadBand Security,Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2021-000031