https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 02:45:26 +0000 https://cve.radiocsirt.org/vuln/cnvd-2020-52883 cnvd-2020-52883 https://cve.radiocsirt.org/vuln/cnvd-2020-52883 https://cve.radiocsirt.org/vuln/euvd-2026-56553 EUVD-2026-56553 https://cve.radiocsirt.org/vuln/euvd-2026-56553 https://cve.radiocsirt.org/vuln/fkie_cve-2019-14756 <p>An issue was discovered in KaiOS 1.0, 2.5, and 2.5.12.5. The pre-installed Email application is vulnerable to HTML and JavaScript injection attacks. An attacker can send a specially crafted email to the victim that will inject HTML into the email application&#39;s UI as soon as the email is opened. At a bare minimum, this allows an attacker to take control over the Email application&#39;s UI (e.g., display a malicious prompt to the user asking them to re-enter their email credentials) and also allows an attacker to abuse any of the privileges available to the mobile application.</p> <p>An issue was discovered in KaiOS 1.0, 2.5, and 2.5.12.5. The pre-installed Email application is vulnerable to HTML and JavaScript injection attacks. An attacker can send a specially crafted email to the victim that will inject HTML into the email application&#39;s UI as soon as the email is opened. At a bare minimum, this allows an attacker to take control over the Email application&#39;s UI (e.g., display a malicious prompt to the user asking them to re-enter their email credentials) and also allows an attacker to abuse any of the privileges available to the mobile application.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-14756 https://cve.radiocsirt.org/vuln/ghsa-2qfq-4hw9-7rpg <p>An issue was discovered in KaiOS 1.0, 2.5, and 2.5.12.5. The pre-installed Email application is vulnerable to HTML and JavaScript injection attacks. An attacker can send a specially crafted email to the victim that will inject HTML into the email application&#39;s UI as soon as the email is opened. At a bare minimum, this allows an attacker to take control over the Email application&#39;s UI (e.g., display a malicious prompt to the user asking them to re-enter their email credentials) and also allows an attacker to abuse any of the privileges available to the mobile application.</p> <p>An issue was discovered in KaiOS 1.0, 2.5, and 2.5.12.5. The pre-installed Email application is vulnerable to HTML and JavaScript injection attacks. An attacker can send a specially crafted email to the victim that will inject HTML into the email application&#39;s UI as soon as the email is opened. At a bare minimum, this allows an attacker to take control over the Email application&#39;s UI (e.g., display a malicious prompt to the user asking them to re-enter their email credentials) and also allows an attacker to abuse any of the privileges available to the mobile application.</p> https://cve.radiocsirt.org/vuln/ghsa-2qfq-4hw9-7rpg https://cve.radiocsirt.org/vuln/gsd-2019-14756 gsd-2019-14756 https://cve.radiocsirt.org/vuln/gsd-2019-14756