Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 22 Oct 2026 19:23:06 +0000 EUVD-2026-36607 https://cve.radiocsirt.org/vuln/euvd-2026-36607 EUVD-2026-36607 https://cve.radiocsirt.org/vuln/euvd-2026-36607 fkie_cve-2020-5604 https://cve.radiocsirt.org/vuln/fkie_cve-2020-5604 <p>Android App &#39;Mercari&#39; (Japan version) prior to version 3.52.0 allows arbitrary method execution of a Java object by a remote attacker via a Man-In-The-Middle attack by using Java Reflection API of JavaScript code on WebView.</p> <p>Android App &#39;Mercari&#39; (Japan version) prior to version 3.52.0 allows arbitrary method execution of a Java object by a remote attacker via a Man-In-The-Middle attack by using Java Reflection API of JavaScript code on WebView.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-5604 GHSA-x466-xhx8-frqr https://cve.radiocsirt.org/vuln/ghsa-x466-xhx8-frqr <p>Android App &#39;Mercari&#39; (Japan version) prior to version 3.52.0 allows arbitrary method execution of a Java object by a remote attacker via a Man-In-The-Middle attack by using Java Reflection API of JavaScript code on WebView.</p> <p>Android App &#39;Mercari&#39; (Japan version) prior to version 3.52.0 allows arbitrary method execution of a Java object by a remote attacker via a Man-In-The-Middle attack by using Java Reflection API of JavaScript code on WebView.</p> https://cve.radiocsirt.org/vuln/ghsa-x466-xhx8-frqr gsd-2020-5604 https://cve.radiocsirt.org/vuln/gsd-2020-5604 gsd-2020-5604 https://cve.radiocsirt.org/vuln/gsd-2020-5604 jvndb-2020-000043 https://cve.radiocsirt.org/vuln/jvndb-2020-000043 <p>Android App &#34;Mercari&#34; (Japan version) provided by Mercari, Inc. contains vulnerability that an arbitrary Java method execution (CWE-749) due to inadequate restrictions on addJavascriptInterface of WebView class. Taichi Kotake of Akatsuki Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> <p>Android App &#34;Mercari&#34; (Japan version) provided by Mercari, Inc. contains vulnerability that an arbitrary Java method execution (CWE-749) due to inadequate restrictions on addJavascriptInterface of WebView class. Taichi Kotake of Akatsuki Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2020-000043