https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 11:52:44 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-21786 EUVD-2026-21786 https://cve.radiocsirt.org/vuln/euvd-2026-21786 https://cve.radiocsirt.org/vuln/fkie_cve-2021-20715 <p>Improper access control vulnerability in Hot Pepper Gourmet App for Android ver.4.111.0 and earlier, and for iOS ver.4.111.0 and earlier allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App.</p> <p>Improper access control vulnerability in Hot Pepper Gourmet App for Android ver.4.111.0 and earlier, and for iOS ver.4.111.0 and earlier allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-20715 https://cve.radiocsirt.org/vuln/ghsa-h9hq-cmw2-pxgh <p>Improper access control vulnerability in Hot Pepper Gourmet App for Android ver.4.111.0 and earlier, and for iOS ver.4.111.0 and earlier allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App.</p> <p>Improper access control vulnerability in Hot Pepper Gourmet App for Android ver.4.111.0 and earlier, and for iOS ver.4.111.0 and earlier allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App.</p> https://cve.radiocsirt.org/vuln/ghsa-h9hq-cmw2-pxgh https://cve.radiocsirt.org/vuln/gsd-2021-20715 gsd-2021-20715 https://cve.radiocsirt.org/vuln/gsd-2021-20715 https://cve.radiocsirt.org/vuln/jvndb-2021-000033 <p>Hot Pepper Gourmet App provided by Recruit Co., Ltd. implements the function to access a requested URL using Custom URL Scheme. This function contains an improper access control vulnerability (CWE-284) that may allow the vulnerable App to receive an request from an arbitrary App and execute access. Ryo Sato of BroadBand Security,Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> <p>Hot Pepper Gourmet App provided by Recruit Co., Ltd. implements the function to access a requested URL using Custom URL Scheme. This function contains an improper access control vulnerability (CWE-284) that may allow the vulnerable App to receive an request from an arbitrary App and execute access. Ryo Sato of BroadBand Security,Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2021-000033