Vulnerabilities > Linecorp
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-10-25 | CVE-2023-39732 | Unspecified vulnerability in Linecorp Tokueimaru Waiting 13.6.1 The leakage of the client secret in Tokueimaru_waiting Line 13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages. | 8.2 |
| 2023-10-25 | CVE-2023-39733 | Unspecified vulnerability in Linecorp Tonton-Tei 13.6.1 The leakage of the client secret in TonTon-Tei Line v13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages. | 8.2 |
| 2023-10-25 | CVE-2023-39734 | Unspecified vulnerability in Linecorp Trackdiner10/10 MC 13.6.1 The leakage of the client secret in VISION MEAT WORKS TrackDiner10/10_mc Line v13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages. | 8.2 |
| 2023-10-25 | CVE-2023-39735 | Unspecified vulnerability in Linecorp Uomasa Saiji NEW 13.6.1 The leakage of the client secret in Uomasa_Saiji_news Line 13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages. | 8.2 |
| 2023-10-25 | CVE-2023-39736 | Unspecified vulnerability in Linecorp Fukunaga Memberscard 13.6.1 The leakage of the client secret in Fukunaga_memberscard Line 13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages. | 8.2 |
| 2023-10-25 | CVE-2023-39737 | Unspecified vulnerability in Linecorp Matsuya 13.6.1 The leakage of the client secret in Matsuya Line 13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages. | 8.2 |
| 2023-10-25 | CVE-2023-39739 | Unspecified vulnerability in Linecorp Regina Sweets&Bakery 13.6.1 The leakage of the client secret in REGINA SWEETS&BAKERY Line 13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages. | 8.2 |
| 2023-10-25 | CVE-2023-39740 | Unspecified vulnerability in Linecorp Onigiriya-Musubee 13.6.1 The leakage of the client secret in Onigiriya-musubee Line 13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages. | 8.2 |
| 2023-10-12 | CVE-2023-5554 | Improper Certificate Validation vulnerability in Linecorp Line Lack of TLS certificate verification in log transmission of a financial module within LINE Client for iOS prior to 13.16.0. | 9.8 |
| 2023-10-10 | CVE-2023-44487 | Resource Exhaustion vulnerability in multiple products The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. | 7.5 |