Vulnerabilities > Linecorp

DATE CVE VULNERABILITY TITLE RISK
2019-12-06 CVE-2019-16771 Injection vulnerability in Linecorp Armeria
Versions of Armeria 0.85.0 through and including 0.96.0 are vulnerable to HTTP response splitting, which allows remote attackers to inject arbitrary HTTP headers via CRLF sequences when unsanitized data is used to populate the headers of an HTTP response.
network
low complexity
linecorp CWE-74
6.5
2019-09-19 CVE-2019-6010 Integer Overflow or Wraparound vulnerability in Linecorp Line
Integer overflow vulnerability in LINE(Android) from 4.4.0 to the version before 9.15.1 allows remote attackers to cause a denial of service (DoS) condition or execute arbitrary code via a specially crafted image.
local
low complexity
linecorp CWE-190
7.8
2019-09-12 CVE-2019-6007 Integer Overflow or Wraparound vulnerability in Linecorp Apng-Drawable
Integer overflow vulnerability in apng-drawable 1.0.0 to 1.6.0 allows an attacker to cause a denial of service (DoS) condition or execute arbitrary code via unspecified vectors.
network
low complexity
linecorp CWE-190
8.8
2018-09-07 CVE-2018-0650 Improper Certificate Validation vulnerability in Linecorp Line Music 3.1.0
The LINE MUSIC for Android version 3.1.0 to versions prior to 3.6.5 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
network
high complexity
linecorp CWE-295
7.4
2018-08-16 CVE-2018-13446 Improper Authentication vulnerability in Linecorp Line 8.8.1
An issue was discovered in the LINE jp.naver.line application 8.8.1 for Android.
local
high complexity
linecorp CWE-287
7.0
2018-08-16 CVE-2018-13435 Improper Authentication vulnerability in Linecorp Line 8.8.0
An issue was discovered in the LINE jp.naver.line application 8.8.0 for iOS.
local
high complexity
linecorp CWE-287
7.0
2018-08-16 CVE-2018-13434 Improper Authentication vulnerability in Linecorp Line 8.8.0
An issue was discovered in the LINE jp.naver.line application 8.8.0 for iOS.
high complexity
linecorp CWE-287
6.3
2018-06-26 CVE-2018-0609 Untrusted Search Path vulnerability in Linecorp Line 4.3.0.724/4.7.0/4.8.2.1125
Untrusted search path vulnerability in LINE for Windows versions before 5.8.0 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
local
low complexity
linecorp CWE-426
7.8
2018-02-23 CVE-2018-0518 Improper Certificate Validation vulnerability in Linecorp Line 7.1.3/7.15
LINE for iOS version 7.1.3 to 7.1.5 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
network
high complexity
linecorp CWE-295
5.9
2017-04-20 CVE-2016-4850 Improper Access Control vulnerability in Linecorp Line 4.3.0.724/4.7.0/4.8.2.1125
LINE for Windows before 4.8.3 allows man-in-the-middle attackers to execute arbitrary code.
network
high complexity
linecorp CWE-284
8.1