Vulnerabilities > Newphoria Corporation
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2015-11-20 | CVE-2015-7772 | Cross-site Scripting vulnerability in Newphoria Corporation Applican Cross-site scripting (XSS) vulnerability in the runtime engine in the Newphoria applican framework before 1.13.0 for Android and iOS allows remote attackers to inject arbitrary web script or HTML via a crafted URL that triggers WebView anchor attachment in an applican application, a different vulnerability than CVE-2015-7771. | 4.3 |
| 2015-11-20 | CVE-2015-7771 | Cross-site Scripting vulnerability in Newphoria Corporation Applican Cross-site scripting (XSS) vulnerability in the runtime engine in the Newphoria applican framework before 1.13.0 for Android and iOS allows remote attackers to inject arbitrary web script or HTML via a crafted SSID that is encountered by an applican application, a different vulnerability than CVE-2015-7772. | 4.3 |
| 2015-09-20 | CVE-2015-5637 | Permissions, Privileges, and Access Controls vulnerability in Newphoria Corporation 1.1 The Newphoria Photon application before 1.2 for Android allows attackers to bypass a URL whitelist protection mechanism and obtain API access via unspecified vectors. | 6.8 |
| 2015-09-20 | CVE-2015-5636 | Permissions, Privileges, and Access Controls vulnerability in Newphoria Corporation Reversi The Newphoria Reversi application before 1.0.3 for Android and before 1.2 for iOS allows attackers to bypass a URL whitelist protection mechanism and obtain API access via unspecified vectors. | 6.8 |
| 2015-09-20 | CVE-2015-5635 | Permissions, Privileges, and Access Controls vulnerability in Newphoria Corporation Koritore The Newphoria Koritore application before 1.1 for Android and before 1.1 for iOS allows attackers to bypass a URL whitelist protection mechanism and obtain API access via unspecified vectors. | 6.8 |
| 2015-09-20 | CVE-2015-5634 | Permissions, Privileges, and Access Controls vulnerability in Newphoria Corporation Megaphone Music The Newphoria MEGAPHONE MUSIC application before 1.1 for Android and before 1.1 for iOS allows attackers to bypass a URL whitelist protection mechanism and obtain API access via unspecified vectors. | 6.8 |
| 2015-09-20 | CVE-2015-5633 | Permissions, Privileges, and Access Controls vulnerability in Newphoria Corporation Auction Camera The Newphoria Auction Camera application for iOS and before 1.2 for Android allows attackers to bypass a URL whitelist protection mechanism and obtain API access via unspecified vectors. | 6.8 |
| 2015-09-20 | CVE-2015-5632 | Permissions, Privileges, and Access Controls vulnerability in Newphoria Corporation Applican The runtime engine in the Newphoria applican framework before 1.12.3 for Android and before 1.12.2 for iOS allows attackers to bypass a whitelist.xml URL whitelist protection mechanism and obtain API access via unspecified vectors. | 6.8 |