CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 25/10/2023 |
| CVE-2023-39734 | 高危8.2 | The leakage of the client secret in VISION MEAT WORKS TrackDiner10/10_mc Line v13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages. | 25/10/2023 |
| CVE-2023-39733 | 高危8.2 | The leakage of the client secret in TonTon-Tei Line v13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages. | 25/10/2023 |
| CVE-2023-39732 | 高危8.2 | The leakage of the client secret in Tokueimaru_waiting Line 13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages. | 25/10/2023 |
| CVE-2023-5554 | 严重9.8 | Lack of TLS certificate verification in log transmission of a financial module within LINE client for iOS prior to 13.16.0. | 12/10/2023 |
| CVE-2023-44487KEV | 高危7.5 | The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. | 10/10/2023 |
| CVE-2023-43297 | 中危5.4 | An issue in animal-art-lab v13.6.1 allows attackers to send crafted notifications via leakage of the channel access token. | 02/10/2023 |
| CVE-2023-38493 | 高危7.5 | Armeria is a microservice framework Spring supports Matrix variables. When Spring integration is used, Armeria calls Spring controllers via `TomcatService` or `JettyService` with the path that may contain matrix variables. Prior to version 1.24.3, the Armeria decorators might not invoked because of the matrix variables | 25/07/2023 |
| CVE-2022-41568 | 高危7.5 | LINE client for iOS before 12.17.0 might be crashed by sharing an invalid shared key of e2ee in group chat. | 29/11/2022 |
| CVE-2022-29505 | 高危7.8 | Due to build misconfiguration in openssl dependency, LINE for Windows before 7.8 is vulnerable to DLL injection that could lead to privilege escalation. | 27/04/2022 |
| CVE-2022-22820 | 中危5.5 | Due to the lack of media file checks before rendering, it was possible for an attacker to cause abnormal CPU consumption for message recipient by sending specially crafted gif image in LINE for Windows before 7.4. | 20/01/2022 |
| CVE-2021-43795 | 高危7.5 | Armeria is an open source microservice framework. In affected versions an attacker can access an Armeria server's local file system beyond its restricted directory by sending an HTTP request whose path contains `%2F` (encoded `/`), such as `/files/..%2Fsecrets.txt`, bypassing Armeria's path validation logic. Armeria 1. | 02/12/2021 |
| CVE-2021-41011 | 高危7.5 | LINE client for iOS before 11.15.0 might expose authentication information for a certain service to external entities under certain conditions. This is usually impossible, but in combination with a server-side bug, attackers could get this information. | 22/09/2021 |
| CVE-2021-38388 | 高危8.8 | Central Dogma allows privilege escalation with mirroring to the internal dogma repository that has a file managing the authorization of the project. | 08/09/2021 |
| CVE-2021-36216 | 高危7.8 | LINE for Windows 6.2.1.2289 and before allows arbitrary code execution via malicious DLL injection. | 08/09/2021 |
| CVE-2021-36215 | 中危5.3 | LINE client for iOS 10.21.3 and before allows address bar spoofing due to inappropriate address handling. | 08/09/2021 |
| CVE-2021-36214 | 中危6.1 | LINE client for iOS before 10.16.3 allows cross site script with specific header in WebView. | 13/07/2021 |