Vulnerability index

Browse CVEs

7 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Kaios CRITICAL 9.8
CVE-2023-33294

An issue was discovered in KaiOS 3.0 before 3.1. The /system/bin/tctweb_server binary exposes a local web server that responds to GET and POST reques…

No fix yet
Fix from $2,300 2023-05-22
Kaios MEDIUM 5.3
CVE-2023-33293

An issue was discovered in KaiOS 3.0 and 3.1. The binary /system/kaios/api-daemon exposes a local web server on *.localhost with subdomains for each …

No fix yet
Fix from $1,600 2023-05-22
Kaios MEDIUM 5.3
CVE-2023-27108

An issue was discovered in KaiOS 3.0. The pre-installed Communications application exposes a Web Activity that returns the user's call log without or…

No fix yet
Fix from $1,600 2023-05-01
Kaios MEDIUM 6.1
CVE-2019-14757

An issue was discovered in KaiOS 2.5 and 2.5.1. The pre-installed Contacts application is vulnerable to HTML and JavaScript injection attacks. An att…

Mitigation only
Fix from $1,600 2020-09-14
Kaios MEDIUM 6.1
CVE-2019-14758

An issue was discovered in KaiOS 2.5 and 2.5.1. The pre-installed File Manager application is vulnerable to HTML and JavaScript injection attacks. An…

Mitigation only
Fix from $1,600 2020-09-14
Kaios MEDIUM 6.1
CVE-2019-14756

An issue was discovered in KaiOS 1.0, 2.5, and 2.5.12.5. The pre-installed Email application is vulnerable to HTML and JavaScript injection attacks. …

No fix yet
Fix from $1,600 2020-09-14
Kaios MEDIUM 6.5
CVE-2019-7386

A Denial of Service issue has been discovered in the Gecko component of KaiOS 2.5 10.05 (platform 48.0.a2) on Nokia 8810 4G devices. When a crafted w…

No fix yet
Fix from $1,600 2019-03-21