Skip to content
Noroxi

linecorp records

93 published records for vendor linecorp.

Researcher profile

Entered KEV
1 · 1.1%
Weaponized
1 · 1.1%
Pre-auth RCE
3
With a fix record
7.5%
Median publish → KEV
0 days

Records by year

  1. 17
  2. 18
  3. 19
  4. 21
  5. 22
  6. 23
  7. 24
  8. 25
  9. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

93 records
  • CVE-2023-44487
    90Now

    The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as

    HighCVSS 7.5KEVWeaponizedEPSS 100%

    siemens · simatic s7-1500 cpu 1518f-4 pn\/dp mfp firmwareOct 10, 2023

  • CVE-2023-5554
    39Monitor

    Lack of TLS certificate verification in log transmission of a financial module within LINE client for iOS prior to 13.16.0.

    CriticalCVSS 9.8No exploitEPSS 0%

    linecorp · lineOct 12, 2023

  • CVE-2019-6007
    36Monitor

    Integer overflow vulnerability in apng-drawable 1.0.0 to 1.6.0 allows an attacker to cause a denial of service (DoS) condition or execute ar

    HighCVSS 8.8No exploitEPSS 2%

    linecorp · apng-drawableSep 12, 2019

  • CVE-2024-1735
    36Monitor

    A vulnerability has been identified in armeria-saml versions less than 1.27.2, allowing the use of malicious SAML messages to bypass authent

    CriticalCVSS 9.1No exploitEPSS 1%

    linecorp · armeriaFeb 26, 2024

  • CVE-2021-38388
    35Monitor

    Central Dogma allows privilege escalation with mirroring to the internal dogma repository that has a file managing the authorization of the

    HighCVSS 8.8No exploitEPSS 1%

    linecorp · central dogmaSep 8, 2021

  • CVE-2016-4850
    33Monitor

    LINE for Windows before 4.8.3 allows man-in-the-middle attackers to execute arbitrary code.

    HighCVSS 8.1No exploitEPSS 2%

    linecorp · lineApr 20, 2017

  • CVE-2019-6010
    32Monitor

    Integer overflow vulnerability in LINE(Android) from 4.4.0 to the version before 9.15.1 allows remote attackers to cause a denial of service

    HighCVSS 7.8No exploitEPSS 2%

    linecorp · lineSep 19, 2019

  • CVE-2023-39739
    32Monitor

    The leakage of the client secret in REGINA SWEETS&BAKERY Line 13.6.1 allows attackers to obtain the channel access token and send crafted br

    HighCVSS 8.2No exploitEPSS 1%

    linecorp · regina sweets\&bakeryOct 25, 2023

  • CVE-2023-39735
    32Monitor

    The leakage of the client secret in Uomasa_Saiji_news Line 13.6.1 allows attackers to obtain the channel access token and send crafted broad

    HighCVSS 8.2No exploitEPSS 1%

    linecorp · uomasa saiji newOct 25, 2023

  • CVE-2023-39736
    32Monitor

    The leakage of the client secret in Fukunaga_memberscard Line 13.6.1 allows attackers to obtain the channel access token and send crafted br

    HighCVSS 8.2No exploitEPSS 1%

    linecorp · fukunaga memberscardOct 25, 2023

  • CVE-2023-39737
    32Monitor

    The leakage of the client secret in Matsuya Line 13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messa

    HighCVSS 8.2No exploitEPSS 1%

    linecorp · matsuyaOct 25, 2023

  • CVE-2023-39734
    32Monitor

    The leakage of the client secret in VISION MEAT WORKS TrackDiner10/10_mc Line v13.6.1 allows attackers to obtain the channel access token an

    HighCVSS 8.2No exploitEPSS 1%

    linecorp · trackdiner10\/10 mcOct 25, 2023

  • CVE-2023-43301
    32Monitor

    An issue in DARTS SHOP MAXIM mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel ac

    HighCVSS 8.2No exploitEPSS 1%

    linecorp · lineDec 7, 2023

  • CVE-2023-43302
    32Monitor

    An issue in sanTas mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token

    HighCVSS 8.2No exploitEPSS 1%

    linecorp · lineDec 7, 2023

  • CVE-2023-39740
    32Monitor

    The leakage of the client secret in Onigiriya-musubee Line 13.6.1 allows attackers to obtain the channel access token and send crafted broad

    HighCVSS 8.2No exploitEPSS 1%

    linecorp · onigiriya-musubeeOct 25, 2023

  • CVE-2023-39732
    32Monitor

    The leakage of the client secret in Tokueimaru_waiting Line 13.6.1 allows attackers to obtain the channel access token and send crafted broa

    HighCVSS 8.2No exploitEPSS 1%

    linecorp · tokueimaru waitingOct 25, 2023

  • CVE-2023-43305
    32Monitor

    An issue in studio kent mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access

    HighCVSS 8.2No exploitEPSS 1%

    linecorp · lineDec 7, 2023

  • CVE-2023-39733
    32Monitor

    The leakage of the client secret in TonTon-Tei Line v13.6.1 allows attackers to obtain the channel access token and send crafted broadcast m

    HighCVSS 8.2No exploitEPSS 1%

    linecorp · tonton-teiOct 25, 2023

  • CVE-2023-43304
    32Monitor

    An issue in PARK DANDAN mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access

    HighCVSS 8.2No exploitEPSS 1%

    linecorp · lineDec 7, 2023

  • CVE-2023-43300
    32Monitor

    An issue in urban_project mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel acces

    HighCVSS 8.2No exploitEPSS 1%

    linecorp · lineDec 7, 2023

  • CVE-2023-43303
    32Monitor

    An issue in craftbeer bar canvas mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channe

    HighCVSS 8.2No exploitEPSS 1%

    linecorp · lineDec 7, 2023

  • CVE-2023-45559
    32Monitor

    An issue in Tamaki_hamanoki Line v.13.6.1 allows attackers to send crafted notifications via leakage of the channel access token.

    HighCVSS 8.2No exploitEPSS 0%

    linecorp · lineJan 3, 2024

  • CVE-2021-43795
    31Monitor

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in com.linecorp.armeria:armeria

    HighCVSS 7.5No exploitEPSS 2%

    linecorp · armeriaDec 2, 2021

  • CVE-2018-0609
    31Monitor

    Untrusted search path vulnerability in LINE for Windows versions before 5.8.0 allows an attacker to gain privileges via a Trojan horse DLL i

    HighCVSS 7.8No exploitEPSS 1%

    linecorp · lineJun 26, 2018

  • CVE-2022-29505
    31Monitor

    Due to build misconfiguration in openssl dependency, LINE for Windows before 7.8 is vulnerable to DLL injection that could lead to privilege

    HighCVSS 7.8No exploitEPSS 0%

    linecorp · lineApr 27, 2022