airdroid records
8 published records for vendor airdroid.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor2
- CWE-287 Improper Authentication2
- CWE-264 Permissions, Privileges, and Access Controls1
- CWE-310 Cryptographic Issues1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
8 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
34Monitor | CVE-2019-9599Proof of concept | The AirDroid application through 4.2.1.6 for Android allows remote attackers to cause a denial of service (service crash) via many simultaneairdroid · airdroid | High7.5 | — | 13.3% | Mar 6, 2019 |
30Monitor | CVE-2012-3885No exploit | The default configuration of AirDroid 1.0.4 beta uses a four-character alphanumeric password, which makes it easier for remote attackers to airdroid · airdroid · CWE-287 | High7.5 | — | 1.3% | Jul 26, 2012 |
20Monitor | CVE-2012-3888No exploit | The login implementation in AirDroid 1.0.4 beta allows remote attackers to bypass a multiple-login protection mechanism by modifying a pass airdroid · airdroid · CWE-264 | Medium5.0 | — | 1.4% | Jul 26, 2012 |
20Monitor | CVE-2012-3884No exploit | AirDroid 1.0.4 beta implements authentication through direct transmission of a password hash over HTTP, which makes it easier for remote attairdroid · airdroid · CWE-287 | Medium5.0 | — | 1.4% | Jul 26, 2012 |
20Monitor | CVE-2012-3887No exploit | AirDroid before 1.0.7 beta uses a cleartext base64 format for data transfer that is documented as an "Encrypted Transmission" feature, whichairdroid · airdroid · CWE-310 | Medium5.0 | — | 1.3% | Jul 26, 2012 |
20Monitor | CVE-2012-3886No exploit | AirDroid 1.0.4 beta uses the MD5 algorithm for values in the checklogin key parameter and 7bb cookie, which makes it easier for remote attacairdroid · airdroid · CWE-200 | Medium5.0 | — | 1.3% | Jul 26, 2012 |
17Monitor | CVE-2013-0134No exploit | Cross-site scripting (XSS) vulnerability in the web interface in AirDroid allows remote attackers to inject arbitrary web script or HTML viaairdroid · airdroid · CWE-79 | Medium4.3 | — | 1.0% | Apr 8, 2013 |
17Monitor | CVE-2015-5661No exploit | The SAND STUDIO AirDroid application 1.1.0 and earlier for Android mishandles implicit intents, which allows attackers to obtain sensitive iairdroid · airdroid · CWE-200 | Medium4.3 | — | 0.9% | Oct 18, 2015 |
- CVE-2019-959934Monitor
The AirDroid application through 4.2.1.6 for Android allows remote attackers to cause a denial of service (service crash) via many simultane
HighCVSS 7.5Proof of conceptEPSS 13%airdroid · airdroidMar 6, 2019
- CVE-2012-388530Monitor
The default configuration of AirDroid 1.0.4 beta uses a four-character alphanumeric password, which makes it easier for remote attackers to
HighCVSS 7.5No exploitEPSS 1%airdroid · airdroidJul 26, 2012
- CVE-2012-388820Monitor
The login implementation in AirDroid 1.0.4 beta allows remote attackers to bypass a multiple-login protection mechanism by modifying a pass
MediumCVSS 5.0No exploitEPSS 1%airdroid · airdroidJul 26, 2012
- CVE-2012-388420Monitor
AirDroid 1.0.4 beta implements authentication through direct transmission of a password hash over HTTP, which makes it easier for remote att
MediumCVSS 5.0No exploitEPSS 1%airdroid · airdroidJul 26, 2012
- CVE-2012-388720Monitor
AirDroid before 1.0.7 beta uses a cleartext base64 format for data transfer that is documented as an "Encrypted Transmission" feature, which
MediumCVSS 5.0No exploitEPSS 1%airdroid · airdroidJul 26, 2012
- CVE-2012-388620Monitor
AirDroid 1.0.4 beta uses the MD5 algorithm for values in the checklogin key parameter and 7bb cookie, which makes it easier for remote attac
MediumCVSS 5.0No exploitEPSS 1%airdroid · airdroidJul 26, 2012
- CVE-2013-013417Monitor
Cross-site scripting (XSS) vulnerability in the web interface in AirDroid allows remote attackers to inject arbitrary web script or HTML via
MediumCVSS 4.3No exploitEPSS 1%airdroid · airdroidApr 8, 2013
- CVE-2015-566117Monitor
The SAND STUDIO AirDroid application 1.1.0 and earlier for Android mishandles implicit intents, which allows attackers to obtain sensitive i
MediumCVSS 4.3No exploitEPSS 1%airdroid · airdroidOct 18, 2015