rakuten kayıtları
rakuten üreticisine ait 15 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-287 Improper Authentication1
- CWE-306 Missing Authentication for Critical Function1
- CWE-311 Missing Encryption of Sensitive Data1
- CWE-327 Use of a Broken or Risky Cryptographic Algorithm1
- CWE-426 Untrusted Search Path1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
15 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2022-29525İstismar yok | Rakuten Casa version AP_F_V1_4_1 or AP_F_V2_0_0 uses a hard-coded credential which may allow a remote unauthenticated attacker to log in witrakuten · casa · CWE-798 | Kritik9,8 | — | %1,5 | 13 Haz 2022 |
39İzleyin | CVE-2025-13476İstismar yok | Rakuten Viber uses broken or risky cryptographic Algorithmrakuten · viber · CWE-327 | Kritik9,8 | — | %0,3 | 5 Mar 2026 |
36İzleyin | CVE-2019-12569İstismar yok | A vulnerability in Viber before 10.7.0 for Desktop (Windows) could allow an attacker to execute arbitrary commands on a targeted system.rakuten · viber · CWE-426 | Yüksek7,8 | — | %15,0 | 2 Haz 2019 |
35İzleyin | CVE-2019-18800İstismar yok | Viber through 11.7.0.5 allows a remote attacker who can capture a victim's internet traffic to steal their Viber account, because not all Virakuten · viber · CWE-311 | Yüksek8,8 | — | %1,6 | 6 Kas 2019 |
35İzleyin | CVE-2024-48895İstismar yok | Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Rakuten Turbo 5G firmware versionrakuten mobile, inc. · rakuten turbo 5g · CWE-78 | Yüksek8,8 | — | %1,0 | 20 Kas 2024 |
31İzleyin | CVE-2020-14049İstismar yok | Viber for Windows up to 13.2.0.39 does not properly quote its custom URI handler.rakuten · viber · CWE-88 | Yüksek7,5 | — | %2,2 | 22 Haz 2020 |
30İzleyin | CVE-2022-26834İstismar yok | Improper access control vulnerability in Rakuten Casa version AP_F_V1_4_1 or AP_F_V2_0_0 allows a remote attacker to obtain the information rakuten · casa | Yüksek7,5 | — | %1,5 | 13 Haz 2022 |
29İzleyin | CVE-2022-28704İstismar yok | Improper access control vulnerability in Rakuten Casa version AP_F_V1_4_1 or AP_F_V2_0_0 allows a remote attacker to log in with the root prrakuten · casa | Yüksek7,2 | — | %2,7 | 13 Haz 2022 |
27İzleyin | CVE-2019-6024İstismar yok | Rakuma App for Android version 7.15.0 and earlier, and for iOS version 7.16.4 and earlier allows an attacker to bypass authentication and obrakuten · rakuma · CWE-522 | Orta6,5 | — | %2,0 | 26 Ara 2019 |
25İzleyin | CVE-2025-55996Kavram kanıtı | Viber Desktop 25.6.0 is vulnerable to HTML Injection via the text parameter of the message compose/forward interfacerakuten · viber · CWE-79 | Orta6,3 | — | %0,1 | 12 Eyl 2025 |
24İzleyin | CVE-2024-41918İstismar yok | 'Rakuten Ichiba App' for Android 12.4.0 and earlier and 'Rakuten Ichiba App' for iOS 11.7.0 and earlier are vulnerable to improper authorizarakuten · ichiba · CWE-862 | Orta6,1 | — | %0,3 | 28 Ağu 2024 |
22İzleyin | CVE-2018-3987İstismar yok | An exploitable information disclosure vulnerability exists in the 'Secret Chats' functionality of Rakuten Viber on Android 9.3.0.6.rakuten · viber · CWE-200 | Orta5,5 | — | %0,3 | 12 Şub 2020 |
21İzleyin | CVE-2024-52033İstismar yok | Exposure of sensitive system information to an unauthorized control sphere issue exists in Rakuten Turbo 5G firmware version V1.3.18 and earrakuten mobile, inc. · rakuten turbo 5g · CWE-497 | Orta5,3 | — | %0,4 | 20 Kas 2024 |
21İzleyin | CVE-2024-47865İstismar yok | Missing authentication for critical function vulnerability exists in Rakuten Turbo 5G firmware version V1.3.18 and earlier.rakuten mobile, inc. · rakuten turbo 5g · CWE-306 | Orta5,3 | — | %0,4 | 20 Kas 2024 |
21İzleyin | CVE-2023-40282İstismar yok | Improper authentication vulnerability in Rakuten WiFi Pocket all versions allows a network-adjacent attacker to log in to the product's Manarakuten · wifi pocket firmware · CWE-287 | Orta5,4 | — | %0,3 | 23 Ağu 2023 |
- CVE-2022-2952539İzleyin
Rakuten Casa version AP_F_V1_4_1 or AP_F_V2_0_0 uses a hard-coded credential which may allow a remote unauthenticated attacker to log in wit
KritikCVSS 9,8İstismar yokEPSS %1rakuten · casa13 Haz 2022
- CVE-2025-1347639İzleyin
Rakuten Viber uses broken or risky cryptographic Algorithm
KritikCVSS 9,8İstismar yokEPSS %0rakuten · viber5 Mar 2026
- CVE-2019-1256936İzleyin
A vulnerability in Viber before 10.7.0 for Desktop (Windows) could allow an attacker to execute arbitrary commands on a targeted system.
YüksekCVSS 7,8İstismar yokEPSS %15rakuten · viber2 Haz 2019
- CVE-2019-1880035İzleyin
Viber through 11.7.0.5 allows a remote attacker who can capture a victim's internet traffic to steal their Viber account, because not all Vi
YüksekCVSS 8,8İstismar yokEPSS %1rakuten · viber6 Kas 2019
- CVE-2024-4889535İzleyin
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Rakuten Turbo 5G firmware version
YüksekCVSS 8,8İstismar yokEPSS %1rakuten mobile, inc. · rakuten turbo 5g20 Kas 2024
- CVE-2020-1404931İzleyin
Viber for Windows up to 13.2.0.39 does not properly quote its custom URI handler.
YüksekCVSS 7,5İstismar yokEPSS %2rakuten · viber22 Haz 2020
- CVE-2022-2683430İzleyin
Improper access control vulnerability in Rakuten Casa version AP_F_V1_4_1 or AP_F_V2_0_0 allows a remote attacker to obtain the information
YüksekCVSS 7,5İstismar yokEPSS %1rakuten · casa13 Haz 2022
- CVE-2022-2870429İzleyin
Improper access control vulnerability in Rakuten Casa version AP_F_V1_4_1 or AP_F_V2_0_0 allows a remote attacker to log in with the root pr
YüksekCVSS 7,2İstismar yokEPSS %2rakuten · casa13 Haz 2022
- CVE-2019-602427İzleyin
Rakuma App for Android version 7.15.0 and earlier, and for iOS version 7.16.4 and earlier allows an attacker to bypass authentication and ob
OrtaCVSS 6,5İstismar yokEPSS %2rakuten · rakuma26 Ara 2019
- CVE-2025-5599625İzleyin
Viber Desktop 25.6.0 is vulnerable to HTML Injection via the text parameter of the message compose/forward interface
OrtaCVSS 6,3Kavram kanıtıEPSS %0rakuten · viber12 Eyl 2025
- CVE-2024-4191824İzleyin
'Rakuten Ichiba App' for Android 12.4.0 and earlier and 'Rakuten Ichiba App' for iOS 11.7.0 and earlier are vulnerable to improper authoriza
OrtaCVSS 6,1İstismar yokEPSS %0rakuten · ichiba28 Ağu 2024
- CVE-2018-398722İzleyin
An exploitable information disclosure vulnerability exists in the 'Secret Chats' functionality of Rakuten Viber on Android 9.3.0.6.
OrtaCVSS 5,5İstismar yokEPSS %0rakuten · viber12 Şub 2020
- CVE-2024-5203321İzleyin
Exposure of sensitive system information to an unauthorized control sphere issue exists in Rakuten Turbo 5G firmware version V1.3.18 and ear
OrtaCVSS 5,3İstismar yokEPSS %0rakuten mobile, inc. · rakuten turbo 5g20 Kas 2024
- CVE-2024-4786521İzleyin
Missing authentication for critical function vulnerability exists in Rakuten Turbo 5G firmware version V1.3.18 and earlier.
OrtaCVSS 5,3İstismar yokEPSS %0rakuten mobile, inc. · rakuten turbo 5g20 Kas 2024
- CVE-2023-4028221İzleyin
Improper authentication vulnerability in Rakuten WiFi Pocket all versions allows a network-adjacent attacker to log in to the product's Mana
OrtaCVSS 5,4İstismar yokEPSS %0rakuten · wifi pocket firmware23 Ağu 2023