Refine your search
2 vulnerabilities found for GREE by GREE, Inc.
jvndb-2013-000010
Vulnerability from jvndb
Published
2013-02-14 14:15
Modified
2013-02-14 14:15
Summary
GREE for Android vulnerable to directory traversal
Details
GREE for Android contains a directory traversal vulnerability.
GREE for Android contains an issue in handling URL inputs, which may result in a directory traversal vulnerability.
Takeshi Terada of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA.
JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.
References
Impacted products
| Vendor | Product | |
|---|---|---|
{
"@rdf:about": "https://jvndb.jvn.jp/en/contents/2013/JVNDB-2013-000010.html",
"dc:date": "2013-02-14T14:15+09:00",
"dcterms:issued": "2013-02-14T14:15+09:00",
"dcterms:modified": "2013-02-14T14:15+09:00",
"description": "GREE for Android contains a directory traversal vulnerability.\r\n\r\nGREE for Android contains an issue in handling URL inputs, which may result in a directory traversal vulnerability.\r\n\r\nTakeshi Terada of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
"link": "https://jvndb.jvn.jp/en/contents/2013/JVNDB-2013-000010.html",
"sec:cpe": {
"#text": "cpe:/a:gree:gree",
"@product": "GREE",
"@vendor": "GREE, Inc.",
"@version": "2.2"
},
"sec:cvss": {
"@score": "2.6",
"@severity": "Low",
"@type": "Base",
"@vector": "AV:N/AC:H/Au:N/C:P/I:N/A:N",
"@version": "2.0"
},
"sec:identifier": "JVNDB-2013-000010",
"sec:references": [
{
"#text": "https://jvn.jp/en/jp/JVN78601526/index.html",
"@id": "JVN#78601526",
"@source": "JVN"
},
{
"#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0704",
"@id": "CVE-2013-0704",
"@source": "CVE"
},
{
"#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-0704",
"@id": "CVE-2013-0704",
"@source": "NVD"
},
{
"#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
"@id": "CWE-22",
"@title": "Path Traversal(CWE-22)"
}
],
"title": "GREE for Android vulnerable to directory traversal"
}
jvndb-2012-000077
Vulnerability from jvndb
Published
2012-08-17 15:52
Modified
2012-08-17 15:52
Summary
Multiple GREE Android applications vulnerable in the WebView class
Details
Multiple Android applications provided by GREE contain a vulnerability in the WebView class.
Multiple Android applications that use the SDK for HTML-based applications provided by GREE contain a vulnerability in the WebView class.
Takeshi Terada of Mitsui Bussan Secure Directions, Inc., Katsuhiko Sato of Japan Smartphone Security Association(JSSEC) reported this vulnerability to IPA.
JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.
References
Impacted products
{
"@rdf:about": "https://jvndb.jvn.jp/en/contents/2012/JVNDB-2012-000077.html",
"dc:date": "2012-08-17T15:52+09:00",
"dcterms:issued": "2012-08-17T15:52+09:00",
"dcterms:modified": "2012-08-17T15:52+09:00",
"description": "Multiple Android applications provided by GREE contain a vulnerability in the WebView class.\r\n\r\nMultiple Android applications that use the SDK for HTML-based applications provided by GREE contain a vulnerability in the WebView class.\r\n\r\nTakeshi Terada of Mitsui Bussan Secure Directions, Inc., Katsuhiko Sato of Japan Smartphone Security Association(JSSEC) reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
"link": "https://jvndb.jvn.jp/en/contents/2012/JVNDB-2012-000077.html",
"sec:cpe": [
{
"#text": "cpe:/a:gree:gree",
"@product": "GREE",
"@vendor": "GREE, Inc.",
"@version": "2.2"
},
{
"#text": "cpe:/a:gree:haconiwa",
"@product": "haconiwa",
"@vendor": "GREE, Inc.",
"@version": "2.2"
},
{
"#text": "cpe:/a:gree:kaizokuoukoku_columbus",
"@product": "Kaizokuoukoku Columbus",
"@vendor": "GREE, Inc.",
"@version": "2.2"
},
{
"#text": "cpe:/a:gree:monpura",
"@product": "Monpura",
"@vendor": "GREE, Inc.",
"@version": "2.2"
},
{
"#text": "cpe:/a:gree:seisen_cerberus",
"@product": "Seisen Cerberus",
"@vendor": "GREE, Inc.",
"@version": "2.2"
},
{
"#text": "cpe:/a:gree:tanken_dorirando",
"@product": "Tanken Dorirando",
"@vendor": "GREE, Inc.",
"@version": "2.2"
},
{
"#text": "cpe:/a:gree:tsurisuta",
"@product": "Tsurisuta",
"@vendor": "GREE, Inc.",
"@version": "2.2"
},
{
"#text": "cpe:/a:kddi_%26_gree:gree_market",
"@product": "GREE Market",
"@vendor": "KDDI and GREE",
"@version": "2.2"
}
],
"sec:cvss": {
"@score": "2.6",
"@severity": "Low",
"@type": "Base",
"@vector": "AV:N/AC:H/Au:N/C:P/I:N/A:N",
"@version": "2.0"
},
"sec:identifier": "JVNDB-2012-000077",
"sec:references": [
{
"#text": "http://jvn.jp/en/jp/JVN99192898/index.html",
"@id": "JVN#99192898",
"@source": "JVN"
},
{
"#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4006",
"@id": "CVE-2012-4006",
"@source": "CVE"
},
{
"#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-4006",
"@id": "CVE-2012-4006",
"@source": "NVD"
},
{
"#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
"@id": "CWE-Other",
"@title": "No Mapping(CWE-Other)"
}
],
"title": "Multiple GREE Android applications vulnerable in the WebView class"
}