Lenovo SHAREit 3.0.18_ww for Android

CPE Details

Lenovo SHAREit 3.0.18_ww for Android
lenovo
shareit
3.0.18_ww
2016-01-27
23h07 +00:00
2016-01-27
23h07 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:lenovo:shareit:3.0.18_ww:*:*:*:*:android:*:*

Informations

Vendor

lenovo

Product

shareit

Version

3.0.18_ww

Target Software

android

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2016-1489 2016-01-26 18h00 +00:00 Lenovo SHAREit before 3.2.0 for Windows and SHAREit before 3.5.48_ww for Android transfer files in cleartext, which allows remote attackers to (1) obtain sensitive information by sniffing the network or (2) conduct man-in-the-middle (MITM) attacks via unspecified vectors.
8
High
CVE-2016-1492 2016-01-26 18h00 +00:00 The Wifi hotspot in Lenovo SHAREit before 3.5.48_ww for Android, when configured to receive files, does not require a password, which makes it easier for remote attackers to obtain access by leveraging a position within the WLAN coverage area.
6.1
Medium
CVE-2014-1939 2014-03-03 01h00 +00:00 java/android/webkit/BrowserFrame.java in Android before 4.4 uses the addJavascriptInterface API in conjunction with creating an object of the SearchBoxImpl class, which allows attackers to execute arbitrary Java code by leveraging access to the searchBoxJavaBridge_ interface at certain Android API levels.
7.5
The information presented on CVE Find originates from several carefully selected reference sources. CVE data is provided by MITRE Corporation and the National Vulnerability Database (NVD). The Known Exploited Vulnerabilities (KEV) catalog is sourced from the Cybersecurity and Infrastructure Security Agency (CISA), while EPSS scores come from FIRST.org. Additionally, data regarding software weaknesses (CWE) and common attack patterns (CAPEC) is maintained by MITRE Corporation, and information on hardware and software configurations (CPE) is provided by the NVD.