← Back

Newphoria Corporation

newphoria_corporation

8 CVEs • 6 products

Products (6)

Click to collapse
Toggle
Applican
applican
Auction Camera
auction_camera
Koritore
koritore
Reversi
reversi
1.1

CVEs (8)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Newphoria Corporation
1Applican
May 6, 2026
Nov 20, 2015
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in the runtime engine in the Newphoria applican framework before 1.13.0 for Android and iOS allows remote attackers to inject arbitrary web script or HTML via a crafted URL that t...Show more
Cross-site scripting (XSS) vulnerability in the runtime engine in the Newphoria applican framework before 1.13.0 for Android and iOS allows remote attackers to inject arbitrary web script or HTML via a crafted URL that triggers WebView anchor attachment in an applican application, a different vulnerability than CVE-2015-7771.Show less
1Newphoria Corporation
1Applican
May 6, 2026
Nov 20, 2015
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in the runtime engine in the Newphoria applican framework before 1.13.0 for Android and iOS allows remote attackers to inject arbitrary web script or HTML via a crafted SSID that...Show more
Cross-site scripting (XSS) vulnerability in the runtime engine in the Newphoria applican framework before 1.13.0 for Android and iOS allows remote attackers to inject arbitrary web script or HTML via a crafted SSID that is encountered by an applican application, a different vulnerability than CVE-2015-7772.Show less
1Newphoria Corporation
11.1
May 6, 2026
Sep 20, 2015
N/A· v4
N/A· v3
6.8 MEDIUM· v2
The Newphoria Photon application before 1.2 for Android allows attackers to bypass a URL whitelist protection mechanism and obtain API access via unspecified vectors.
1Newphoria Corporation
1Reversi
May 6, 2026
Sep 20, 2015
N/A· v4
N/A· v3
6.8 MEDIUM· v2
The Newphoria Reversi application before 1.0.3 for Android and before 1.2 for iOS allows attackers to bypass a URL whitelist protection mechanism and obtain API access via unspecified vectors.
1Newphoria Corporation
1Koritore
May 6, 2026
Sep 20, 2015
N/A· v4
N/A· v3
6.8 MEDIUM· v2
The Newphoria Koritore application before 1.1 for Android and before 1.1 for iOS allows attackers to bypass a URL whitelist protection mechanism and obtain API access via unspecified vectors.
1Newphoria Corporation
1Megaphone Music
May 6, 2026
Sep 20, 2015
N/A· v4
N/A· v3
6.8 MEDIUM· v2
The Newphoria MEGAPHONE MUSIC application before 1.1 for Android and before 1.1 for iOS allows attackers to bypass a URL whitelist protection mechanism and obtain API access via unspecified vectors.
1Newphoria Corporation
1Auction Camera
May 6, 2026
Sep 20, 2015
N/A· v4
N/A· v3
6.8 MEDIUM· v2
The Newphoria Auction Camera application for iOS and before 1.2 for Android allows attackers to bypass a URL whitelist protection mechanism and obtain API access via unspecified vectors.
1Newphoria Corporation
1Applican
May 6, 2026
Sep 20, 2015
N/A· v4
N/A· v3
6.8 MEDIUM· v2
The runtime engine in the Newphoria applican framework before 1.12.3 for Android and before 1.12.2 for iOS allows attackers to bypass a whitelist.xml URL whitelist protection mechanism and obtain API access via unspecifi...Show more
The runtime engine in the Newphoria applican framework before 1.12.3 for Android and before 1.12.2 for iOS allows attackers to bypass a whitelist.xml URL whitelist protection mechanism and obtain API access via unspecified vectors.Show less