Vulnerabilities (CVE)

Filtered by CWE-172
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-3777 1 Restforce 1 Restforce 2019-10-09 7.5 HIGH 9.8 CRITICAL
Insufficient URI encoding in restforce before 3.0.0 allows attacker to inject arbitrary parameters into Salesforce API requests.
CVE-2016-6691 1 Google 1 Android 2016-12-06 7.5 HIGH 9.8 CRITICAL
service/jni/com_android_server_wifi_Gbk2Utf.cpp in the Qualcomm Wi-Fi gbk2utf module in Android before 2016-10-05 allows remote attackers to cause a denial of service (framework crash) or possibly have unspecified other impact via an access point that has a malformed SSID with GBK encoding, aka Qualcomm internal bug CR 978452.