CVE-2024-45240

HIGH Year: 2024
CVSS v3 Score
7.4
High
Weakness Type
NVD-CWE-Other
View all →

Vulnerability Description

The TikTok (aka com.zhiliaoapp.musically) application before 34.5.5 for Android allows the takeover of Lynxview JavaScript interfaces via deeplink traversal (in the application's exposed WebView). (On Android 12 and later, this is only exploitable by third-party applications.)

Related Vulnerabilities

CVE-2011-0029

HIGH
CVSS:7.4(High)

Untrusted search path vulnerability in the client in Microsoft Remote Desktop Connection 5.2, 6.0, 6.1, and 7.0 allows local users to gain privileges via a Trojan horse DLL in the current working dire...

NVD-CWE-Other2011

CVE-2015-1947

HIGH
CVSS:7.4(High)

Untrusted search path vulnerability in IBM InfoSphere BigInsights 3.0, 3.0.0.1, 3.0.0.2, and 4.0, when a DB2 database is used, allows local users to gain privileges via a Trojan horse library that is ...

NVD-CWE-Other2015

CVE-2015-3272

HIGH
CVSS:7.4(High)

Open redirect vulnerability in the clean_param function in lib/moodlelib.php in Moodle through 2.6.11, 2.7.x before 2.7.9, 2.8.x before 2.8.7, and 2.9.x before 2.9.1 allows remote attackers to redirec...

NVD-CWE-Other2015

CVE-2015-7393

HIGH
CVSS:7.4(High)

dcoep in BIG-IP LTM, Analytics, APM, ASM, and Link Controller 11.2.0 through 11.6.0 and 12.0.0 before 12.0.0 HF1, BIG-IP AAM 11.4.0 through 11.6.0 and 12.0.0 before 12.0.0 HF1, BIG-IP AFM and PEM 11.3...

NVD-CWE-Other2015

CVE-2015-7397

HIGH
CVSS:7.4(High)

Multiple open redirect vulnerabilities in the Aurora starter store in IBM WebSphere Commerce 7.0 through Feature Pack 8 allow remote attackers to redirect users to arbitrary web sites and conduct phis...

NVD-CWE-Other2015

CVE-2015-7428

HIGH
CVSS:7.4(High)

Open redirect vulnerability in IBM WebSphere Portal 8.0.x before 8.0.0.1 CF20 and 8.5.x before 8.5.0.0 CF09 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attack...

NVD-CWE-Other2015