Approved changes feed: RSS · Atom
cpe:2.3:a:adobe:phonegap:2.7.0:rc1:*:*:*:*:*:*
part: a version: 2.7.0 update: rc1
| Vendor | Adobe (fb293c1b-cab3-5565-9184-186e4ece530b) |
|---|---|
| Product | Phonegap (28694388-5412-5256-a1b8-7549f7247dad) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2014-1887 |
not_vulnerable | 2026-06-08 05:05:26.686206 |
Details available
The DrinkedIn BarFinder application for Android, when Adobe PhoneGap 2.9.0 or earlier is used, allows remote attackers to execute arbitrary JavaScript code, and consequently obtain sensitive fine-geolocation information, by leveraging control over one of a number of adult sites, as demonstrated by (1) freelifetimecheating.com and (2) www.babesroulette.com.
Published: 2014-03-03T02:00:00.000Z
Updated: 2024-08-06T09:58:16.013Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-1886 |
not_vulnerable | 2026-06-08 05:05:26.682235 |
Details available
The Edinburgh by Bus application for Android, when Adobe PhoneGap 2.9.0 or earlier is used, allows remote attackers to execute arbitrary JavaScript code, and consequently access external-storage resources, by leveraging control over one of a number of "obscure Eastern European dating sites."
Published: 2014-03-03T02:00:00.000Z
Updated: 2024-08-06T09:58:14.487Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-1885 |
not_vulnerable | 2026-06-08 05:05:26.677780 |
Details available
The ForzeArmate application for Android, when Adobe PhoneGap 2.9.0 or earlier is used, allows remote attackers to execute arbitrary JavaScript code, and consequently obtain write access to external-storage resources, by leveraging control over any Google syndication advertising domain.
Published: 2014-03-03T02:00:00.000Z
Updated: 2024-08-06T09:58:16.277Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-1884 |
vulnerable | 2026-06-08 05:05:26.674370 |
Details available
Apache Cordova 3.3.0 and earlier and Adobe PhoneGap 2.9.0 and earlier on Windows Phone 7 and 8 do not properly restrict navigation events, which allows remote attackers to bypass intended device-resource restrictions via content that is accessed (1) in an IFRAME element or (2) with the XMLHttpRequest method by a crafted application.
Published: 2014-03-03T02:00:00.000Z
Updated: 2024-08-06T09:58:14.457Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-1882 |
vulnerable | 2026-06-08 05:05:26.665731 |
Details available
Apache Cordova 3.3.0 and earlier and Adobe PhoneGap 2.9.0 and earlier allow remote attackers to bypass intended device-resource restrictions of an event-based bridge via a crafted library clone that leverages IFRAME script execution and directly accesses bridge JavaScript objects, as demonstrated by certain cordova.require calls.
Published: 2014-03-03T02:00:00.000Z
Updated: 2024-08-06T09:58:14.474Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-1881 |
vulnerable | 2026-06-08 05:05:26.662713 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-6637 |
vulnerable | 2026-06-08 05:03:01.359850 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.