Shareit

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:ushareit:shareit:*:*:*:*:*:android:*:*

part: a version: * update: *

VendorUshareit (df0cf890-59f1-5984-84c6-0ead8a14afb0)
ProductShareit (b7fadbee-3f29-514e-b936-4d7309d90918)
Edition*
Language*
Software edition*
Target softwareandroid
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-9939 vulnerable 2026-06-08 05:14:26.626708 Details available
The SHAREit application before 4.0.36 for Android allows a remote attacker (on the same network or joining public "open" Wi-Fi hotspots created by the application when file transfer is initiated) to bypass authentication by trying to fetch a non-existing page. When the non-existing page is requested, the application responds with a 200 status code and empty page, and adds the requesting client device into the list of recognized devices.
Published: 2019-03-22T07:07:41.000Z
Updated: 2024-08-04T22:10:08.278Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-9938 vulnerable 2026-06-08 05:14:26.626286 Details available
The SHAREit application before 4.0.42 for Android allows a remote attacker (on the same network or joining public "open" Wi-Fi hotspots created by the application when file transfer is initiated) to download arbitrary files from the device including contacts, photos, videos, sound clips, etc. The attacker must be authenticated as a "recognized device."
Published: 2019-03-22T07:07:32.000Z
Updated: 2024-08-04T22:10:08.258Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.