GCVE - cpe:2.3:a:fenrir-inc:sleipnir_mobile:1.7.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:fenrir-inc:sleipnir_mobile:1.7.0:*:*:*:*:*:*:*

part: a version: 1.7.0 update: *

Vendor	Fenrir Inc (`77cba8bb-3936-57e3-9532-8258f9d88a30`)
Product	Sleipnir Mobile (`1df0915f-90f7-512a-b37f-a9bffe5781d5`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-0806`	vulnerable	2026-06-08 05:05:14.365274	Details available The Sleipnir Mobile application 2.12.1 and earlier and Sleipnir Mobile Black Edition application 2.12.1 and earlier for Android provide Geolocation API data without verifying user consent, which allows remote attackers to obtain sensitive location information via a web site that makes API calls. Published: 2014-01-22T21:00:00.000Z Updated: 2024-08-06T09:27:20.175Z Open on db.gcve.eu Reference links http://jvn.jp/en/jp/JVN81637882/index.html http://jvndb.jvn.jp/jvndb/JVNDB-2014-000007	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-2317`	vulnerable	2026-06-08 05:04:24.841372	Details available The Sleipnir Mobile application 2.9.1 and earlier and Sleipnir Mobile Black Edition application 2.9.1 and earlier for Android allow remote attackers to spoof the address bar via vectors involving the opening of a new window. Published: 2013-06-03T23:00:00.000Z Updated: 2024-09-17T02:10:57.039Z Open on db.gcve.eu Reference links http://jvndb.jvn.jp/jvndb/JVNDB-2013-000046 http://jvn.jp/en/jp/JVN22756333/index.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-2304`	vulnerable	2026-06-08 05:04:24.609691	Details available The Sleipnir Mobile application 2.8.0 and earlier and Sleipnir Mobile Black Edition application 2.8.0 and earlier for Android allow remote attackers to load arbitrary Extension APIs, and trigger downloads or obtain sensitive HTTP response-body information, via a crafted web page. Published: 2013-04-16T10:00:00.000Z Updated: 2024-09-16T18:14:17.997Z Open on db.gcve.eu Reference links http://jvndb.jvn.jp/jvndb/JVNDB-2013-000033 http://jvn.jp/en/jp/JVN02895867/index.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4004`	vulnerable	2026-06-08 05:02:15.521029	Details available Cross-site scripting (XSS) vulnerability in the Sleipnir Mobile application 2.2.0 and earlier and Sleipnir Mobile Black Edition application 2.2.0 and earlier for Android allows remote attackers to inject arbitrary web script or HTML via a crafted application that interacts with an unspecified Sleipnir Mobile function. Published: 2012-08-08T18:00:00.000Z Updated: 2024-09-16T23:35:27.594Z Open on db.gcve.eu Reference links https://play.google.com/store/apps/details?id=jp.co.fenrir.android.sleipnir_black https://play.google.com/store/apps/details?id=jp.co.fenrir.android.sleipnir http://jvndb.jvn.jp/jvndb/JVNDB-2012-000076 http://jvn.jp/en/jp/JVN39519659/index.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-2649`	vulnerable	2026-06-08 05:02:05.179948	Details available The Sleipnir Mobile application 2.2.0 and earlier and Sleipnir Mobile Black Edition application 2.2.0 and earlier for Android allow remote attackers to execute arbitrary Java methods, and obtain sensitive information or execute arbitrary commands, via a crafted web site. Published: 2012-08-08T18:00:00.000Z Updated: 2024-09-16T17:38:51.293Z Open on db.gcve.eu Reference links https://play.google.com/store/apps/details?id=jp.co.fenrir.android.sleipnir_black https://play.google.com/store/apps/details?id=jp.co.fenrir.android.sleipnir http://jvn.jp/en/jp/JVN99730704/index.html http://jvndb.jvn.jp/jvndb/JVNDB-2012-000075	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.