Airdroid

8 CVEs across 1 Airdroid products. Browse Airdroid vulnerabilities, severities, and proof-of-concept exploits.

Airdroid products with known CVEs

ProductCVEs
Airdroid8
Airdroid CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2019-9599High7.52019-03-06The AirDroid application through 4.2.1.6 for Android allows remote attackers to cause a denial of service (service crash) via many simultaneous sdctl/comm/lite…
CVE-2015-56612015-10-18The SAND STUDIO AirDroid application 1.1.0 and earlier for Android mishandles implicit intents, which allows attackers to obtain sensitive information via a cr…
CVE-2013-01342013-04-09Cross-site scripting (XSS) vulnerability in the web interface in AirDroid allows remote attackers to inject arbitrary web script or HTML via a crafted text mes…
CVE-2012-38882012-07-26The login implementation in AirDroid 1.0.4 beta allows remote attackers to bypass a multiple-login protection mechanism by modifying a pass value within JSON d…
CVE-2012-38872012-07-26AirDroid before 1.0.7 beta uses a cleartext base64 format for data transfer that is documented as an "Encrypted Transmission" feature, which allows remote atta…
CVE-2012-38862012-07-26AirDroid 1.0.4 beta uses the MD5 algorithm for values in the checklogin key parameter and 7bb cookie, which makes it easier for remote attackers to obtain clea…
CVE-2012-38852012-07-26The default configuration of AirDroid 1.0.4 beta uses a four-character alphanumeric password, which makes it easier for remote attackers to obtain access via a…
CVE-2012-38842012-07-26AirDroid 1.0.4 beta implements authentication through direct transmission of a password hash over HTTP, which makes it easier for remote attackers to obtain ac…