https://vulnogram.org/ Most recent CVEs assigned by LY Corporation (ly-corporation). https://vulnogram.org/seaview/icons/ly-corporation.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-112148 https://vulnogram.org/CVE-2026-112148 A vulnerability has been identified in LIFF SDK versions 2.20.0 through 2.31.0, where a DOM-based cross-site scripting (XSS) flaw allows an attacker to execute arbitrary JavaScript in the origin of an affected LIFF application's endpoint when a user… Medium Tue, 20 Oct 2026 06:31:15 GMT https://vulnogram.org/CVE-2026-11751 https://vulnogram.org/CVE-2026-11751 A vulnerability has been identified in armeria-xds versions prior to 1.41.0, where xDS upstream TLS peer verification may be silently disabled, allowing man-in-the-middle attacks against xDS-managed upstream connections. Critical Wed, 19 Aug 2026 01:19:34 GMT https://vulnogram.org/CVE-2026-13133 https://vulnogram.org/CVE-2026-13133 A vulnerability has been identified in LineInst.exe (LINE for Windows) prior to version 26.4.0, where Msftedit.dll is loaded via a relative path without a secure DLL search path, allowing a malicious DLL placed in the installer's directory to be load… High Mon, 10 Aug 2026 06:00:12 GMT https://vulnogram.org/CVE-2026-16881 https://vulnogram.org/CVE-2026-16881 A code injection vulnerability exists in the LINE Android app prior to version 26.7.2. The profile rendering component does not adequately validate or sandbox externally supplied script content embedded in profile templates. As a result, an attacker… High Tue, 04 Aug 2026 05:05:34 GMT https://vulnogram.org/CVE-2026-11748 https://vulnogram.org/CVE-2026-11748 A vulnerability has been identified in centraldogma-server-auth-shiro versions prior to 0.84.0, where the SearchFirstActiveDirectoryRealm substitutes the login username into an LDAP search filter without neutralizing LDAP filter metacharacters, allow… Medium Mon, 22 Jun 2026 02:37:35 GMT https://vulnogram.org/CVE-2026-11746 https://vulnogram.org/CVE-2026-11746 A vulnerability has been identified in centraldogma-server versions prior to 0.84.0, where enabling ZooKeeper replication without setting replication.secret causes the server to silently fall back to a hard-coded, publicly known secret. This default… Critical Mon, 22 Jun 2026 02:35:51 GMT https://vulnogram.org/CVE-2026-11745 https://vulnogram.org/CVE-2026-11745 A vulnerability has been identified in centraldogma-server-mirror-git versions prior to 0.84.0, where the Git mirror SSH client does not verify remote host keys for git+ssh:// connections, allowing an on-path attacker to perform man-in-the-middle att… High Mon, 22 Jun 2026 02:33:08 GMT https://vulnogram.org/CVE-2026-11752 https://vulnogram.org/CVE-2026-11752 A vulnerability has been identified in armeria-xds versions 1.38.0 through 1.39.0, where DataSourceStream in the xDS module can resolve control-plane-supplied filenames and environment variables without restriction, allowing a compromised or semi-tru… Medium Fri, 19 Jun 2026 04:29:31 GMT https://vulnogram.org/CVE-2026-3861 https://vulnogram.org/CVE-2026-3861 LINE client for iOS versions prior to 26.3.0 contains a vulnerability in the in-app browser where opening a crafted web page can repeatedly trigger OS-level dialogs due to insufficient safeguards when handling arbitrary URL schemes, potentially causi… High Thu, 16 Apr 2026 05:54:05 GMT https://vulnogram.org/CVE-2025-14023 https://vulnogram.org/CVE-2025-14023 LINE client for iOS prior to 15.19 allows UI spoofing due to inconsistencies between the navigation state and the in-app browser's user interface, which could create confusion about the trust context of displayed pages or interactive elements under s… Low Network Exploitable Mon, 15 Dec 2025 06:45:23 GMT https://vulnogram.org/CVE-2025-14022 https://vulnogram.org/CVE-2025-14022 LINE client for iOS prior to 15.4 allows man-in-the-middle attacks due to improper SSL/TLS certificate validation in an integrated financial SDK. The SDK interfered with the application's network processing, causing server certificate verification to… High Network Exploitable Mon, 15 Dec 2025 06:43:47 GMT https://vulnogram.org/CVE-2025-14021 https://vulnogram.org/CVE-2025-14021 The in-app browser in LINE client for iOS versions prior to 14.14 is vulnerable to address bar spoofing, which could allow attackers to execute malicious JavaScript within iframes while displaying trusted URLs, enabling phishing attacks through overl… Medium Network Exploitable Mon, 15 Dec 2025 06:41:37 GMT https://vulnogram.org/CVE-2025-14020 https://vulnogram.org/CVE-2025-14020 LINE client for Android versions prior to 14.20 contains a UI spoofing vulnerability in the in-app browser where the full-screen security Toast notification is not properly re-displayed when users return from another application, potentially allowing… Medium Network Exploitable Mon, 15 Dec 2025 06:39:51 GMT https://vulnogram.org/CVE-2025-14019 https://vulnogram.org/CVE-2025-14019 LINE client for Android versions from 13.8 to 15.5 is vulnerable to UI spoofing in the in-app browser where a specific layout could obscure the full-screen warning prompt, potentially allowing attackers to conduct phishing attacks. Low Network Exploitable Mon, 15 Dec 2025 06:38:05 GMT https://vulnogram.org/CVE-2025-11222 https://vulnogram.org/CVE-2025-11222 Central Dogma versions before 0.78.0 contain an Open Redirect vulnerability that allows attackers to redirect users to untrusted sites via specially crafted URLs, potentially facilitating phishing attacks and credential theft. Medium Network Exploitable Thu, 04 Dec 2025 12:18:14 GMT https://vulnogram.org/CVE-2024-5739 https://vulnogram.org/CVE-2024-5739 The in-app browser of LINE client for iOS versions below 14.9.0 contains a Universal XSS (UXSS) vulnerability. This vulnerability allows for cross-site scripting (XSS) where arbitrary JavaScript can be executed in the top frame from an embedded ifram… Medium Network Exploitable Wed, 12 Jun 2024 07:00:35 GMT https://vulnogram.org/CVE-2024-1735 https://vulnogram.org/CVE-2024-1735 A vulnerability has been identified in armeria-saml versions less than 1.27.2, allowing the use of malicious SAML messages to bypass authentication. All users who rely on armeria-saml older than version 1.27.2 must upgrade to 1.27.2 or later. Critical Network Exploitable Mon, 26 Feb 2024 07:25:42 GMT