https://vulnogram.org/ Most recent CVEs assigned by Naver Corporation (naver). https://vulnogram.org/seaview/icons/naver.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-8148 https://vulnogram.org/CVE-2026-8148 NAVER MYBOX Explorer for Windows before 3.0.11.160 allows a local attacker to escalate privileges to NT AUTHORITY\SYSTEM via registry manipulation due to improper privilege checks. High Fri, 08 May 2026 04:36:12 GMT https://vulnogram.org/CVE-2026-1513 https://vulnogram.org/CVE-2026-1513 billboard.js before 3.18.0 allows an attacker to execute malicious JavaScript due to improper sanitization during chart option binding. Medium Network Exploitable Wed, 28 Jan 2026 01:28:23 GMT https://vulnogram.org/CVE-2026-23769 https://vulnogram.org/CVE-2026-23769 lucy-xss-filter before commit e5826c0 allows an attacker to execute malicious JavaScript due to improper sanitization caused by misconfigured default superset rule files. Medium Network Exploitable Unsupported When Assigned Fri, 16 Jan 2026 05:23:56 GMT https://vulnogram.org/CVE-2026-23768 https://vulnogram.org/CVE-2026-23768 lucy-xss-filter before commit 7c1de6d allows an attacker to induce server-side HEAD requests to arbitrary URLs when the ObjectSecurityListener or EmbedSecurityListener option is enabled and embed or object tags are used with a src attribute missing a… Medium Network Exploitable Unsupported When Assigned Fri, 16 Jan 2026 05:20:58 GMT https://vulnogram.org/CVE-2025-69235 https://vulnogram.org/CVE-2025-69235 Whale browser before 4.35.351.12 allows an attacker to bypass the Same-Origin Policy in a sidebar environment. High Network Exploitable Tue, 30 Dec 2025 01:22:57 GMT https://vulnogram.org/CVE-2025-69234 https://vulnogram.org/CVE-2025-69234 Whale browser before 4.35.351.12 allows an attacker to escape the iframe sandbox in a sidebar environment. Critical Network Exploitable Tue, 30 Dec 2025 01:18:05 GMT https://vulnogram.org/CVE-2025-62585 https://vulnogram.org/CVE-2025-62585 Whale browser before 4.33.325.17 allows an attacker to bypass the Content Security Policy via a specific scheme in a dual-tab environment. High Network Exploitable Thu, 16 Oct 2025 06:52:34 GMT https://vulnogram.org/CVE-2025-62584 https://vulnogram.org/CVE-2025-62584 Whale browser before 4.33.325.17 allows an attacker to bypass the Same-Origin Policy in a dual-tab environment. High Network Exploitable Thu, 16 Oct 2025 06:52:25 GMT https://vulnogram.org/CVE-2025-62583 https://vulnogram.org/CVE-2025-62583 Whale Browser before 4.33.325.17 allows an attacker to escape the iframe sandbox in a dual-tab environment. Critical Network Exploitable Thu, 16 Oct 2025 06:52:12 GMT https://vulnogram.org/CVE-2025-58323 https://vulnogram.org/CVE-2025-58323 NAVER MYBOX Explorer for Windows before 3.0.8.133 allows a local attacker to escalate privileges to NT AUTHORITY\SYSTEM by executing arbitrary files due to improper privilege checks. High Fri, 29 Aug 2025 01:41:14 GMT https://vulnogram.org/CVE-2025-58322 https://vulnogram.org/CVE-2025-58322 NAVER MYBOX Explorer for Windows before 3.0.8.133 allows a local attacker to escalate privileges to NT AUTHORITY\SYSTEM by invoking arbitrary DLLs due to improper privilege checks. High Thu, 28 Aug 2025 08:02:35 GMT https://vulnogram.org/CVE-2025-53600 https://vulnogram.org/CVE-2025-53600 Whale browser before 4.32.315.22 allow an attacker to bypass the Same-Origin Policy in a dual-tab environment. High Network Exploitable Fri, 04 Jul 2025 07:20:26 GMT https://vulnogram.org/CVE-2025-53599 https://vulnogram.org/CVE-2025-53599 Whale browser for iOS before 3.9.1.4206 allow an attacker to execute malicious scripts in the browser via a crafted javascript scheme. Critical Network Exploitable Fri, 04 Jul 2025 07:20:11 GMT https://vulnogram.org/CVE-2025-49223 https://vulnogram.org/CVE-2025-49223 billboard.js before 3.15.1 was discovered to contain a prototype pollution via the function generate, which could allow attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties. Critical Network Exploitable Wed, 04 Jun 2025 02:00:15 GMT https://vulnogram.org/CVE-2024-50583 https://vulnogram.org/CVE-2024-50583 Whale browser Installer before 3.1.0.0 allows an attacker to execute a malicious DLL in the user environment due to improper permission settings. Medium Fri, 25 Oct 2024 07:04:30 GMT https://vulnogram.org/CVE-2024-40618 https://vulnogram.org/CVE-2024-40618 Whale browser before 3.26.244.21 allows an attacker to execute malicious JavaScript due to improper sanitization when processing a built-in extension. Critical Network Exploitable Thu, 11 Jul 2024 01:24:41 GMT https://vulnogram.org/CVE-2024-28216 https://vulnogram.org/CVE-2024-28216 nGrinder before 3.5.9 allows an attacker to obtain the results of webhook requests due to lack of access control, which could be the cause of information disclosure and limited Server-Side Request Forgery. Medium Thu, 07 Mar 2024 04:50:15 GMT https://vulnogram.org/CVE-2024-28215 https://vulnogram.org/CVE-2024-28215 nGrinder before 3.5.9 allows an attacker to create or update webhook configuration due to lack of access control, which could be the cause of information disclosure and limited Server-Side Request Forgery. High Network Exploitable Thu, 07 Mar 2024 04:50:08 GMT https://vulnogram.org/CVE-2024-28214 https://vulnogram.org/CVE-2024-28214 nGrinder before 3.5.9 allows to set delay without limitation, which could be the cause of Denial of Service by remote attacker. Low Thu, 07 Mar 2024 04:49:57 GMT https://vulnogram.org/CVE-2024-28213 https://vulnogram.org/CVE-2024-28213 nGrinder before 3.5.9 allows to accept serialized Java objects from unauthenticated users, which could allow remote attacker to execute arbitrary code via unsafe Java objects deserialization. Critical Network Exploitable Thu, 07 Mar 2024 04:49:47 GMT https://vulnogram.org/CVE-2024-28212 https://vulnogram.org/CVE-2024-28212 nGrinder before 3.5.9 uses old version of SnakeYAML, which could allow remote attacker to execute arbitrary code via unsafe deserialization. Critical Network Exploitable Thu, 07 Mar 2024 04:49:37 GMT https://vulnogram.org/CVE-2024-28211 https://vulnogram.org/CVE-2024-28211 nGrinder before 3.5.9 allows connection to malicious JMX/RMI server by default, which could be the cause of executing arbitrary code via RMI registry by remote attacker. Critical Network Exploitable Thu, 07 Mar 2024 04:49:21 GMT https://vulnogram.org/CVE-2023-25632 https://vulnogram.org/CVE-2023-25632 The Android Mobile Whale browser app before 3.0.1.2 allows the attacker to bypass its browser unlock function via 'Open in Whale' feature. Mon, 27 Nov 2023 07:03:12 GMT https://vulnogram.org/CVE-2020-9754 https://vulnogram.org/CVE-2020-9754 NAVER Whale browser mobile app before 1.10.6.2 allows the attacker to bypass its browser unlock function via incognito mode. Mon, 27 Jun 2022 01:40:09 GMT https://vulnogram.org/CVE-2022-24077 https://vulnogram.org/CVE-2022-24077 Naver Cloud Explorer Beta allows the attacker to execute arbitrary code as System privilege via malicious DLL injection. Mon, 13 Jun 2022 13:40:17 GMT https://vulnogram.org/CVE-2022-24075 https://vulnogram.org/CVE-2022-24075 Whale browser before 3.12.129.18 allowed extensions to replace JavaScript files of the HWP viewer website which could access to local HWP files. When the HWP files were opened, the replaced script could read the files. Thu, 17 Mar 2022 05:20:17 GMT https://vulnogram.org/CVE-2022-24074 https://vulnogram.org/CVE-2022-24074 Whale Bridge, a default extension in Whale browser before 3.12.129.18, allowed to receive any SendMessage request from the content script itself that could lead to controlling Whale Bridge if the rendering process compromises. Thu, 17 Mar 2022 05:20:16 GMT https://vulnogram.org/CVE-2022-24073 https://vulnogram.org/CVE-2022-24073 The Web Request API in Whale browser before 3.12.129.18 allowed to deny access to the extension store or redirect to any URL when users access the store. Thu, 17 Mar 2022 05:20:14 GMT https://vulnogram.org/CVE-2022-24072 https://vulnogram.org/CVE-2022-24072 The devtools API in Whale browser before 3.12.129.18 allowed extension developers to inject arbitrary JavaScript into the extension store web page via devtools.inspectedWindow, leading to extensions downloading and uploading when users open the devel… Thu, 17 Mar 2022 05:20:13 GMT https://vulnogram.org/CVE-2022-24071 https://vulnogram.org/CVE-2022-24071 A Built-in extension in Whale browser before 3.12.129.46 allows attackers to compromise the rendering process which could lead to controlling browser internal APIs. Fri, 28 Jan 2022 10:04:53 GMT https://vulnogram.org/CVE-2021-33593 https://vulnogram.org/CVE-2021-33593 Whale browser for iOS before 1.14.0 has an inconsistent user interface issue that allows an attacker to obfuscate the address bar which may lead to address bar spoofing. Tue, 02 Nov 2021 06:20:09 GMT https://vulnogram.org/CVE-2021-33592 https://vulnogram.org/CVE-2021-33592 NAVER Toolbar before 4.0.30.323 allows remote attackers to execute arbitrary code via a crafted upgrade.xml file. Special characters in filename parameter can be the cause of bypassing code signing check function. Mon, 19 Jul 2021 05:55:10 GMT https://vulnogram.org/CVE-2021-33591 https://vulnogram.org/CVE-2021-33591 An exposed remote debugging port in Naver Comic Viewer prior to 1.0.15.0 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Fri, 28 May 2021 10:50:09 GMT https://vulnogram.org/CVE-2020-9753 https://vulnogram.org/CVE-2020-9753 Whale Browser Installer before 1.2.0.5 versions don't support signature verification for Flash installer. Wed, 20 May 2020 02:25:11 GMT https://vulnogram.org/CVE-2020-9752 https://vulnogram.org/CVE-2020-9752 Naver Cloud Explorer before 2.2.2.11 allows the attacker can move a local file in any path on the filesystem as a system privilege through its named pipe. Mon, 23 Mar 2020 02:15:13 GMT https://vulnogram.org/CVE-2020-9751 https://vulnogram.org/CVE-2020-9751 Naver Cloud Explorer before 2.2.2.11 allows the system to download an arbitrary file from the attacker's server and execute it during the upgrade. Tue, 03 Mar 2020 09:15:14 GMT https://vulnogram.org/CVE-2019-13157 https://vulnogram.org/CVE-2019-13157 nsGreen.dll in Naver Vaccine 2.1.4 allows remote attackers to overwrite arbitary files via directory traversal sequences in a filename within nsz archive. Fri, 22 Nov 2019 02:06:08 GMT https://vulnogram.org/CVE-2019-13156 https://vulnogram.org/CVE-2019-13156 NDrive(1.2.2).sys in Naver Cloud Explorer has a stack-based buffer overflow, which allows attackers to cause a denial of service when reading data from IOCTL handle. Tue, 03 Sep 2019 14:42:09 GMT https://vulnogram.org/CVE-2018-12449 https://vulnogram.org/CVE-2018-12449 The Whale browser installer 0.4.3.0 and earlier versions allows DLL hijacking. Thu, 11 Oct 2018 13:00:00 GMT https://vulnogram.org/CVE-2018-12448 https://vulnogram.org/CVE-2018-12448 Whale Browser before 1.3.48.4 displays no URL information but only a title of a web page on the browser's address bar when visiting a non-http page, which allows an attacker to display a malicious web page with a fake domain name. Thu, 02 Aug 2018 13:00:00 GMT