LY-Corporation

Latest CVEs · RSS

• CVE-2026-11751 2026-08-19 · CVSS 9.1
  A vulnerability has been identified in armeria-xds versions prior to 1.41.0, where xDS upstream TLS peer verification may be silently disabled, allowing man-in-
• CVE-2026-13133 2026-08-10 · CVSS 8.4
  A vulnerability has been identified in LineInst.exe (LINE for Windows) prior to version 26.4.0, where Msftedit.dll is loaded via a relative path without a secur
• CVE-2026-16881 2026-08-04 · CVSS 8.7
  A code injection vulnerability exists in the LINE Android app prior to version 26.7.2. The profile rendering component does not adequately validate or sandbox
• CVE-2026-11748 2026-06-22 · CVSS 6.9
  A vulnerability has been identified in centraldogma-server-auth-shiro versions prior to 0.84.0, where the SearchFirstActiveDirectoryRealm substitutes the login
• CVE-2026-11746 2026-06-22 · CVSS 9.4
  A vulnerability has been identified in centraldogma-server versions prior to 0.84.0, where enabling ZooKeeper replication without setting replication.secret cau
• CVE-2026-11745 2026-06-22 · CVSS 8.8
  A vulnerability has been identified in centraldogma-server-mirror-git versions prior to 0.84.0, where the Git mirror SSH client does not verify remote host keys
• CVE-2026-11752 2026-06-19 · CVSS 5.9
  A vulnerability has been identified in armeria-xds versions 1.38.0 through 1.39.0, where DataSourceStream in the xDS module can resolve control-plane-supplied f
• CVE-2026-3861 2026-04-16 · CVSS 6.5
  LINE client for iOS versions prior to 26.3.0 contains a vulnerability in the in-app browser where opening a crafted web page can repeatedly trigger OS-level dia
• CVE-2025-14023 2025-12-15 · CVSS 3.1
  LINE client for iOS prior to 15.19 allows UI spoofing due to inconsistencies between the navigation state and the in-app browser's user interface, which could c
• CVE-2025-14022 2025-12-15 · CVSS 7.7
  LINE client for iOS prior to 15.4 allows man-in-the-middle attacks due to improper SSL/TLS certificate validation in an integrated financial SDK. The SDK interf
• CVE-2025-14021 2025-12-15 · CVSS 4.3
  The in-app browser in LINE client for iOS versions prior to 14.14 is vulnerable to address bar spoofing, which could allow attackers to execute malicious JavaSc
• CVE-2025-14020 2025-12-15 · CVSS 5.4
  LINE client for Android versions prior to 14.20 contains a UI spoofing vulnerability in the in-app browser where the full-screen security Toast notification is
• CVE-2025-14019 2025-12-15 · CVSS 3.4
  LINE client for Android versions from 13.8 to 15.5 is vulnerable to UI spoofing in the in-app browser where a specific layout could obscure the full-screen warn
• CVE-2025-11222 2025-12-04 · CVSS 6.1
  Central Dogma versions before 0.78.0 contain an Open Redirect vulnerability that allows attackers to redirect users to untrusted sites via specially crafted URL
• CVE-2024-5739 2024-06-12 · CVSS 6.1
  The in-app browser of LINE client for iOS versions below 14.9.0 contains a Universal XSS (UXSS) vulnerability. This vulnerability allows for cross-site scriptin
• CVE-2024-1735 2024-02-26 · CVSS 9.1
  A vulnerability has been identified in armeria-saml versions less than 1.27.2, allowing the use of malicious SAML messages to bypass authentication. All users w