Vendor
OPPO
13 known vulnerabilities.
Products
10 results · Clear filters · Feed
-
High 8.3
Arbitrary URL Loading in WebView Leading to Token Leakage Risk
Loading arbitrary external URLs through WebView components introduces malicious JS code that can steal arbitrary user tokens.
-
High 7.3
O+ Connect's lack of authentication for IPC channels led to a local privilege escalation vulnerability.
Because O+ Connect's IPC service does not authenticate clients, external applications can escalate privileges and perform sensitive actions through the IPC channel.
-
High 7.1
ColorOS Assistant Path Traversal Vulnerability
ColorOS Assistant has an unauthenticated start-download channel, leading to file path traversal.
-
High 8.3
Arbitrary URL Loading in WebView Leading to Token Leakage Risk
Loading arbitrary external URLs through WebView components introduces malicious JS code that can steal arbitrary user tokens.
-
High 7.4
OPPO Clone Phone uses weak WPA passphrase as only means of security
OPPO Clone Phone uses a weak password WiFi hotspot to transfer files, resulting in Information disclosure.
-
High 8.7
OPPO Store APP has a WebView component privilege escalation vulnerability.
In OPPOStore iOS App, there's a possible escalation of privilege due to improper input validation.
-
High 8.7
OPPO Store app include remote account token hijacking and sensitive information leakage
In OPPO Store APP, there's a possible escalation of privilege due to improper input validation.
-
High 7.4
A remote code execution vulnerability in the webview component of OPPO Store app.
A remote code execution vulnerability in the webview component of OPPO Store app.
-
High 7.4
A remote code execution vulnerability in the webview component
A remote code execution vulnerability in the webview component of OnePlus Store app.
-
High 7.4
Command Injection In OPPO Service
There is a command injection problem in the old version of the mobile phone backup app.