Skip to content

Naver vulnerabilities

Products

Newest

naver billboard.js billboard.js before 4.1.3 allows an attacker to execute malicious JavaScript due to improper... CVE-2026-120988 6.1 MediumNovember 3, 2026
naver whale browser Whale Browser before 5.39.412.57 allows an attacker to bypass the iframe sandbox in a dual-tab... CVE-2026-120987 7.5 HighNovember 3, 2026
naver mybox explorer, navercorp mybox +1 more NAVER MYBOX Explorer for Windows before 3.0.11.160 allows a local attacker to escalate privileges... CVE-2026-8148 7.8 HighMay 8, 2026
naver billboard.js billboard.js is vulnerable to XSS during chart option binding CVE-2026-1513 Fix available 6.1 MediumJanuary 28, 2026
naver lucy-xss-filter lucy-xss-filter before commit e5826c0 allows an attacker to execute malicious JavaScript due to... CVE-2026-23769 6.1 MediumJanuary 16, 2026
naver lucy-xss-filter lucy-xss-filter before commit 7c1de6d allows an attacker to induce server-side HEAD requests to... CVE-2026-23768 6.1 MediumJanuary 16, 2026
naver whale browser, navercorp whale +1 more Whale browser before 4.35.351.12 allows an attacker to bypass the Same-Origin Policy in a sidebar... CVE-2025-69235 7.5 HighDecember 30, 2025
naver whale browser, navercorp whale +1 more Whale browser before 4.35.351.12 allows an attacker to escape the iframe sandbox in a sidebar... CVE-2025-69234 9.1 CriticalDecember 30, 2025
naver whale browser, navercorp whale +1 more Whale browser before 4.33.325.17 allows an attacker to bypass the Content Security Policy via a... CVE-2025-62585 7.5 HighOctober 16, 2025
naver whale browser, navercorp whale +1 more Whale browser before 4.33.325.17 allows an attacker to bypass the Same-Origin Policy in a dual... CVE-2025-62584 7.5 HighOctober 16, 2025
naver whale browser, navercorp whale +1 more Whale Browser before 4.33.325.17 allows an attacker to escape the iframe sandbox in a dual-tab... CVE-2025-62583 9.8 CriticalOctober 16, 2025
naver mybox explorer, navercorp mybox +1 more NAVER MYBOX Explorer for Windows before 3.0.8.133 allows a local attacker to escalate privileges... CVE-2025-58323 7.7 HighAugust 29, 2025
naver mybox explorer, navercorp mybox +1 more NAVER MYBOX Explorer for Windows before 3.0.8.133 allows a local attacker to escalate privileges... CVE-2025-58322 7.8 HighAugust 28, 2025
naver whale browser, navercorp whale +1 more Whale browser before 4.32.315.22 allow an attacker to bypass the Same-Origin Policy in a dual-tab... CVE-2025-53600 7.5 HighJuly 4, 2025
naver whale browser, navercorp whale +1 more Whale browser for iOS before 3.9.1.4206 allow an attacker to execute malicious scripts in the... CVE-2025-53599 9.8 CriticalJuly 4, 2025
naver billboard.js billboard.js allows prototype pollution via the function generate CVE-2025-49223 Public exploitFix available 9.8 CriticalJune 4, 2025
naver whale browser installer Whale browser Installer before 3.1.0.0 allows an attacker to execute a malicious DLL in the user... CVE-2024-50583 6.3 MediumOctober 25, 2024
naver whale browser Whale browser before 3.26.244.21 allows an attacker to execute malicious JavaScript due to... CVE-2024-40618 9.6 CriticalJuly 11, 2024
naver ngrinder nGrinder before 3.5.9 allows an attacker to obtain the results of webhook requests due to lack of... CVE-2024-28216 5.4 MediumMarch 7, 2024
naver ngrinder nGrinder before 3.5.9 allows an attacker to create or update webhook configuration due to lack of... CVE-2024-28215 7.5 HighMarch 7, 2024
naver ngrinder nGrinder before 3.5.9 allows to set delay without limitation, which could be the cause of Denial... CVE-2024-28214 2.7 LowMarch 7, 2024
naver ngrinder nGrinder vulnerable to unsafe Java objects deserialization CVE-2024-28213 Fix available 9.8 CriticalMarch 7, 2024
naver ngrinder nGrinder before 3.5.9 uses old version of SnakeYAML, which could allow remote attacker to execute... CVE-2024-28212 9.8 CriticalMarch 7, 2024
naver ngrinder nGrinder before 3.5.9 allows connection to malicious JMX/RMI server by default, which could be... CVE-2024-28211 9.8 CriticalMarch 7, 2024
naver whale browser The Android Mobile Whale browser app before 3.0.1.2 allows the attacker to bypass its browser... CVE-2023-25632 5.5 MediumNovember 27, 2023
naver whale browser, navercorp whale +1 more NAVER Whale browser mobile app before 1.10.6.2 allows the attacker to bypass its browser unlock... CVE-2020-9754 5.3 MediumJune 27, 2022
naver cloud explorer, cloud explorer beta +1 more Naver Cloud Explorer Beta allows the attacker to execute arbitrary code as System privilege via... CVE-2022-24077 7.8 HighJune 13, 2022
naver whale browser, navercorp whale +1 more Whale browser before 3.12.129.18 allowed extensions to replace JavaScript files of the HWP viewer... CVE-2022-24075 6.5 MediumMarch 17, 2022
naver whale browser, navercorp whale +1 more Whale Bridge, a default extension in Whale browser before 3.12.129.18, allowed to receive any... CVE-2022-24074 9.8 CriticalMarch 17, 2022
naver whale browser, navercorp whale +1 more The Web Request API in Whale browser before 3.12.129.18 allowed to deny access to the extension... CVE-2022-24073 7.1 HighMarch 17, 2022
naver whale browser, navercorp whale +1 more The devtools API in Whale browser before 3.12.129.18 allowed extension developers to inject... CVE-2022-24072 6.1 MediumMarch 17, 2022
naver whale browser, navercorp whale +1 more A Built-in extension in Whale browser before 3.12.129.46 allows attackers to compromise the... CVE-2022-24071 4.3 MediumJanuary 28, 2022
naver whale browser, navercorp whale +1 more Whale browser for iOS before 1.14.0 has an inconsistent user interface issue that allows an... CVE-2021-33593 5.3 MediumNovember 2, 2021
naver toolbar NAVER Toolbar before 4.0.30.323 allows remote attackers to execute arbitrary code via a crafted... CVE-2021-33592 9.8 CriticalJuly 19, 2021
naver comic viewer An exposed remote debugging port in Naver Comic Viewer prior to 1.0.15.0 allowed a remote... CVE-2021-33591 8.8 HighMay 28, 2021
naver whale browser installer Whale Browser Installer before 1.2.0.5 versions don't support signature verification for Flash... CVE-2020-9753 9.1 CriticalMay 20, 2020
naver cloud explorer Naver Cloud Explorer before 2.2.2.11 allows the attacker can move a local file in any path on the... CVE-2020-9752 9.8 CriticalMarch 23, 2020
naver cloud explorer Naver Cloud Explorer before 2.2.2.11 allows the system to download an arbitrary file from the... CVE-2020-9751 9.1 CriticalMarch 3, 2020
naver vaccine nsGreen.dll in Naver Vaccine 2.1.4 allows remote attackers to overwrite arbitary files via... CVE-2019-13157 7.5 HighNovember 22, 2019
naver cloud explorer, naver corporation ndrive +1 more NDrive(1.2.2).sys in Naver Cloud Explorer has a stack-based buffer overflow, which allows... CVE-2019-13156 7.5 HighSeptember 3, 2019
naver ngrinder Multiple cross-site scripting (XSS) vulnerabilities in nGrinder before 3.4 allow remote attackers... CVE-2016-5060 6.1 MediumDecember 13, 2016
naver line play The LINE PLAY (aka jp.naver.lineplay.android) application 2.3.1.1 for Android does not verify X... CVE-2014-6980 5.4 MediumOctober 16, 2014
naver loctouch The Loctouch application 3.4.6 and earlier for Android allows attackers to obtain sensitive... CVE-2012-5183 2.6 LowDecember 26, 2012
naver loctouch The Loctouch application 3.4.6 and earlier for Android does not properly handle implicit intents,... CVE-2012-5182 4.3 MediumDecember 26, 2012
naver nhn japan naver line The NHN Japan NAVER LINE application before 2.5.5 for Android does not properly handle implicit... CVE-2012-4005 5.0 MediumAugust 7, 2012