{"resultsPerPage":8,"startIndex":0,"totalResults":8,"format":"NVD_CVE","version":"2.0","timestamp":"2026-10-31T20:52:52.864","vulnerabilities":[{"cve":{"id":"CVE-2012-3884","sourceIdentifier":"cve@mitre.org","published":"2012-07-26T22:55:01.700","lastModified":"2026-06-16T23:44:03.830","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"AirDroid 1.0.4 beta implements authentication through direct transmission of a password hash over HTTP, which makes it easier for remote attackers to obtain access by sniffing the local wireless network and then replaying the authentication data."},{"lang":"es","value":"AirDroid v1.0.4 beta implementa la autenticación mediante la transmisión directa de un hash de la contraseña a través de HTTP, lo que hace que sea más fácil para los atacantes remotos obtener acceso espiando el tráfico de la red inalámbrica local y luego usando los datos de autenticación.\r\n"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:airdroid:airdroid:1.0.4:beta:*:*:*:*:*:*","matchCriteriaId":"18DA093A-2C50-4D62-A65B-CDB061CCA01D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2012-07/0087.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.tele-consulting.com/advisories/TC-SA-2012-02.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2012-07/0087.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.tele-consulting.com/advisories/TC-SA-2012-02.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2012-3885","sourceIdentifier":"cve@mitre.org","published":"2012-07-26T22:55:01.747","lastModified":"2026-06-16T23:44:03.947","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of AirDroid 1.0.4 beta uses a four-character alphanumeric password, which makes it easier for remote attackers to obtain access via a brute-force attack."},{"lang":"es","value":"La configuración por defecto de la versión beta de AirDroid v1.0.4 utiliza una contraseña alfanumérica de cuatro caracteres, lo que hace que sea más fácil para los atacantes remotos obtener acceso a través de un ataque de fuerza bruta.\r\n"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:airdroid:airdroid:1.0.4:beta:*:*:*:*:*:*","matchCriteriaId":"18DA093A-2C50-4D62-A65B-CDB061CCA01D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2012-07/0087.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.tele-consulting.com/advisories/TC-SA-2012-02.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2012-07/0087.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.tele-consulting.com/advisories/TC-SA-2012-02.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2012-3886","sourceIdentifier":"cve@mitre.org","published":"2012-07-26T22:55:01.793","lastModified":"2026-06-16T23:44:04.067","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"AirDroid 1.0.4 beta uses the MD5 algorithm for values in the checklogin key parameter and 7bb cookie, which makes it easier for remote attackers to obtain cleartext data by sniffing the local wireless network and then conducting a (1) brute-force attack or (2) rainbow-table attack."},{"lang":"es","value":"AirDroid v1.0.4 Beta utiliza el algoritmo MD5 para valores en el parámetro key de checklogin y en la cookie 7BB, lo que hace que sea más fácil para los atacantes remotos el obtener datos en claro espiando el tráfico de la red inalámbrica local y luego realizando un (1) ataque de fuerza bruta o (2) un ataque de 'rainbow-tables' ."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:airdroid:airdroid:1.0.4:beta:*:*:*:*:*:*","matchCriteriaId":"18DA093A-2C50-4D62-A65B-CDB061CCA01D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2012-07/0087.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.tele-consulting.com/advisories/TC-SA-2012-02.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2012-07/0087.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.tele-consulting.com/advisories/TC-SA-2012-02.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2012-3887","sourceIdentifier":"cve@mitre.org","published":"2012-07-26T22:55:01.887","lastModified":"2026-06-16T23:44:04.187","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"AirDroid before 1.0.7 beta uses a cleartext base64 format for data transfer that is documented as an \"Encrypted Transmission\" feature, which allows remote attackers to obtain sensitive information by sniffing the local wireless network, as demonstrated by the SMS message content sent to the sdctl/sms/send/single/ URI."},{"lang":"es","value":"AirDroid antes de v1.0.7 beta utiliza texto en claro en base64 para una transferencia de datos que se documenta como una \"transmisión codificada\", la cual permite a atacantes remotos obtener información sensible espiando el tráfico de redes inalámbricas locales, tal y como se demuestra con mensajes SMS enviados a la URI sdctl/SMS/send/single/."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:airdroid:airdroid:*:beta:*:*:*:*:*:*","versionEndIncluding":"1.0.6","matchCriteriaId":"C53EA9EB-E553-4117-A94E-697749684D77"},{"vulnerable":true,"criteria":"cpe:2.3:a:airdroid:airdroid:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"249BB79C-3515-45C0-9F8F-117A2C9C6DEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:airdroid:airdroid:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"35B973F7-5FE8-4B7D-8FD3-752720E99DEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:airdroid:airdroid:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"829BFFB7-3B09-4823-89DA-FDB0546F579C"},{"vulnerable":true,"criteria":"cpe:2.3:a:airdroid:airdroid:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"7E80F41B-56A7-440D-AACF-895F51EBE04E"},{"vulnerable":true,"criteria":"cpe:2.3:a:airdroid:airdroid:1.0.4:beta:*:*:*:*:*:*","matchCriteriaId":"18DA093A-2C50-4D62-A65B-CDB061CCA01D"},{"vulnerable":true,"criteria":"cpe:2.3:a:airdroid:airdroid:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"7155A119-5C2D-4B78-8F40-D52A73F3EF37"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2012-07/0087.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.tele-consulting.com/advisories/TC-SA-2012-02.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2012-07/0087.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.tele-consulting.com/advisories/TC-SA-2012-02.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2012-3888","sourceIdentifier":"cve@mitre.org","published":"2012-07-26T22:55:01.980","lastModified":"2026-06-16T23:44:04.307","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The login implementation in AirDroid 1.0.4 beta allows remote attackers to bypass a multiple-login protection mechanism by modifying a pass value within JSON data."},{"lang":"es","value":"La implementación del inicio de sesión en la versión beta de AirDroid v1.0.4 permite a atacantes remotos eludir un mecanismo de protección de multiples de inicio de sesión mediante la modificación de un valor de contraseña (pass) en datos JSON.\r\n"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:airdroid:airdroid:1.0.4:beta:*:*:*:*:*:*","matchCriteriaId":"18DA093A-2C50-4D62-A65B-CDB061CCA01D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2012-07/0087.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.tele-consulting.com/advisories/TC-SA-2012-02.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2012-07/0087.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.tele-consulting.com/advisories/TC-SA-2012-02.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2013-0134","sourceIdentifier":"cret@cert.org","published":"2013-04-09T03:34:53.260","lastModified":"2026-06-16T23:48:49.740","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the web interface in AirDroid allows remote attackers to inject arbitrary web script or HTML via a crafted text message that is transmitted by a managed phone."},{"lang":"es","value":"Una vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) en la interfaz web que permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de mensajes de texto manipulados por que es transmitida por un teléfono gestionado."}],"affected":[{"source":"cret@cert.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:airdroid:airdroid:-:*:*:*:*:*:*:*","matchCriteriaId":"FAC0FE35-2764-4B9C-ABC9-766C1EF9EF92"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/557252","source":"cret@cert.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/557252","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2015-5661","sourceIdentifier":"vultures@jpcert.or.jp","published":"2015-10-18T19:59:00.103","lastModified":"2026-06-17T00:29:33.500","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The SAND STUDIO AirDroid application 1.1.0 and earlier for Android mishandles implicit intents, which allows attackers to obtain sensitive information via a crafted application."},{"lang":"es","value":"La aplicación AirDroid SAND STUDIO 1.1.0 y anteriores para Android no maneja correctamente los intents implícitos, lo que permite a atacantes obtener información sensible a través de una aplicación manipulada."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:airdroid:airdroid:*:*:*:*:*:android:*:*","versionEndIncluding":"1.1.0","matchCriteriaId":"458C0FE9-EFD7-4755-9CA3-82047B6430A7"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN37825153/index.html","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2015-000162","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN37825153/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2015-000162","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2019-9599","sourceIdentifier":"cve@mitre.org","published":"2019-03-06T18:29:00.277","lastModified":"2026-06-17T02:44:01.177","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The AirDroid application through 4.2.1.6 for Android allows remote attackers to cause a denial of service (service crash) via many simultaneous sdctl/comm/lite_auth/ requests."},{"lang":"es","value":"La aplicación AirDroid, hasta la versión 4.2.1.6 para Android, permite a los atacantes remotos provocar una denegación de servicio (cierre inesperado del servicio) mediante múltiples peticiones sdctl/comm/lite_auth/ simultáneas."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","baseScore":7.8,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:airdroid:airdroid:*:*:*:*:*:*:android:*","versionEndIncluding":"4.2.1.6","matchCriteriaId":"1AFEF587-BD3F-48E1-8488-A82910CF0514"}]}]}],"references":[{"url":"https://www.exploit-db.com/exploits/46337","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.youtube.com/watch?v=0QDM224_6DM","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://www.exploit-db.com/exploits/46337","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.youtube.com/watch?v=0QDM224_6DM","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]}]}}]}