CVE-2017-15581

In the "Diary with lock" aka WriteDiary application 4.72 for Android, neither HTTPS nor other encryption is used for transmitting data, despite the documentation that the product is intended for "a personal journal of ... secrets and feelings," which allows remote attackers to obtain sensitive...

PT-2017-14112

Name of the Vulnerable Software and Affected Versions Diary with lock aka WriteDiary version 4.72 Description The issue concerns the transmission of data without encryption in the Diary with lock application, which is intended for storing personal and sensitive information. This lack of encryptio...