Lucene search
+L

52 matches found

CVE
CVE
added 2024/09/27 11:48 a.m.58 views

CVE-2024-8644

ValeApp (Oceanic Software) is affected by a vulnerability described as cleartext storage of sensitive information in a cookie that allows protocol manipulation / JSON hijacking. The issue impacts ValeApp versions prior to 2.0.0. Likely impact is exposure of sensitive data via cookies and potentia...

9.3CVSS5.8AI score0.00268EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/09/27 11:48 a.m.14 views

CVE-2024-8644 Cleartext Storage of Sensitive Information in Oceanic Software's ValeApp

Cleartext Storage of Sensitive Information in a Cookie vulnerability in Oceanic Software ValeApp allows Protocol Manipulation, : JSON Hijacking aka JavaScript Hijacking. This issue affects ValeApp: before v2.0.0...

9.3CVSS5.8AI score0.00268EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/09/27 11:48 a.m.32 views

CVE-2024-8644 Cleartext Storage of Sensitive Information in Oceanic Software's ValeApp

Cleartext Storage of Sensitive Information in a Cookie vulnerability in Oceanic Software ValeApp allows Protocol Manipulation, : JSON Hijacking aka JavaScript Hijacking. This issue affects ValeApp: before v2.0.0...

9.3CVSS0.00268EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/09/27 12:0 a.m.8 views

PT-2024-39149

Name of the Vulnerable Software and Affected Versions: ValeApp versions prior to 2.0.0 Description: The issue affects Oceanic Software ValeApp, allowing protocol manipulation through JSON Hijacking, also known as JavaScript Hijacking, due to cleartext storage of sensitive information in a cookie...

9.3CVSS5.7AI score0.00268EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2024/09/27 12:0 a.m.6 views

ValeApp 安全漏洞

ValeApp is a mobile application from Oceanic Software for providing convenient and fast parking services. A security vulnerability previously existed in ValeApp version 2.0.0, which stemmed from the inclusion of a sensitive information disclosure issue...

8.8CVSS6.2AI score0.00472EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/09/27 12:0 a.m.13 views

PT-2024-39129

Name of the Vulnerable Software and Affected Versions: ValeApp versions prior to 2.0.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations: For versions prior ...

7.2CVSS5.8AI score0.00279EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2024/09/27 12:0 a.m.11 views

PT-2024-39130

Name of the Vulnerable Software and Affected Versions: ValeApp versions prior to 2.0.0 Description: The issue allows the insertion of sensitive information into a log file, enabling the query system for information. Recommendations: For versions prior to 2.0.0, update to version 2.0.0 or later to...

8.8CVSS5.8AI score0.00472EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2024/09/27 12:0 a.m.7 views

ValeApp 安全漏洞

ValeApp is a mobile application from Oceanic Software for providing convenient and fast parking services. A security vulnerability previously existed in ValeApp version 2.0.0, which stemmed from the inclusion of a brute-force cracking issue...

9.8CVSS6.7AI score0.00464EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/09/27 12:0 a.m.8 views

Oceanic Software ValeApp 安全漏洞

ValeApp is a mobile application from Oceanic Software for providing convenient and fast parking services. A security vulnerability previously existed in Oceanic Software ValeApp version 2.0.0, which originated from the inclusion of a sensitive information leak that could lead to JavaScript...

9.3CVSS6.3AI score0.00268EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/09/27 12:0 a.m.8 views

ValeApp SQL注入漏洞

ValeApp is a mobile application from Oceanic Software for providing convenient and fast parking services. A SQL injection vulnerability exists in ValeApp prior to version 2.0.0, which stems from the inclusion of a SQL injection issue...

9.8CVSS7.8AI score0.00505EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/09/27 12:0 a.m.11 views

PT-2024-39128

Name of the Vulnerable Software and Affected Versions: ValeApp versions prior to 2.0.0 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection, potentially compromising the securit...

9.8CVSS5.9AI score0.00505EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2024/09/27 12:0 a.m.9 views

ValeApp 跨站脚本漏洞

ValeApp is a mobile application from Oceanic Software for providing convenient and fast parking services. A cross-site scripting vulnerability exists in ValeApp prior to version 2.0.0, which stems from the inclusion of a cross-site scripting issue...

7.2CVSS6AI score0.00279EPSS
SaveExploits0References2
Rows per page
Query Builder