Lucene search
+L

53 matches found

OSV
OSV
added 2024/09/27 12:15 p.m.6 views

CVE-2024-8608

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Oceanic Software ValeApp allows Stored XSS.This issue affects ValeApp: before v2.0.0...

5.4CVSS5.8AI score0.00279EPSS
SaveExploits0References1
NVD
NVD
added 2024/09/27 12:15 p.m.12 views

CVE-2024-8608

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Oceanic Software ValeApp allows Stored XSS. This issue affects ValeApp: before v2.0.0...

7.2CVSS0.00279EPSS
SaveExploits0References2
NVD
NVD
added 2024/09/27 12:15 p.m.18 views

CVE-2024-8609

Insertion of Sensitive Information into Log File vulnerability in Oceanic Software ValeApp allows Query System for Information. This issue affects ValeApp: before v2.0.0...

8.8CVSS0.00472EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/09/27 12:4 p.m.15 views

CVE-2024-8607 SQLi in Oceanic Software's ValeApp

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Oceanic Software ValeApp allows SQL Injection. This issue affects ValeApp: before v2.0.0...

8.7CVSS5.8AI score0.00505EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/09/27 12:4 p.m.23 views

CVE-2024-8607 SQLi in Oceanic Software's ValeApp

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Oceanic Software ValeApp allows SQL Injection. This issue affects ValeApp: before v2.0.0...

8.7CVSS0.00505EPSS
SaveExploits0References2
CVE
CVE
added 2024/09/27 12:4 p.m.55 views

CVE-2024-8607

CVE-2024-8607 affects ValeApp by Oceanic Software, with the vulnerability lying in improper neutralization of special elements in SQL commands (SQL Injection) in ValeApp versions before 2.0.0. Reported impact aligns with high-severity scores (CVSS v3.1: 9.8, NETWORK, HIGH confidentiality/integrit...

9.8CVSS5.8AI score0.00505EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2024/09/27 12:0 p.m.23 views

CVE-2024-8608 Stored XSS in Oceanic Software's ValeApp

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Oceanic Software ValeApp allows Stored XSS. This issue affects ValeApp: before v2.0.0...

7.2CVSS0.00279EPSS
SaveExploits0References2
CVE
CVE
added 2024/09/27 12:0 p.m.67 views

CVE-2024-8608

CVE-2024-8608 corresponds to a Stored XSS in Oceanic Software’s ValeApp, caused by improper neutralization during web page generation. Affected: ValeApp versions prior to 2.0.0. Impact and exploit details are not provided beyond the XSS claim in the sources; mitigation guidance from PT-2024-39129...

7.2CVSS5.8AI score0.00279EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/09/27 12:0 p.m.19 views

CVE-2024-8608 Stored XSS in Oceanic Software's ValeApp

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Oceanic Software ValeApp allows Stored XSS. This issue affects ValeApp: before v2.0.0...

7.2CVSS5.8AI score0.00279EPSS
SaveExploits0References2
CVE
CVE
added 2024/09/27 11:55 a.m.66 views

CVE-2024-8609

ValeApp (Oceanic Software) prior to version 2.0.0 has a vulnerability that allows insertion of sensitive information into log files, which can enable a query system for information. Impact and exact exploit details are not fully provided in the sources, but PT-2024-39130 notes that versions befor...

8.8CVSS5.8AI score0.00472EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/09/27 11:55 a.m.16 views

CVE-2024-8609 Improper Access Control in Oceanic Software's ValeApp

Insertion of Sensitive Information into Log File vulnerability in Oceanic Software ValeApp allows Query System for Information. This issue affects ValeApp: before v2.0.0...

8.8CVSS5.8AI score0.00472EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/09/27 11:55 a.m.22 views

CVE-2024-8609 Improper Access Control in Oceanic Software's ValeApp

Insertion of Sensitive Information into Log File vulnerability in Oceanic Software ValeApp allows Query System for Information. This issue affects ValeApp: before v2.0.0...

8.8CVSS0.00472EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/09/27 11:53 a.m.31 views

CVE-2024-8643 Session Hijacking in Oceanic Software's ValeApp

Session Fixation vulnerability in Oceanic Software ValeApp allows Brute Force, Session Hijacking. This issue affects ValeApp: before v2.0.0...

9.3CVSS0.00464EPSS
SaveExploits0References2
CVE
CVE
added 2024/09/27 11:53 a.m.51 views

CVE-2024-8643

The CVE-2024-8643 entry relates to ValeApp from Oceanic Software and is supported by PT-2024-39148 details: versions prior to 2.0.0 are affected by a Session Fixation flaw that enables Brute Force and Session Hijacking. The vulnerability description explicitly ties the issue to the authentication...

9.8CVSS5.8AI score0.00464EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/09/27 11:53 a.m.13 views

CVE-2024-8643 Session Hijacking in Oceanic Software's ValeApp

Session Fixation vulnerability in Oceanic Software ValeApp allows Brute Force, Session Hijacking. This issue affects ValeApp: before v2.0.0...

9.3CVSS5.8AI score0.00464EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/09/27 11:48 a.m.14 views

CVE-2024-8644 Cleartext Storage of Sensitive Information in Oceanic Software's ValeApp

Cleartext Storage of Sensitive Information in a Cookie vulnerability in Oceanic Software ValeApp allows Protocol Manipulation, : JSON Hijacking aka JavaScript Hijacking. This issue affects ValeApp: before v2.0.0...

9.3CVSS5.8AI score0.00268EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/09/27 11:48 a.m.30 views

CVE-2024-8644 Cleartext Storage of Sensitive Information in Oceanic Software's ValeApp

Cleartext Storage of Sensitive Information in a Cookie vulnerability in Oceanic Software ValeApp allows Protocol Manipulation, : JSON Hijacking aka JavaScript Hijacking. This issue affects ValeApp: before v2.0.0...

9.3CVSS0.00268EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/09/27 12:0 a.m.7 views

Oceanic Software ValeApp 安全漏洞

ValeApp is a mobile application from Oceanic Software for providing convenient and fast parking services. A security vulnerability previously existed in Oceanic Software ValeApp version 2.0.0, which originated from the inclusion of a sensitive information leak that could lead to JavaScript...

9.3CVSS6.3AI score0.00268EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/09/27 12:0 a.m.6 views

ValeApp 安全漏洞

ValeApp is a mobile application from Oceanic Software for providing convenient and fast parking services. A security vulnerability previously existed in ValeApp version 2.0.0, which stemmed from the inclusion of a brute-force cracking issue...

9.8CVSS6.7AI score0.00464EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/09/27 12:0 a.m.6 views

ValeApp SQL注入漏洞

ValeApp is a mobile application from Oceanic Software for providing convenient and fast parking services. A SQL injection vulnerability exists in ValeApp prior to version 2.0.0, which stems from the inclusion of a SQL injection issue...

9.8CVSS7.8AI score0.00505EPSS
SaveExploits0References2
Rows per page
Query Builder