CVE-2024-8644

ValeApp (Oceanic Software) is affected by a vulnerability described as cleartext storage of sensitive information in a cookie that allows protocol manipulation / JSON hijacking. The issue impacts ValeApp versions prior to 2.0.0. Likely impact is exposure of sensitive data via cookies and potentia...

CVE-2024-8644 Cleartext Storage of Sensitive Information in Oceanic Software's ValeApp

Cleartext Storage of Sensitive Information in a Cookie vulnerability in Oceanic Software ValeApp allows Protocol Manipulation, : JSON Hijacking aka JavaScript Hijacking. This issue affects ValeApp: before v2.0.0...

CVE-2024-8644 Cleartext Storage of Sensitive Information in Oceanic Software's ValeApp

Cleartext Storage of Sensitive Information in a Cookie vulnerability in Oceanic Software ValeApp allows Protocol Manipulation, : JSON Hijacking aka JavaScript Hijacking. This issue affects ValeApp: before v2.0.0...

PT-2024-39130

Name of the Vulnerable Software and Affected Versions: ValeApp versions prior to 2.0.0 Description: The issue allows the insertion of sensitive information into a log file, enabling the query system for information. Recommendations: For versions prior to 2.0.0, update to version 2.0.0 or later to...

PT-2024-39149

Name of the Vulnerable Software and Affected Versions: ValeApp versions prior to 2.0.0 Description: The issue affects Oceanic Software ValeApp, allowing protocol manipulation through JSON Hijacking, also known as JavaScript Hijacking, due to cleartext storage of sensitive information in a cookie...

PT-2024-39129

Name of the Vulnerable Software and Affected Versions: ValeApp versions prior to 2.0.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations: For versions prior ...

ValeApp 安全漏洞

ValeApp is a mobile application from Oceanic Software for providing convenient and fast parking services. A security vulnerability previously existed in ValeApp version 2.0.0, which stemmed from the inclusion of a sensitive information disclosure issue...

ValeApp 跨站脚本漏洞

ValeApp is a mobile application from Oceanic Software for providing convenient and fast parking services. A cross-site scripting vulnerability exists in ValeApp prior to version 2.0.0, which stems from the inclusion of a cross-site scripting issue...

ValeApp 安全漏洞

ValeApp is a mobile application from Oceanic Software for providing convenient and fast parking services. A security vulnerability previously existed in ValeApp version 2.0.0, which stemmed from the inclusion of a brute-force cracking issue...

Oceanic Software ValeApp 安全漏洞

ValeApp is a mobile application from Oceanic Software for providing convenient and fast parking services. A security vulnerability previously existed in Oceanic Software ValeApp version 2.0.0, which originated from the inclusion of a sensitive information leak that could lead to JavaScript...

ValeApp SQL注入漏洞

ValeApp is a mobile application from Oceanic Software for providing convenient and fast parking services. A SQL injection vulnerability exists in ValeApp prior to version 2.0.0, which stems from the inclusion of a SQL injection issue...

PT-2024-39128

Name of the Vulnerable Software and Affected Versions: ValeApp versions prior to 2.0.0 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection, potentially compromising the securit...