Show filters
5 Total Results
Displaying 1-5 of 5
Sort by:
Attacker Value
Unknown

CVE-2024-8644

Disclosure Date: September 27, 2024 (last updated October 05, 2024)
Cleartext Storage of Sensitive Information in a Cookie vulnerability in Oceanic Software ValeApp allows Protocol Manipulation, : JSON Hijacking (aka JavaScript Hijacking).This issue affects ValeApp: before v2.0.0.
Attacker Value
Unknown

CVE-2024-8643

Disclosure Date: September 27, 2024 (last updated October 05, 2024)
Session Fixation vulnerability in Oceanic Software ValeApp allows Brute Force, Session Hijacking.This issue affects ValeApp: before v2.0.0.
Attacker Value
Unknown

CVE-2024-8609

Disclosure Date: September 27, 2024 (last updated October 05, 2024)
Insertion of Sensitive Information into Log File vulnerability in Oceanic Software ValeApp allows Query System for Information.This issue affects ValeApp: before v2.0.0.
Attacker Value
Unknown

CVE-2024-8608

Disclosure Date: September 27, 2024 (last updated October 05, 2024)
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Oceanic Software ValeApp allows Stored XSS.This issue affects ValeApp: before v2.0.0.
Attacker Value
Unknown

CVE-2024-8607

Disclosure Date: September 27, 2024 (last updated October 05, 2024)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Oceanic Software ValeApp allows SQL Injection.This issue affects ValeApp: before v2.0.0.