Threat database

5 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	8.7	EPSS 0.5%	CVE-2024-8607ValeApp · SQL Injection High8.7EPSS 0.5%2024-09-27CVE Database V5CVE-2024-8607 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Oceanic Software ValeApp allows SQL Injection. This issue affects ValeApp: before v2.0.0. EPSS 0.5%Vulnerability Oceanic Software #cwe-89	CVE Database V5	2024-09-27
High	7.2	EPSS 0.3%	CVE-2024-8608ValeApp · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') High7.2EPSS 0.3%2024-09-27CVE Database V5CVE-2024-8608 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Oceanic Software ValeApp allows Stored XSS. This issue affects ValeApp: before v2.0.0. EPSS 0.3%Vulnerability Oceanic Software #cwe-79	CVE Database V5	2024-09-27
High	8.8	EPSS 0.5%	CVE-2024-8609ValeApp · Insertion of Sensitive Information into Log File High8.8EPSS 0.5%2024-09-27CVE Database V5CVE-2024-8609 Insertion of Sensitive Information into Log File vulnerability in Oceanic Software ValeApp allows Query System for Information. This issue affects ValeApp: before v2.0.0. EPSS 0.5%Vulnerability Oceanic Software #cwe-532	CVE Database V5	2024-09-27
Critical	9.3	EPSS 0.5%	CVE-2024-8643ValeApp · Session Fixation Critical9.3EPSS 0.5%2024-09-27CVE Database V5CVE-2024-8643 Session Fixation vulnerability in Oceanic Software ValeApp allows Brute Force, Session Hijacking. This issue affects ValeApp: before v2.0.0. EPSS 0.5%Vulnerability Oceanic Software #cwe-384	CVE Database V5	2024-09-27
Critical	9.3	EPSS 0.3%	CVE-2024-8644ValeApp · Cleartext Storage of Sensitive Information in a Cookie Critical9.3EPSS 0.3%2024-09-27CVE Database V5CVE-2024-8644 Cleartext Storage of Sensitive Information in a Cookie vulnerability in Oceanic Software ValeApp allows Protocol Manipulation, : JSON Hijacking (aka JavaScript Hijacking). This issue affects ValeApp: before v2.0.0. EPSS 0.3%Vulnerability Oceanic Software #cwe-315	CVE Database V5	2024-09-27

Showing 1–5 of 5 results