The Cookpad 1.5.16 and earlier and Cookpad Noseru 1.1.1 and earlier applications for Android do not properly implement the WebView class, which allows remote attackers to obtain sensitive information. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Information Disclosure
Google
Android Activities
Android Mykitchen
NVD
CVSS 2.0
5.0
EPSS
0.5%
Cross-site scripting (XSS) vulnerability in the Gantt applet viewer in IBM Tivoli Change and Configuration Management Database (CCMDB) 7.2.1 and IBM ILOG JViews Gantt allows remote attackers to. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.
IBM
XSS
Ilog Jviews Gantt
Tivoli Change And Configuration Management Database
NVD
CVSS 2.0
4.3
EPSS
0.3%