Disney

3 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2014-5849 Sep 09, 10:55 MEDIUM This Month

The Maleficent Free Fall (aka com.disney.maleficent_goo) application 1.2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers. Rated medium severity (CVSS 5.4). No vendor patch available.

Information Disclosure Google Maleficent Free Fall Disney

NVD

CVSS 2.0

5.4

EPSS

0.1%

CVE-2014-5607 Sep 09, 01:55 MEDIUM This Month

The Where's My Water? Free (aka com.disney.WMWLite) application 1.9.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Information Disclosure Google Where S My Water Free Disney

NVD

CVSS 2.0

5.4

EPSS

0.2%

CVE-2014-5606 Sep 09, 01:55 MEDIUM This Month

The Where's My Perry? Free (aka com.disney.WMPLite) application 1.5.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and. Rated medium severity (CVSS 5.4). No vendor patch available.

Information Disclosure Google Where S My Perry Free Disney

NVD

CVSS 2.0

5.4

EPSS

0.1%

CVE-2014-5849

EPSS 0% CVSS 5.4

MEDIUM This Month

Information Disclosure Google Maleficent Free Fall +1

NVD

CVE-2014-5607

EPSS 0% CVSS 5.4

MEDIUM This Month

Information Disclosure Google Where S My Water Free +1

NVD

CVE-2014-5606

EPSS 0% CVSS 5.4

MEDIUM This Month

Information Disclosure Google Where S My Perry Free +1

NVD