Summary=========The CBSSports.com fantasy sports sites did not properly enforce access control between user accounts at the same privilege level within the application. This behavior could be leveraged by an attacker […]
Summary=======The UFC on Xbox LIVE application for Android (version 1.0) stores sensitive information in cleartext within the SQLite database. CVE number: Not AssignedImpact: MediumVendor homepage: http://www.microsoft.com/Vendor notified: 12/13/2012Vendor fixed: N/A – […]
Summary=======HelpBridge application for Android (version 1.0.2) stores sensitive information in cleartext within the SQLite database. CVE number: Not AssignedImpact: MediumVendor homepage: http://www.microsoft.com/Vendor notified: 12/13/2012Vendor fixed: 4/15/2013Credit: Christopher Emerson of White […]
Summary=======MSN World application for Android (version 1.4.2) stores sensitive information in cleartext within the SQLite database. CVE number: Not AssignedImpact: MediumVendor homepage: http://www.microsoft.com/Vendor notified: 12/13/2012Vendor fixed: 1/30/2013Credit: Christopher Emerson of […]
Summary=======My Xbox Live application for Android (version 1.0) stores sensitive information in cleartext within the SQLite database. Microsoft was originally notified of this issue November 29, 2012. The details of […]
Summary==========Microsoft Lync 2010 fails to properly sanitize user-supplied input, which can lead to remote code execution. Microsoft was originally notified of this issue December 11, 2012. The details of this […]
WordPress 3.4.2 fails to invalidate a user’s sessions upon logout.
