Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-1999-1009

The Disney Go Express Search allows remote attackers to access and modify search information for users by connecting to an HTTP server on the user's system.

CVSS 2.0 · 2.6 Low EPSS 1.5% KEV · Not listed
Vendors
Disney
Products
Go Express Search
CVE-2014-5606

The Where's My Perry? Free (aka com.disney.WMPLite) application 1.5.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

CVSS 2.0 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Disney
Products
Where\'s My Perry\? Free
CVE-2014-5607

The Where's My Water? Free (aka com.disney.WMWLite) application 1.9.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

CVSS 2.0 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Disney
Products
Where\'s My Water\? Free
CVE-2014-5849

The Maleficent Free Fall (aka com.disney.maleficent_goo) application 1.2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

CVSS 2.0 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Disney
Products
Maleficent Free Fall