Vulnerabilities

TI-2017-11383 CVE-2017-15582 · GHSA-2r5h-7mq7-4q8v

In net.MCrypt in the "Diary with lock" (aka WriteDiary) application 4.72 for Android…

LOW 35

In net.MCrypt in the "Diary with lock" (aka WriteDiary) application 4.72 for Android, hardcoded SecretKey and iv variables are used for the AES parameters, which makes it easier for attackers to obtain the cleartext of s…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01087 Published 2017-10-27 No fix listed CWE-798

TI-2017-11382 CVE-2017-15581 · GHSA-fxjf-c6gv-24xp

In the "Diary with lock" (aka WriteDiary) application 4.72 for Android, neither HTTPS nor…

LOW 34

In the "Diary with lock" (aka WriteDiary) application 4.72 for Android, neither HTTPS nor other encryption is used for transmitting data, despite the documentation that the product is intended for "a personal journal of…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.00851 Published 2017-10-27 No fix listed CWE-311

Vulnerabilities

Filters

In net.MCrypt in the "Diary with lock" (aka WriteDiary) application 4.72 for Android…

In the "Diary with lock" (aka WriteDiary) application 4.72 for Android, neither HTTPS nor…