https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T23:39:32.655465+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2014-1423 CVE-2014-1423 — Online Accounts Signon daemon gives out all oauth tokens to any app 2026-10-12T23:39:32.670857+00:00

Affected: Ubuntu signon

signond before 8.57+15.04.20141127.1-0ubuntu1, as used in Ubuntu Touch, did not properly restrict applications from querying oath tokens due to incorrect checks and the missing installation of the signon-apparmor-extension. An attacker could use this create a malicious click app that collects oauth tokens for other applications, exposing sensitive information.