CVE-2014-7072

The CVE-2014-7072 entry concerns the Venezia map (com.wVeneziamap) Android app version 0.1, which does not verify X.509 certificates from SSL servers. This behavior enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The available sourc...

CVE-2014-7321: Undefined Security Weakness

The Firenze map aka com.wFirenzemap application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7072: Undefined Security Weakness

The Venezia map aka com.wVeneziamap application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

kernel: kvm: invalid parameter passing in kvm_iommu_map_pages()

A flaw was found in the way the Linux kernel's kvmiommumappages function handled IOMMU mapping failures. A privileged user in a guest with an assigned host device could use this flaw to crash the host...

find.germany-map.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-51600 Description| Value ---|--- Affected Website:| find.germany-map.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet...

CVE-2014-6295

SQL injection vulnerability in the WEC Map wecmap extension before 3.0.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the WEC Map wecmap extension before 3.0.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the WEC Map wecmap extension before 3.0.3 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-6295

The CVE-2014-6295 case concerns the WEC Map (wec_map) extension for TYPO3. Affected versions include 3.0.2 and earlier, with vulnerabilities described as SQL Injection (and related Cross‑Site Scripting) that allow remote execution of arbitrary SQL commands via unspecified vectors. Remediation is ...

CVE-2014-6296

Cross-site scripting XSS vulnerability in the WEC Map wecmap extension before 3.0.3 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-6296

Cross-site scripting XSS vulnerability in the WEC Map wecmap extension before 3.0.3 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-6296

Summary: The WEC Map (wec_map) TYPO3 extension is affected by CVE-2014-6295 (SQL Injection) and CVE-2014-6296 (XSS) in versions up to 3.0.2/3.0.2. The described XSS allows remote injection of script via unspecified vectors; in some sources, 3.0.3 is the fixed release. Root cause: improper input h...

CVE-2014-6295

SQL injection vulnerability in the WEC Map wecmap extension before 3.0.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-6897

The Skyrim Map aka com.neko.skyrimmap application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Skyrim Map aka com.neko.skyrimmap application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6897

The Skyrim Map (com.neko.skyrimmap) Android app version 2.1 contains a certificate validation flaw: it does not verify X.509 certificates from SSL servers. This enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The CVE-2014-6897 entry...

CVE-2014-6897

The Skyrim Map aka com.neko.skyrimmap application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6897: Undefined Security Weakness

The Skyrim Map aka com.neko.skyrimmap application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6295: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the WEC Map wecmap extension before 3.0.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2014-7139

Name of the Vulnerable Software and Affected Versions TYPO3 extension wec map versions prior to 3.0.3 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 3.0.3, update to version 3.0.3 or later to resolve the issue...