WordPress 10Web Map Builder < 1.0.73 - Unauthenticated SQL Injection

The 10Web Map Builder for Google Maps WordPress plugin before 1.0.73 does not properly sanitise and escape some parameters before using them in an SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection id: CVE-2023-0037 info: name: WordPress 10Web Map...

CVE-2017-0037

CVE-2017-0037 Vulnerabilidad de Corrupción de Memoria del Navegador Microsoft Este documento trata sobre CVE-2017-0037 - Vulnerabilidad de Corrupción de Memoria del Navegador Microsoft. Primero presentará qué es una Ejecución Remota de Código RCE y luego repasará algunos detalles técnicos. ¿Qué e...

CVE-2016-0037

creationtimestamp| type| source ---|---|--- 2026-07-29 12:01:14+00:00| seen| Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ 2026-07-30 00:01:49+00:00| seen| Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ 2026-08-01 11:00:14+00:00| seen|...

actix-remote (0.1.0), agnostic (>=0.2.5, <=0.2.6) +264 more potentially affected by CVE-2026-31812 via quinn-proto (>=0.5.2, <=0.11.9)

quinn-proto CARGO version =0.5.2, =0.2.5, =0.1.0, =0.1.0, =0.1.0, =0.3.0, =0.5.0, =2.0.0, =0.2.3, =0.2.11 and more Source cves: CVE-2026-31812 Source advisory: OSV:RUSTSEC-2026-0037...

CVE-2026-0037

creationtimestamp| type| source ---|---|--- 2026-03-02 20:11:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg42tbjbky2u 2026-03-02 22:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mg4avy25kg26 2026-03-03 07:08:12+00:00| seen|...

CVE-2026-0037

In multiple functions of ffa.c, there is a possible memory corruption due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

MiracleLinux 3 : curl-7.15.5-2.1AXS3.4 (AXSA:2009-37:01)

The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2009-37:01 advisory. cURL is a tool for getting files from FTP, HTTP, Gopher, Telnet, and Dict servers, using any of the supported protocols. cURL is designed to work without user...

MiracleLinux 4 : raptor-1.4.18-5.AXS4.1 (AXSA:2012-453:01)

The remote MiracleLinux 4 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2012-453:01 advisory. Raptor is the RDF Parser Toolkit for Redland that provides a set of standalone RDF parsers, generating triples from RDF/XML or N-Triples. Security issues fixe...

EUVD-2026-0037

A security vulnerability has been detected in code-projects Content Management System 1.0. Impacted is an unknown function of the file /admin/editposts.php. The manipulation of the argument image leads to unrestricted upload. The attack is possible to be carried out remotely. The exploit has been...

CVE-2025-0037

creationtimestamp| type| source ---|---|--- 2025-06-10 00:33:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17814 2026-02-24 17:04:49+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116126691392778847 2026-03-10 16:05:40+00:00| seen|...

CVE-2024-0037

In applyCustomDescription of SaveUi.java, there is a possible way to view images belonging to a different user due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation...

CVE-2020-0037

In rwi93smsetreadonly of rwi93.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure over NFC with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0...

CVE-2024-0037

creationtimestamp| type| source ---|---|--- 2024-02-16 03:21:58+00:00| seen| https://t.me/ctinow/186089 2025-02-03 19:33:09+00:00| seen| https://vulnerability.circl.lu/bundle/cf59c148-4047-4ccd-8ba0-26fb7197899c...

CVE-2024-0037

The CVE-2024-0037 entry describes a local information disclosure in Android’s SaveUi.java, where applyCustomDescription can view other users’ images due to a missing permission check. Exploitation is possible with local attacker privileges and does not require user interaction. Connected document...

aries-askar (>=0.1.2, <=0.2.7), arkworks-r1cs-gadgets (>=0.5.0, <=1.2.0) +108 more potentially affected by unknown CVE via xsalsa20poly1305 (>=0.4.2, <=0.9.1)

xsalsa20poly1305 CARGO version =0.4.2, =0.1.2, =0.5.0, =0.5.0, =0.2.0-pre.1, =0.1.0, =0.1.0, =0.1.1 - bramble-handshake 0.1.0 - bramble-qr 0.1.0 - bramble-rendezvous 0.1.0 - bramble-sync 0.1.0 - bramble-transport 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0037...

CVE-2023-0037

creationtimestamp| type| source ---|---|--- 2023-03-13 19:23:12+00:00| seen| https://t.me/cibsecurity/59910 2025-03-02 11:44:20+00:00| seen| Telegram/473RzYN8J9DFpGG6FhPBWnoIOLebP5gKDXvWELJcosREZk7 2025-09-16 21:02:28+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lyy7rtxcld...

CVE-2023-0037

The 10Web Map Builder for Google Maps WordPress plugin before 1.0.73 does not properly sanitise and escape some parameters before using them in an SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection...

CVE-2023-0037 10WebMapBuilder < 1.0.73 - Unauthenticated SQLi

The 10Web Map Builder for Google Maps WordPress plugin before 1.0.73 does not properly sanitise and escape some parameters before using them in an SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection...

CVE-2023-0037

The 10Web Map Builder for Google Maps WordPress plugin, in versions prior to 1.0.73 , is vulnerable to SQL injection . The root cause is the failure to properly sanitise and escape certain parameters used in an SQL statement triggered by an AJAX action . Because this action is accessible to unaut...

CVE-2023-0037 10WebMapBuilder < 1.0.73 - Unauthenticated SQLi

The 10Web Map Builder for Google Maps WordPress plugin before 1.0.73 does not properly sanitise and escape some parameters before using them in an SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection...