CVE-2024-35545

MAP-OS v4.45.0 and earlier was discovered to contain a cross-site scripting XSS vulnerability...

CVE-2024-35545

MAP-OS v4.45.0 and earlier was discovered to contain a cross-site scripting XSS vulnerability...

PT-2024-26533 · Mapos · Mapos

Name of the Vulnerable Software and Affected Versions: MAP-OS versions 4.45.0 and earlier Description: The issue is related to a cross-site scripting XSS vulnerability. Cross-site scripting is a type of security vulnerability that occurs when an attacker is able to inject malicious scripts into a...

CVE-2024-35545

MAP-OS v4.45.0 and earlier contains a cross-site scripting (XSS) vulnerability. The issue affects MAP-OS versions up to 4.45.0; root cause details are not explicitly provided in the documents. The CVSS 3.1 base score is 6.1 (Medium) with network attack vector, user interaction required, and chang...

CVE-2024-35545

MAP-OS v4.45.0 and earlier was discovered to contain a cross-site scripting XSS vulnerability...

CVE-2024-36819

MAP-OS 4.45.0 and earlier is vulnerable to Cross-Site Scripting XSS. This vulnerability allows malicious users to insert a malicious payload into the "Client Name" input. When a service order from this client is created, the malicious payload is displayed on the administrator and employee...

CVE-2024-36819

MAP-OS 4.45.0 and earlier is vulnerable to Cross-Site Scripting XSS. This vulnerability allows malicious users to insert a malicious payload into the "Client Name" input. When a service order from this client is created, the malicious payload is displayed on the administrator and employee...

Malicious code in source-map-sync-tool (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-3034 Malicious code in source-map-sync-tool (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in pxs-map (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2905 Malicious code in pxs-map (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2820 Malicious code in @ozon-shared-deps/ozon-maps__map-sdk (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2650 Malicious code in @b2bgeo/map-icons (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @b2bgeo/map-icons (npm)

--- -= Per source details. Do not edit below this line.=-...

PT-2024-27168 · Mapos · Mapos

Name of the Vulnerable Software and Affected Versions: MAP-OS versions 4.45.0 and earlier Description: The issue allows malicious users to insert a malicious payload into the Client Name input, resulting in unauthorized script execution on the administrator and employee dashboards when a service...

CVE-2024-36819

MAP-OS 4.45.0 and earlier is vulnerable to Cross-Site Scripting XSS. This vulnerability allows malicious users to insert a malicious payload into the "Client Name" input. When a service order from this client is created, the malicious payload is displayed on the administrator and employee...

CVE-2024-36819

MAP-OS 4.45.0 and earlier is vulnerable to Cross-Site Scripting XSS. This vulnerability allows malicious users to insert a malicious payload into the "Client Name" input. When a service order from this client is created, the malicious payload is displayed on the administrator and employee...

CVE-2024-36819

MAP-OS

SUSE CVE-2024-38662

In the Linux kernel, the following vulnerability has been resolved: bpf: Allow delete from sockmap/sockhash only if update is allowed We have seen an influx of syzkaller reports where a BPF program attached to a tracepoint triggers a locking rule violation by performing a mapdelete on a...

DEBIAN-CVE-2024-34030

In the Linux kernel, the following vulnerability has been resolved: PCI: ofproperty: Return error for intmap allocation failure Return -ENOMEM from ofpcipropintrmap if kcalloc fails to prevent a NULL pointer dereference in this case. bhelgaas: commit log...