2704 matches found
CVE-2018-17947
The Snazzy Maps plugin before 1.1.5 for WordPress has XSS via the text or tab parameter...
[SECURITY] Fedora 27 Update: libxkbcommon-0.8.2-1.fc27
libxkbcommon is the X.Org library for compiling XKB maps into formats usabl e by the X Server or other display servers...
Microsoft Windows Defender AV: Configure the Block at First Sight feature
This test checks the setting for policy OpenVAS Vulnerability Test $Id: winavblockatfirstsight.nasl 11495 2018-09-20 10:06:25Z emoss $ Check value for Configure the 'Block at First Sight' feature Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net...
Microsoft Windows Defender AV: Configure local setting override for reporting to Microsoft MAPS
This policy setting configures a local override for the configuration to join Microsoft MAPS. This setting can only be set by Group Policy. If you enable this setting, the local preference setting will take priority over Group Policy. If you disable or do not configure this setting, Group Policy...
[SECURITY] Fedora 28 Update: libxkbcommon-0.8.2-1.fc28
libxkbcommon is the X.Org library for compiling XKB maps into formats usabl e by the X Server or other display servers...
WordPress Snazzy Maps plugin <= 1.1.3 - Multiple Cross-Site Scripting (XSS) vulnerabilities
Multiple Cross-Site Scripting XSS vulnerabilities found by DefenseCode in WordPress Snazzy Maps plugin versions = 1.1.3. Solution Update the WordPress Snazzy Maps plugin to the latest available version at least 1.1.5...
WordPress Snazzy Maps 1.1.3 Cross Site Scripting Vulnerability
Exploit for php platform in category web applications Advisory Title: WordPress Snazzy Maps Plugin Multiple XSS Vulnerabilities Advisory URL: http://www.defensecode.com/advisories.php Software: WordPress Snazzy Maps plugin Language: PHP Version: 1.1.3 and below Vendor Status: Vendor contacted, no...
Multiple Cross-Site Scripting Vulnerabilities in WordPress Snazzy Maps Plugin
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. Multiple cross-site scripting vulnerabilities exist in the WordPress Snazzy Maps plugin, which can be exploited by an attacke...
WordPress Snazzy Maps 1.1.3 Cross Site Scripting
DefenseCode ThunderScan SAST Advisory: WordPress Snazzy Maps Plugin Multiple XSS Security Vulnerabilities Advisory ID: DC-2018-05-006 Advisory Title: WordPress Snazzy Maps Plugin Multiple XSS Vulnerabilities Advisory URL: http://www.defensecode.com/advisories.php Software: WordPress Snazzy Maps...
Snazzy Maps <= 1.1.3 - Multiple Cross-Site Scripting (XSS)
The Snazzy Maps WordPress plugin was affected by a Multiple Cross-Site Scripting XSS security vulnerability...
Road navigation systems can be spoofed using $223 equipment
By Waqas Researchers from a number of renowned institutions including Virginia Tech, the University of Electronic Science and Technology of China and Microsoft Research have concluded that it is possible to spoof GPS signals and send people in the wrong direction. The ironic part is that such an...
CVE-2017-14709
The komoot GmbH "Komoot - Cycling & Hiking Maps" app before 9.3.2 -- aka komoot-cycling-hiking-maps/id447374873 -- for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Information disclosure
The komoot GmbH "Komoot - Cycling & Hiking Maps" app before 9.3.2 -- aka komoot-cycling-hiking-maps/id447374873 -- for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2017-14709
The komoot GmbH "Komoot - Cycling & Hiking Maps" app before 9.3.2 -- aka komoot-cycling-hiking-maps/id447374873 -- for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
WordPress Google Maps Plugin SQL Injection
An SQL injection vulnerability exists in the WordPress Google Maps Plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
CVE-2018-12716
The API service on Google Home and Chromecast devices before mid-July 2018 does not prevent DNS rebinding attacks from reading the scanresults JSON data, which allows remote attackers to determine the physical location of most web browsers by leveraging the presence of one of these devices on its...
Cross site request forgery (csrf)
The API service on Google Home and Chromecast devices before mid-July 2018 does not prevent DNS rebinding attacks from reading the scanresults JSON data, which allows remote attackers to determine the physical location of most web browsers by leveraging the presence of one of these devices on its...
Satellite Tracking Application: Gpredict
Gpredict is a real-time satellite tracking and orbit prediction application. It can track a large number of satellites and display their position and other data in lists, tables, maps, and polar plots radar view. Gpredict can also predict the time of future passes for a satellite, and provide you...
Microsoft Windows 10: Service: Downloaded Maps Manager
This test checks the setting for policy OpenVAS Vulnerability Test $Id: windownloadedmapsmanager.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Downloaded Maps Manager MapsBroker Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This...