CVE-2014-6859

The CVE-2014-6859 entry applies to Daum Maps - Subway (net.daum.android.map) 3.9.1 on Android, where the app does not verify X.509 certificates from SSL servers. This lack of certificate validation enables man-in-the-middle attackers to spoof servers and access sensitive information via a crafted...

CVE-2014-6859

The Daum Maps - Subway aka net.daum.android.map application 3.9.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

[SECURITY] Fedora 20 Update: marble-4.14.1-1.fc20

Marble is a Virtual Globe and World Atlas that you can use to learn more about Earth: You can pan and zoom around and you can look up places and roads. A mouse click on a place label will provide the respective Wikipedia article. Of course it's also possible to measure distances between locations...

WordPress WP Google Maps Plugin <= 6.0.26 - Multiple XSS

Because of these vulnerabilities, the attackers can inject arbitrary web script or HTML via the "polyid" parameter. Solution Update the plugin...

Multiple Cross-Site Scripting (XSS) in WP Google Maps WordPress Plugin

High-Tech Bridge Security Research Lab discovered three XSS vulnerabilities in WP Google Maps WordPress plugin, which can be exploited to perform Cross-Site Scripting XSS attacks against administrators of vulnerable WP website. 1 Multiple XSS in WP Google Maps WordPress plugin: CVE-2014-7182 1.1...

Google Maps Ready! 1.1.5 - CSRF & XSS

The google-maps-ready WordPress plugin was affected by a CSRF & XSS security vulnerability...

WordPress Google Maps Ready! Plugin - 1.1.5 - Multiple Vulnerabilities

This plugin is prone to a cross site scripting and cross site request forgery vulnerabilities. Solution Update the plugin...

SA-CONTRIB-2014-089 - Geofield Yandex Maps - Cross Site Scripting (XSS)

The Geofield Yandex Maps module provides a Geofield widget, Geofield formatter, Views handler, Form element and Text filter to allow Yandex maps to be added to a site. The module does not sufficiently filter user-supplied text, resulting in a persistent Cross Site Scripting XSS vulnerability. The...

CVE-2014-6239

SQL injection vulnerability in the Address visualization with Google Maps staddressmap extension before 0.3.6 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the Address visualization with Google Maps staddressmap extension before 0.3.6 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-6239

The CVE-2014-6239 issue affects the TYPO3 extension Address visualization with Google Maps (st_address_map). The vulnerability is a SQL injection in st_address_map prior to version 0.3.6 that allows remote attackers to execute arbitrary SQL commands via unspecified vectors. The TYPO3 security bul...

CVE-2014-6239

SQL injection vulnerability in the Address visualization with Google Maps staddressmap extension before 0.3.6 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CSRF, XSS Vulnerabilities Afflict Wordpress Plugins

A smattering of bugs, mostly cross-site scripting XSS and cross-site request forgery CSRF vulnerabilities, have been plaguing at least eight different WordPress plugins as of late. A security researcher going by the pseudonym Voxel@Night published on Monday information regarding the...

CVE-2014-2628

Unspecified vulnerability in HP Enterprise Maps 1 allows remote authenticated users to obtain sensitive information via unknown vectors...

Code injection

Unspecified vulnerability in HP Enterprise Maps 1 allows remote authenticated users to obtain sensitive information via unknown vectors...

CVE-2014-2628

CVE-2014-2628 concerns HP Enterprise Maps 1, where remote authenticated users can disclose sensitive information via unknown vectors. The vulnerability is documented in HP’s security bulletin HPSBMU03081 rev.1, which specifies that only HP Enterprise Maps v1 is affected and that HP has provided a...

CVE-2014-2628

Unspecified vulnerability in HP Enterprise Maps 1 allows remote authenticated users to obtain sensitive information via unknown vectors...

[security bulletin] HPSBMU03081 rev.1 - HP Enterprise Maps, Remote Information Disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04390793 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04390793 Version: 1 HPSBMU03081 rev....

Basic Google Maps Placemarks 1.10.2 - settings.php Multiple Fields Stored XSS Weakness

The Basic Google Maps Placemarks WordPress plugin was affected by a settings.php Multiple Fields Stored XSS Weakness security vulnerability...

Leaflet Maps Marker 3.5.2 - Two SQL Injection Vulnerabilities

The Leaflet Maps Marker Google Maps, OpenStreetMap, Bing Maps WordPress plugin was affected by a Two SQL Injection Vulnerabilities security vulnerability...