3399 matches found
CVE-2014-6859
The Daum Maps - Subway aka net.daum.android.map application 3.9.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Information disclosure
The Daum Maps - Subway aka net.daum.android.map application 3.9.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6859
The Daum Maps - Subway aka net.daum.android.map application 3.9.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6859
The CVE-2014-6859 entry applies to Daum Maps - Subway (net.daum.android.map) 3.9.1 on Android, where the app does not verify X.509 certificates from SSL servers. This lack of certificate validation enables man-in-the-middle attackers to spoof servers and access sensitive information via a crafted...
CVE-2014-6859: Undefined Security Weakness
The Daum Maps - Subway aka net.daum.android.map application 3.9.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
[SECURITY] Fedora 20 Update: marble-4.14.1-1.fc20
Marble is a Virtual Globe and World Atlas that you can use to learn more about Earth: You can pan and zoom around and you can look up places and roads. A mouse click on a place label will provide the respective Wikipedia article. Of course it's also possible to measure distances between locations...
WordPress WP Google Maps Plugin <= 6.0.26 - Multiple XSS
Because of these vulnerabilities, the attackers can inject arbitrary web script or HTML via the "polyid" parameter. Solution Update the plugin...
Multiple Cross-Site Scripting (XSS) in WP Google Maps WordPress Plugin
High-Tech Bridge Security Research Lab discovered three XSS vulnerabilities in WP Google Maps WordPress plugin, which can be exploited to perform Cross-Site Scripting XSS attacks against administrators of vulnerable WP website. 1 Multiple XSS in WP Google Maps WordPress plugin: CVE-2014-7182 1.1...
Google Maps Ready! 1.1.5 - CSRF & XSS
The google-maps-ready WordPress plugin was affected by a CSRF & XSS security vulnerability...
SA-CONTRIB-2014-089 - Geofield Yandex Maps - Cross Site Scripting (XSS)
The Geofield Yandex Maps module provides a Geofield widget, Geofield formatter, Views handler, Form element and Text filter to allow Yandex maps to be added to a site. The module does not sufficiently filter user-supplied text, resulting in a persistent Cross Site Scripting XSS vulnerability. The...
WordPress Google Maps Ready! Plugin - 1.1.5 - Multiple Vulnerabilities
This plugin is prone to a cross site scripting and cross site request forgery vulnerabilities. Solution Update the plugin...
CVE-2014-6239
SQL injection vulnerability in the Address visualization with Google Maps staddressmap extension before 0.3.6 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
Sql injection
SQL injection vulnerability in the Address visualization with Google Maps staddressmap extension before 0.3.6 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2014-6239
SQL injection vulnerability in the Address visualization with Google Maps staddressmap extension before 0.3.6 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2014-6239
The CVE-2014-6239 issue affects the TYPO3 extension Address visualization with Google Maps (st_address_map). The vulnerability is a SQL injection in st_address_map prior to version 0.3.6 that allows remote attackers to execute arbitrary SQL commands via unspecified vectors. The TYPO3 security bul...
CVE-2014-6239: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the Address visualization with Google Maps staddressmap extension before 0.3.6 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CSRF, XSS Vulnerabilities Afflict Wordpress Plugins
A smattering of bugs, mostly cross-site scripting XSS and cross-site request forgery CSRF vulnerabilities, have been plaguing at least eight different WordPress plugins as of late. A security researcher going by the pseudonym Voxel@Night published on Monday information regarding the...
CVE-2014-2628
Unspecified vulnerability in HP Enterprise Maps 1 allows remote authenticated users to obtain sensitive information via unknown vectors...