115 matches found
CVE-2022-35503
Open Source MANO (OSM) versions 7–12 have a vulnerability in the LCM module container when handling a VNF descriptor due to improper verification of user input. An authenticated attacker can execute arbitrary code within the LCM container, potentially changing normal OSM component execution, leak...
CVE-2024-22519
An issue discovered in OpenDroneID OSM 3.5.1 allows attackers to impersonate other drones via transmission of crafted data packets...
Design/Logic Flaw
An issue discovered in OpenDroneID OSM 3.5.1 allows attackers to impersonate other drones via transmission of crafted data packets...
PT-2024-19462 · Unknown · Opendroneid Osm
Name of the Vulnerable Software and Affected Versions: OpenDroneID OSM version 3.5.1 Description: An issue in OpenDroneID OSM allows attackers to impersonate other drones via transmission of crafted data packets. Recommendations: For OpenDroneID OSM version 3.5.1, consider restricting the...
CVE-2024-22519
An issue discovered in OpenDroneID OSM 3.5.1 allows attackers to impersonate other drones via transmission of crafted data packets...
CVE-2024-22519
An issue discovered in OpenDroneID OSM 3.5.1 allows attackers to impersonate other drones via transmission of crafted data packets...
CVE-2024-22519
OpenDroneID OSM 3.5.1 is affected by CVE-2024-22519. Attackers can impersonate other drones by sending crafted data packets. The reported impact includes high integrity risk with network-based access and no confidentiality gain; availability impact is low. Several sources (e.g., PT-2024-19462) no...
The vulnerability of the OSMMapPMRGeneric function (pmr_os.c) in the Android operating system allows a hacker to increase their privileges.
The vulnerability of the OSMMapPMRGeneric function pmros.c in the Android operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...
CVE-2022-4676
The OSM WordPress plugin through 6.01 does not validate and escape some of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack...
CVE-2022-4676
The OSM WordPress plugin through 6.01 does not validate and escape some of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack...
Cross site scripting
The OSM WordPress plugin through 6.01 does not validate and escape some of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack...
CVE-2022-4676 OSM – OpenStreetMap <= 6.01 - Contributor+ Stored XSS via Shortcode
The OSM WordPress plugin through 6.01 does not validate and escape some of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack...
CVE-2022-4676 OSM – OpenStreetMap <= 6.01 - Contributor+ Stored XSS via Shortcode
The OSM WordPress plugin through 6.01 does not validate and escape some of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack...
CVE-2022-4676
CVE-2022-4676 affects the OSM – OpenStreetMap WordPress plugin prior to or up to version 6.01. The vulnerability arises from insufficient validation and escaping of shortcode attributes, enabling a Stored Cross-Site Scripting (XSS) attack by users with as little as a Contributor role. The CVSS v3...
WordPress OSM – OpenStreetMap Plugin < 6.0.6 is vulnerable to Cross Site Scripting (XSS)
Software OSM – OpenStreetMap Type Plugin Vulnerable versions 6.0.6 Fixed in 6.0.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-4676 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID ef5a2646cfcc Credits Lana Codes...
WordPress plugin OSM 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
OSM – OpenStreetMap <= 6.01 - Contributor+ Stored XSS via Shortcode
The plugin does not validate and escape some of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack. osmmap mapborder='3px solid black;background:red;width:100px;height:100px;" onmouseover="alert1"'...
Malicious code in il-shopify-osm-types (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59867423ea3b374a7842d8ca92f05a9b685f8c826bc45939ba1af80f2d088661 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
