Lucene search
K

9 matches found

RedhatCVE
RedhatCVE
added 2026/02/07 7:22 a.m.2 views

CVE-2026-0521

A reflected cross-site scripting XSS vulnerability in the PDF export functionality of the TYDAC AG MAP+ solution allows unauthenticated attackers to craft a malicious URL, that if visited by a victim, will execute arbitrary JavaScript in the victim's context. Such a URL could be delivered through...

7.1CVSS5.4AI score0.0003EPSS
Exploits1References1
OSV
OSV
added 2026/02/06 7:16 a.m.0 views

CVE-2026-0521

A reflected cross-site scripting XSS vulnerability in the PDF export functionality of the TYDAC AG MAP+ solution allows unauthenticated attackers to craft a malicious URL, that if visited by a victim, will execute arbitrary JavaScript in the victim's context. Such a URL could be delivered through...

6.1CVSS5.9AI score0.0003EPSS
Exploits1References2
NVD
NVD
added 2026/02/06 7:16 a.m.2 views

CVE-2026-0521

A reflected cross-site scripting XSS vulnerability in the PDF export functionality of the TYDAC AG MAP+ solution allows unauthenticated attackers to craft a malicious URL, that if visited by a victim, will execute arbitrary JavaScript in the victim's context. Such a URL could be delivered through...

7.1CVSS0.0003EPSS
Exploits1References2
CVE
CVE
added 2026/02/06 6:17 a.m.9 views

CVE-2026-0521

CVE-2026-0521 is a reflected XSS in TYDAC AG MAP+ PDF export. Affects MAP+ 3.4.0; an unauthenticated attacker can craft a malicious URL that, when visited by a victim, executes arbitrary JavaScript in the victim’s context. Verified in MAP+: 3.4.0. Remediation: there is no confirmed fixed version ...

7.1CVSS5.4AI score0.0003EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2026/02/06 6:17 a.m.27 views

CVE-2026-0521 Reflected Cross-Site Scripting in PDF Export Error Message

A reflected cross-site scripting XSS vulnerability in the PDF export functionality of the TYDAC AG MAP+ solution allows unauthenticated attackers to craft a malicious URL, that if visited by a victim, will execute arbitrary JavaScript in the victim's context. Such a URL could be delivered through...

7.1CVSS0.0003EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2026/02/06 6:17 a.m.2 views

CVE-2026-0521

A reflected cross-site scripting XSS vulnerability in the PDF export functionality of the TYDAC AG MAP+ solution allows unauthenticated attackers to craft a malicious URL, that if visited by a victim, will execute arbitrary JavaScript in the victim's context. Such a URL could be delivered through...

7.1CVSS5.4AI score0.0003EPSS
Exploits1References3
EUVD
EUVD
added 2026/02/06 6:17 a.m.1 views

EUVD-2026-5678

A reflected cross-site scripting XSS vulnerability in the PDF export functionality of the TYDAC AG MAP+ solution allows unauthenticated attackers to craft a malicious URL, that if visited by a victim, will execute arbitrary JavaScript in the victim's context. Such a URL could be delivered through...

7.1CVSS5.4AI score0.0003EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2026/02/06 6:17 a.m.3 views

CVE-2026-0521 Reflected Cross-Site Scripting in PDF Export Error Message

A reflected cross-site scripting XSS vulnerability in the PDF export functionality of the TYDAC AG MAP+ solution allows unauthenticated attackers to craft a malicious URL, that if visited by a victim, will execute arbitrary JavaScript in the victim's context. Such a URL could be delivered through...

7.1CVSS5.4AI score0.0003EPSS
Exploits1References2
CNNVD
CNNVD
added 2026/02/06 12:0 a.m.2 views

TYDAC AG MAP+ 安全漏洞

TYDAC AG MAP+ is a geographic information system platform developed by the Swiss company TYDAC. Version 3.4.0 of TYDAC AG MAP+ contains a security vulnerability. This vulnerability stems from a reflection-type cross-site scripting vulnerability in the PDF export function, which could allow...

7.1CVSS5.9AI score0.0003EPSS
Exploits1References2
Rows per page
Query Builder