Lucene search
+L

9174 matches found

osv_cve
osv_cve
•added 2022/03/30 4:15 p.m.•27 views

CVE-2021-39739

In ArrayMap, there is a possible leak of the content of SMS messages due to log information disclosure. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID:...

3.3CVSS5.9AI score0.0011EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/03/28 6:15 p.m.•16 views

CVE-2021-24978

The OSMapper WordPress plugin through 2.1.5 contains an AJAX action to delete a plugin related post type named 'map' and is registered with the wpajaxnopriv prefix, making it available to unauthenticated users. There is no authorisation, CSRF and checks in place to ensure that the post to delete ...

5.3CVSS6.1AI score0.00527EPSS
SaveExploits2References2
osv_cve
osv_cve
•added 2022/03/28 6:15 p.m.•31 views

CVE-2021-24978

The OSMapper WordPress plugin through 2.1.5 contains an AJAX action to delete a plugin related post type named 'map' and is registered with the wpajaxnopriv prefix, making it available to unauthenticated users. There is no authorisation, CSRF and checks in place to ensure that the post to delete ...

5.3CVSS5.9AI score0.00527EPSS
SaveExploits2References1
OpenVAS
OpenVAS
•added 2022/03/24 12:00 a.m.•62 views

WordPress WP Google Map Plugin <= 4.2.3 CSRF Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:flippercode:wpgooglemap"; ifdescription...

8.8CVSS8.8AI score0.00568EPSS
SaveExploits0References2
osv_clsa
osv_clsa
•added 2022/03/23 8:38 p.m.•28 views

CLSA-2022-1648067906 Fix of CVE: CVE-2020-25717

CVE-2020-25717: Fix username map script regression rhbz2046174 - Fix possible segfault while joining a domain rhbz2046160...

8.5CVSS5.8AI score0.01625EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2022/03/23 8:15 p.m.•22 views

CVE-2021-27424

GE UR firmware versions prior to version 8.1x shares MODBUS memory map as part of the communications guide. GE was made aware a “Last-key pressed” MODBUS register can be used to gain unauthorized information...

5.3CVSS6.2AI score0.00854EPSS
SaveExploits0References2
NVD
NVD
•added 2022/03/23 8:15 p.m.•35 views

CVE-2021-27424

GE UR firmware versions prior to version 8.1x shares MODBUS memory map as part of the communications guide. GE was made aware a “Last-key pressed” MODBUS register can be used to gain unauthorized information...

5.3CVSS0.00854EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2022/03/21 7:36 a.m.•19 views

OpenJDK: Incorrect IdentityHashMap size checks during deserialization (Libraries, 8270416)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability...

5.3CVSS5.5AI score0.0335EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2022/03/19 12:00 a.m.•12 views

PT-2022-36882

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash reported by OSS-Fuzz, with a Segv on an unknown address. The crash occurs in the flb config map properties check function, ...

5.8AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/03/18 12:00 a.m.•8 views

PT-2022-29087

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.15 through v5.15.25 Description The issue is related to a crash due to incorrect copy map value in bpf. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions v5.1...

5.8AI score
SaveExploits0References1
OSS-Fuzz
OSS-Fuzz
•added 2022/03/17 5:23 p.m.•92 views

fluent-bit:flb-it-fuzz-config_map_fuzzer_OSSFUZZ: Segv on unknown address in flb_config_map_properties_check

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=5072466567888896 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-configmapfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Segv on unknown...

5.8AI score
SaveExploits0
CNVD
CNVD
•added 2022/03/15 12:00 a.m.•87 views

WordPress WP Google Map plugin cross-site request forgery vulnerability

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports the hosting of personal blogging sites on servers with PHP and MySQL. WordPress plugin is a WordPress open source application plugin. WordPress WP Google Map plugin version 4.2...

8.8CVSS1.5AI score0.00568EPSS
SaveExploits0References1
NVD
NVD
•added 2022/03/11 6:15 p.m.•45 views

CVE-2022-25600

Cross-Site Request Forgery CSRF vulnerability affecting Delete Marker Category, Delete Map, and Copy Map functions in WP Google Map plugin versions = 4.2.3...

8.8CVSS0.00568EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2022/03/11 6:15 p.m.•25 views

CVE-2022-25600

Cross-Site Request Forgery CSRF vulnerability affecting Delete Marker Category, Delete Map, and Copy Map functions in WP Google Map plugin versions = 4.2.3...

8.8CVSS5.5AI score0.00568EPSS
SaveExploits0References5
Prion
Prion
•added 2022/03/11 6:15 p.m.•38 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability affecting Delete Marker Category, Delete Map, and Copy Map functions in WP Google Map plugin versions = 4.2.3...

6.8CVSS8.8AI score0.00568EPSS
SaveExploits0References5Affected Software2
Vulnrichment
Vulnrichment
•added 2022/03/11 5:54 p.m.•11 views

CVE-2022-25600 WordPress WP Google Map plugin <= 4.2.3 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability affecting Delete Marker Category, Delete Map, and Copy Map functions in WP Google Map plugin versions = 4.2.3...

5.4CVSS7AI score0.00568EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2022/03/11 5:54 p.m.•58 views

CVE-2022-25600 WordPress WP Google Map plugin <= 4.2.3 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability affecting Delete Marker Category, Delete Map, and Copy Map functions in WP Google Map plugin versions = 4.2.3...

5.4CVSS9AI score0.00568EPSS
SaveExploits0References5
CVE
CVE
•added 2022/03/11 5:54 p.m.•142 views

CVE-2022-25600

Summary: CVE-2022-25600 is a CSRF vulnerability in the WordPress WP Google Map plugin, affected

8.8CVSS7AI score0.00568EPSS
SaveExploits0References5Affected Software1
Positive Technologies
Positive Technologies
•added 2022/03/11 12:00 a.m.•11 views

PT-2022-17394

Name of the Vulnerable Software and Affected Versions WP Google Map plugin versions = 4.2.3 Description The issue is a Cross-Site Request Forgery CSRF vulnerability that affects certain functions in the WP Google Map plugin, specifically the Delete Marker Category, Delete Map, and Copy Map...

8.8CVSS0.00568EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/11 12:00 a.m.•10 views

CVE-2022-25600: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability affecting Delete Marker Category, Delete Map, and Copy Map functions in WP Google Map plugin versions = 4.2.3...

8.8CVSS7.8AI score0.00568EPSS
SaveExploits0References3
Rows per page
Query Builder