8938 matches found
PT-2014-8494
Name of the Vulnerable Software and Affected Versions Linux kernel versions through 3.17.2 Description The issue arises from a miscalculation in the number of pages by the kvm iommu map pages function during the handling of a mapping failure, allowing guest OS users with privileges to cause a...
Visitors Google Map Lite module mod_visitorsgooglemap SQL Injection
An SQL injection vulnerability has been reported in Visitors Google Map Lite module Mod Visitorsgooglemap. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
[ MDVSA-2014:201 ] kernel
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:201 http://www.mandriva.com/en/support/security/ Package : kernel Date : October 21, 2014 Affected: Business Server 1.0 Problem Description: Multiple vulnerabilities has been found and corrected in the Linux...
CVE-2014-7321
The Firenze map aka com.wFirenzemap application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Information disclosure
The Firenze map aka com.wFirenzemap application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7321
The Firenze map aka com.wFirenzemap application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7321
The CVE-2014-7321 entry concerns the Firenze map (com.wFirenzemap) Android app version 0.1, which does not verify SSL X.509 certificates. This enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Documents across NVD, CVE list, and PrIoN...
CVE-2014-7072
The Venezia map aka com.wVeneziamap application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Information disclosure
The Venezia map aka com.wVeneziamap application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7072
The CVE-2014-7072 entry concerns the Venezia map (com.wVeneziamap) Android app version 0.1, which does not verify X.509 certificates from SSL servers. This behavior enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The available sourc...
CVE-2014-7072
The Venezia map aka com.wVeneziamap application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7072: Undefined Security Weakness
The Venezia map aka com.wVeneziamap application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7321: Undefined Security Weakness
The Firenze map aka com.wFirenzemap application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
kernel: kvm: invalid parameter passing in kvm_iommu_map_pages()
A flaw was found in the way the Linux kernel's kvmiommumappages function handled IOMMU mapping failures. A privileged user in a guest with an assigned host device could use this flaw to crash the host...
find.germany-map.com Open Redirect vulnerability
Open Bug Bounty ID: OBB-51600 Description| Value ---|--- Affected Website:| find.germany-map.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet...
CVE-2014-6295
SQL injection vulnerability in the WEC Map wecmap extension before 3.0.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in the WEC Map wecmap extension before 3.0.3 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Sql injection
SQL injection vulnerability in the WEC Map wecmap extension before 3.0.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2014-6296
Summary: The WEC Map (wec_map) TYPO3 extension is affected by CVE-2014-6295 (SQL Injection) and CVE-2014-6296 (XSS) in versions up to 3.0.2/3.0.2. The described XSS allows remote injection of script via unspecified vectors; in some sources, 3.0.3 is the fixed release. Root cause: improper input h...
