Lucene search
K

99 matches found

CVE
CVE
added 2025/01/22 2:31 p.m.45 views

CVE-2025-22772

CVE-2025-22772 denotes a Reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin/package Mapbox for WP Advanced (notFound feature). The root cause, per the description, is the Improp er Neutralization of Input During Web Page Generation . It affects the component that handles N...

7.1CVSS7.2AI score0.00232EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/01/22 2:31 p.m.22 views

CVE-2025-22772 WordPress Mapbox for WP Advanced Plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in stephanemartinw Mapbox for WP Advanced mapbox-for-wp-advanced allows Reflected XSS.This issue affects Mapbox for WP Advanced: from n/a through = 1.0.0...

7.1CVSS0.00232EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/01/22 12:0 a.m.2 views

PT-2025-4689 · Mapbox · Mapbox For Wp Advanced

Name of the Vulnerable Software and Affected Versions: Mapbox for WP Advanced versions n/a through 1.0.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This enables an attacker to...

7.1CVSS9.2AI score0.00232EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/01/22 12:0 a.m.2 views

WordPress plugin Mapbox for WP Advanced 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS7.7AI score0.00232EPSS
Exploits0References2
OSV
OSV
added 2024/08/07 1:4 a.m.5 views

MAL-2024-7973 Malicious code in mapbox-maps-android (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6283105b5c07939844bd2730cc42bf4c6e8d9bbaf713a147707078aa4e14a4d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/08/07 1:4 a.m.1 views

Malicious code in mapbox-maps-android (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6283105b5c07939844bd2730cc42bf4c6e8d9bbaf713a147707078aa4e14a4d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSV
OSV
added 2024/06/06 2:45 p.m.5 views

MAL-2024-1539 Malicious code in mapbox-demo-gl-style-spec (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fa5a509685be972fc15ceb454b2c3768fd8dd7c5162f11471642ab34e1f34fb9 The OpenSSF Package Analysis project identified 'mapbox-demo-gl-style-spec' @ 14.4.0 npm as malicious. It is considered malicious because: - The...

7.1AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/06 2:45 p.m.1 views

Malicious code in mapbox-demo-gl-style-spec (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fa5a509685be972fc15ceb454b2c3768fd8dd7c5162f11471642ab34e1f34fb9 The OpenSSF Package Analysis project identified 'mapbox-demo-gl-style-spec' @ 14.4.0 npm as malicious. It is considered malicious because: - The...

6.9AI score
Exploits0
Hacker One
Hacker One
added 2023/08/31 4:14 a.m.72 views

FetLife: fetlife.com/signup_step_profile expose access_token of mapbox.com

Vulnerability description not provided...

7.1AI score
Exploits0
CNVD
CNVD
added 2022/08/19 12:0 a.m.31 views

Mapbox buffer overflow vulnerability

Mapbox is a location data platform for mobile and Web applications from Mapbox, Inc. A buffer overflow vulnerability exists in versions prior to Mapbox gl-native 10.6.1, which stems from excessive image height and width values when creating new images, and can be exploited to cause Mapbox process...

7.5CVSS2.6AI score0.00334EPSS
Exploits0References1
Github Security Blog
Github Security Blog
added 2022/08/17 12:0 a.m.24 views

Mapbox is vulnerable to Integer Overflow

An integer overflow exists in Mapbox's closed source gl-native library prior to version 10.6.1, which is bundled with multiple Mapbox products including open source libraries. The overflow is caused by large image height and width values when creating a new Image and allows for out of bounds...

7.5CVSS7.5AI score0.00334EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2022/08/17 12:0 a.m.14 views

GHSA-4696-G7JJ-XG2H Mapbox is vulnerable to Integer Overflow

An integer overflow exists in Mapbox's closed source gl-native library prior to version 10.6.1, which is bundled with multiple Mapbox products including open source libraries. The overflow is caused by large image height and width values when creating a new Image and allows for out of bounds...

7.5CVSS7.6AI score0.00334EPSS
Exploits0References3
OSV
OSV
added 2022/08/16 1:15 a.m.24 views

CVE-2022-38216

An integer overflow exists in Mapbox's closed source gl-native library prior to version 10.6.1, which is bundled with multiple Mapbox products including open source libraries. The overflow is caused by large image height and width values when creating a new Image and allows for out of bounds...

7.5CVSS7.7AI score
Exploits0References1
NVD
NVD
added 2022/08/16 1:15 a.m.8 views

CVE-2022-38216

An integer overflow exists in Mapbox's closed source gl-native library prior to version 10.6.1, which is bundled with multiple Mapbox products including open source libraries. The overflow is caused by large image height and width values when creating a new Image and allows for out of bounds...

7.5CVSS0.00334EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2022/08/16 1:15 a.m.1 views

CVE-2022-38216

An integer overflow exists in Mapbox's closed source gl-native library prior to version 10.6.1, which is bundled with multiple Mapbox products including open source libraries. The overflow is caused by large image height and width values when creating a new Image and allows for out of bounds...

7.5CVSS5.9AI score0.00334EPSS
Exploits0References2
Prion
Prion
added 2022/08/16 1:15 a.m.9 views

Integer overflow

An integer overflow exists in Mapbox's closed source gl-native library prior to version 10.6.1, which is bundled with multiple Mapbox products including open source libraries. The overflow is caused by large image height and width values when creating a new Image and allows for out of bounds...

5CVSS7.7AI score0.00334EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2022/08/16 12:34 a.m.80 views

CVE-2022-38216

Summary: CVE-2022-38216 reports an integer overflow in Mapbox’s closed‑source gl-native library prior to v10.6.1, bundled with multiple Mapbox products. The overflow is triggered by large image height/width values when creating a new Image and can cause out‑of‑bounds writes, potentially crashing ...

7.5CVSS7.6AI score0.00334EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2022/08/16 12:34 a.m.10 views

CVE-2022-38216

An integer overflow exists in Mapbox's closed source gl-native library prior to version 10.6.1, which is bundled with multiple Mapbox products including open source libraries. The overflow is caused by large image height and width values when creating a new Image and allows for out of bounds...

7.9AI score0.00334EPSS
Exploits0References1
CNNVD
CNNVD
added 2022/08/16 12:0 a.m.1 views

Mapbox 输入验证错误漏洞

Mapbox is a location data platform for mobile and Web applications from Mapbox, Inc. A buffer overflow vulnerability exists in versions prior to Mapbox gl-native 10.6.1, which stems from excessive image height and width values when creating new images, and can be exploited to cause Mapbox process...

7.5CVSS7.1AI score0.00334EPSS
Exploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:26 p.m.2 views

Malicious code in mapbox-gl-shaders (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a1f7d3a74544441d9a6896ce7b394f740835531a70d9d75849e94fa2e8a9251 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
Rows per page
Query Builder