Lucene search
+L

2636 matches found

OSV
OSV
added 2022/06/20 8:13 p.m.10 views

MAL-2022-227 Malicious code in @eg-maps/commons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 683771ccbf7865145f726b98e031ef733f7c549710df47bd019217e6373df1e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:12 p.m.8 views

MAL-2022-4480 Malicious code in maps-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77941a159908349eb82d90ae8105f74c66d5bfaeb4879e9e0f96bffcdd1b4b9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:12 p.m.6 views

Malicious code in maps-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77941a159908349eb82d90ae8105f74c66d5bfaeb4879e9e0f96bffcdd1b4b9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:9 p.m.7 views

MAL-2022-677 Malicious code in @uc-maps/api.react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f409bbd4d44a1d019c99abc6d3f4c3fdb6caf61568a7a1235c25fe5ff3995c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:9 p.m.6 views

MAL-2022-679 Malicious code in @uc-maps/geospatial (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6991935d20b411c2ed3710ebf423c8b205e514c20f5ca2937bd0cfc55ad8d2f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:9 p.m.8 views

MAL-2022-680 Malicious code in @uc-maps/layer-select.react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e16c28c35ea063cec1fb2f23764d6be10526f72c11c42bc40879a61a2383ff0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:9 p.m.9 views

MAL-2022-678 Malicious code in @uc-maps/boundaries-core.react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f279f06f2a6375dfe5f8632d2e53e7c315fed145e3d5babe3fe2338fd70e1e8e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:9 p.m.6 views

MAL-2022-683 Malicious code in @uc-maps/provider-google.react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 96b2ee3e9a228c29b1fa9a48eab565e4eee93260225f30d535417f36ee2b48d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:9 p.m.9 views

MAL-2022-682 Malicious code in @uc-maps/parcel-shapes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a5355ff2e8d842acde41df4dad7dba63eabaac16403d4789e204cdcbd93035e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:9 p.m.8 views

MAL-2022-686 Malicious code in @uc-maps/tile-layers.react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af3f6d0d5c3454a78142a0ac415c1e72c55d7f50e15e914045f1c9940ae83d3d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/06/20 11:15 a.m.5 views

CVE-2022-1829

The Inline Google Maps WordPress plugin through 5.11 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack, and lead to Stored Cross-Site Scripting due to the lack of sanitisation and escaping...

6.5CVSS6.6AI score0.00513EPSS
SaveExploits2References2
OSV
OSV
added 2022/06/20 11:15 a.m.5 views

CVE-2022-1829

The Inline Google Maps WordPress plugin through 5.11 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack, and lead to Stored Cross-Site Scripting due to the lack of sanitisation and escaping...

6.5CVSS5.8AI score0.00513EPSS
SaveExploits2References1
Prion
Prion
added 2022/06/20 11:15 a.m.15 views

Cross site scripting

The Inline Google Maps WordPress plugin through 5.11 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack, and lead to Stored Cross-Site Scripting due to the lack of sanitisation and escaping...

4.3CVSS6AI score0.00513EPSS
SaveExploits2References1Affected Software1
CNNVD
CNNVD
added 2022/06/20 12:0 a.m.5 views

WordPress plugin Inline Google Maps 跨站请求伪造漏洞

WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blogging sites on servers with PHP and MySQL. WordPress plugin Inline Google Maps 5.11 and earlier versions are vulnerable to cross-site request forgery, which stems from not...

6.5CVSS5AI score0.00513EPSS
SaveExploits2References2
CNVD
CNVD
added 2022/06/17 12:0 a.m.82 views

WordPress plugin Google Maps cross-site request forgery vulnerability

WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin Google Maps 1.2.1 and previous versions have a cross-site request forgery vulnerability, which can be exploited by attacke...

5.4CVSS2.6AI score0.00415EPSS
SaveExploits0References1
OSV
OSV
added 2022/06/15 4:15 p.m.6 views

CVE-2022-29453

Cross-Site Request Forgery CSRF vulnerability in API KEY for Google Maps plugin = 1.2.1 at WordPress leading to Google Maps API key update...

4.3CVSS5.8AI score0.00415EPSS
SaveExploits0References2
NVD
NVD
added 2022/06/15 4:15 p.m.33 views

CVE-2022-29453

Cross-Site Request Forgery CSRF vulnerability in API KEY for Google Maps plugin = 1.2.1 at WordPress leading to Google Maps API key update...

5.4CVSS0.00415EPSS
SaveExploits0References2
Prion
Prion
added 2022/06/15 4:15 p.m.13 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in API KEY for Google Maps plugin = 1.2.1 at WordPress leading to Google Maps API key update...

4.3CVSS4.7AI score0.00415EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2022/06/15 3:16 p.m.585 views

CVE-2022-29453

The CVE-2022-29453 entry concerns the WordPress plugin API KEY for Google Maps (versions

5.4CVSS4.7AI score0.00415EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2022/06/15 3:16 p.m.9 views

CVE-2022-29453 WordPress API KEY for Google Maps plugin <= 1.2.1 - CSRF vulnerability leading to Google Maps API key update

Cross-Site Request Forgery CSRF vulnerability in API KEY for Google Maps plugin = 1.2.1 at WordPress leading to Google Maps API key update...

5.4CVSS5.5AI score0.00415EPSS
SaveExploits0References2
Rows per page
Query Builder