3398 matches found
CVE-2025-39465 WordPress Advanced Google Maps plugin <= 5.8.4 - Broken Access Control vulnerability
Missing Authorization vulnerability in flippercode Advanced Google Maps wp-google-map-gold allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Google Maps: from n/a through = 5.8.4...
CVE-2025-39465
CVE-2025-39465 is a Missing Authorization (Broken Access Control) vulnerability in the WordPress plugin WordPress Advanced Google Maps (wp-google-map-gold) <= 5.8.4. Public sources (NVD/Red Hat/Patchstack) confirm this affects Advanced Google Maps and classify the CVSSv3.1 as Base 4.3 (Medium)...
EUVD-2025-38029
Missing Authorization vulnerability in flippercode Advanced Google Maps wp-google-map-gold allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Google Maps: from n/a through = 5.8.4...
BIT-GOLANG-2025-58183 Unbounded allocation when parsing GNU sparse map in archive/tar
tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse regions can cause a Reader to read an unbounded amount of data from the archive into memory. When reading from a...
WordPress plugin Advanced Google Maps 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...
CVE-2025-39465: Missing Authorization
Missing Authorization vulnerability in flippercode Advanced Google Maps wp-google-map-gold allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Google Maps: from n/a through = 5.8.4...
PT-2025-53010
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to BPF percpu hash maps. Missing calls to bpf obj free fields in pcpu copy value could lead to memory referenced by BPF KPTR REF,PERCPU fields...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989533)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989533 advisory. In the Linux kernel, the following vulnerability has been resolved: sh: cpuinfo: Fix a warning for CONFIGCPUMASKOFFSTACK When CONFIGCPUMASKOFFSTACK and...
Unity Linux 20.1050e Security Update: kernel (UTSA-2025-989945)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989945 advisory. In the Linux kernel, the following vulnerability has been resolved: sh: cpuinfo: Fix a warning for CONFIGCPUMASKOFFSTACK When CONFIGCPUMASKOFFSTACK and...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989044)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989044 advisory. In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Fix use-after-free race condition for maps It is possible that in between calling...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989820)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989820 advisory. In the Linux kernel, the following vulnerability has been resolved: sh: cpuinfo: Fix a warning for CONFIGCPUMASKOFFSTACK When CONFIGCPUMASKOFFSTACK and...
WordPress WP Maps plugin <= 4.8.6 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by kr0no in WordPress Plugin WP Maps versions = 4.8.6...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to bail out in getnewsegment ------------ cut here --- WARNING: CPU: 3 PID: 579 at fs/f2fs/segment.c:2832 newcurseg+0x5e8/0x6dc PC: newcurseg+0x5e8/0x6dc Call trace: newcurseg+0x5e8/0x6dc f2fsallocatedatablock+0xa54/0xe...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: iio: adc: axp20xadc: Add a missing sentinel to the AXP717 ADC channel maps. The AXP717 ADC channel maps lacks a sentinel entry at the end. This causes a KASAN warning. Please add the missing sentinel entry...
Malicious code in epic-google-maps-tools (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09ba2e26074681b2ef2006265f744b7e69b2424221120a030938654dbd932e5e The package epic-google-maps-tools was found to contain malicious code...
EUVD-2025-37141
Malicious code in epic-google-maps-tools npm...
MAL-2025-49152 Malicious code in epic-google-maps-tools (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09ba2e26074681b2ef2006265f744b7e69b2424221120a030938654dbd932e5e The package epic-google-maps-tools was found to contain malicious code...
CVE-2025-58183 Unbounded allocation when parsing GNU sparse map in archive/tar
tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse regions can cause a Reader to read an unbounded amount of data from the archive into memory. When reading from a...
GO-2025-4014 Unbounded allocation when parsing GNU sparse map in archive/tar
tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse regions can cause a Reader to read an unbounded amount of data from the archive into memory. When reading from a...
CVE-2025-62942
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tempranova WP Mapbox GL JS Maps wp-mapbox-gl-js allows Stored XSS.This issue affects WP Mapbox GL JS Maps: from n/a through = 3.0.1...