Lucene search
+L

3424 matches found

Wired Threat Level
Wired Threat Level
•added 2022/08/30 10:00 a.m.•31 views

Inside the Shadow Evacuation of Kabul

In the last two weeks of the war, an ad hoc team armed with group chats, QR codes, and satellite maps launched a mad dash to save imperiled Afghan allies...

0.8AI score
SaveExploits0
osv_cve
osv_cve
•added 2022/08/29 6:15 p.m.•19 views

CVE-2022-1123

The Leaflet Maps Marker Google Maps, OpenStreetMap, Bing Maps WordPress plugin before 3.12.5 does not properly sanitize some parameters before inserting them into SQL queries. As a result, high privilege users could perform SQL injection attacks...

7.2CVSS5.8AI score0.01328EPSS
SaveExploits2References1
attackerkb
attackerkb
•added 2022/08/29 6:15 p.m.•14 views

CVE-2022-1123

The Leaflet Maps Marker Google Maps, OpenStreetMap, Bing Maps WordPress plugin before 3.12.5 does not properly sanitize some parameters before inserting them into SQL queries. As a result, high privilege users could perform SQL injection attacks...

7.2CVSS7.2AI score0.01328EPSS
SaveExploits2References2
NVD
NVD
•added 2022/08/29 6:15 p.m.•31 views

CVE-2022-1123

The Leaflet Maps Marker Google Maps, OpenStreetMap, Bing Maps WordPress plugin before 3.12.5 does not properly sanitize some parameters before inserting them into SQL queries. As a result, high privilege users could perform SQL injection attacks...

7.2CVSS0.01328EPSS
SaveExploits2References1
Prion
Prion
•added 2022/08/29 6:15 p.m.•28 views

Sql injection

The Leaflet Maps Marker Google Maps, OpenStreetMap, Bing Maps WordPress plugin before 3.12.5 does not properly sanitize some parameters before inserting them into SQL queries. As a result, high privilege users could perform SQL injection attacks...

5.8CVSS7.3AI score0.01328EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
•added 2022/08/29 2:40 p.m.•38 views

CVE-2022-1123 Leaflet Maps Marker < 3.12.5 - Admin+ SQLi

The Leaflet Maps Marker Google Maps, OpenStreetMap, Bing Maps WordPress plugin before 3.12.5 does not properly sanitize some parameters before inserting them into SQL queries. As a result, high privilege users could perform SQL injection attacks...

7.6AI score0.01328EPSS
SaveExploits2References1
CVE
CVE
•added 2022/08/29 2:40 p.m.•96 views

CVE-2022-1123

CVE-2022-1123 affects the WordPress plugin Leaflet Maps Marker prior to version 3.12.5. The issue is improper sanitization of certain parameters before they are inserted into SQL queries, enabling SQL injection by high-privilege users (no user interaction required). The vulnerability is documente...

7.2CVSS7.3AI score0.01328EPSS
SaveExploits2References1Affected Software1
CNNVD
CNNVD
•added 2022/08/29 12:00 a.m.•20 views

WordPress plugin Leaflet Maps Marker SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin Leaflet Maps Marker Google...

7.2CVSS7.8AI score0.01328EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2022/08/29 12:00 a.m.•19 views

PT-2022-13672 · WordPress · Leaflet Maps Marker

Name of the Vulnerable Software and Affected Versions: Leaflet Maps Marker WordPress plugin versions prior to 3.12.5 Description: The issue concerns the improper sanitization of certain parameters before they are inserted into SQL queries. This could allow high privilege users to perform SQL...

7.2CVSS7.2AI score0.01328EPSS
SaveExploits2References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/29 12:00 a.m.•9 views

CVE-2022-1123: Improper Neutralization of Special Elements used in an SQL Command

The Leaflet Maps Marker Google Maps, OpenStreetMap, Bing Maps WordPress plugin before 3.12.5 does not properly sanitize some parameters before inserting them into SQL queries. As a result, high privilege users could perform SQL injection attacks...

7.2CVSS7.3AI score0.01328EPSS
SaveExploits2References2
Prion
Prion
•added 2022/08/23 4:15 p.m.•30 views

Cross site scripting

Authenticated contributor+ Stored Cross-Site Scripting XSS vulnerability in amCharts: Charts and Maps plugin = 1.4 at WordPress...

4.9CVSS5.2AI score0.00577EPSS
SaveExploits0References2
Mend
Mend
•added 2022/08/23 3:48 p.m.•9 views

CVE-2022-36405

Authenticated contributor+ Stored Cross-Site Scripting XSS vulnerability in amCharts: Charts and Maps plugin = 1.4 at WordPress...

5.4CVSS0.00577EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2022/08/23 3:48 p.m.•41 views

CVE-2022-36405 WordPress amCharts: Charts and Maps plugin <= 1.4 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated contributor+ Stored Cross-Site Scripting XSS vulnerability in amCharts: Charts and Maps plugin = 1.4 at WordPress...

5.4CVSS5.4AI score0.00577EPSS
SaveExploits0References2
CVE
CVE
•added 2022/08/23 3:48 p.m.•107 views

CVE-2022-36405

CVE-2022-36405 affects the WordPress amCharts: Charts and Maps plugin (versions ≤ 1.4). The vulnerability is an authenticated stored XSS in contributor+-level contexts caused by insufficient sanitization/escaping of user-supplied input in the plugin. Impact is mediated to authenticated users; no ...

5.4CVSS5.2AI score0.00577EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2022/08/23 12:00 a.m.•20 views

WordPress plugin Charts and Maps 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

5.4CVSS5.3AI score0.00577EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/08/23 12:00 a.m.•8 views

PT-2022-23354

Name of the Vulnerable Software and Affected Versions amCharts: Charts and Maps plugin version 1.4 and earlier Description The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with contributor or higher privileges can inject malicious...

5.4CVSS0.00577EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/23 12:00 a.m.•9 views

CVE-2022-36405: Improper Neutralization of Input During Web Page Generation

Authenticated contributor+ Stored Cross-Site Scripting XSS vulnerability in amCharts: Charts and Maps plugin = 1.4 at WordPress...

5.4CVSS6AI score0.00577EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/08/19 12:00 a.m.•22 views

WordPress Plugin Neshan Maps SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin Neshan Map...

9.8CVSS8.6AI score0.00547EPSS
SaveExploits0References2
Snyk
Snyk
•added 2022/08/11 11:43 a.m.•2 views

Malicious Package

Overview @uc-maps/tile-layers.react is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if thi...

9.8CVSS7.1AI score
SaveExploits0References3
Snyk
Snyk
•added 2022/08/11 11:43 a.m.•16 views

Malicious Package

Overview @uc-maps/provider-google.react is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if...

9.8CVSS7.1AI score
SaveExploits0References3
Rows per page
Query Builder