USN-2579-1: autofs vulnerability

It was discovered that autofs incorrectly filtered environment variables when using program maps. When program maps were configured, a local user could use this issue to escalate privileges. This update changes the default behaviour by adding a prefix to environment variables. Sites using program...

Debian DSA-3218-1 : wesnoth-1.10 - security update

Ignacio R. Morelle discovered that missing path restrictions in the'Battle of Wesnoth' game could result in the disclosure of arbitrary files in the user's home directory if malicious campaigns/maps are loaded. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

Googlemaps Plugin Path Disclosure Vulnerability in Joomla!

Joomla! is a content management system. Joomla! Googlemaps plugin is a plugin for inserting google maps for Joomla! A path disclosure vulnerability exists in Joomla! Googlemaps Plugin that allows attackers to obtain sensitive information...

Security Bypass Vulnerability in Joomla! Googlemaps Plugin

Joomla! is a content management system. Joomla! Googlemaps plugin is a plugin for inserting google maps for Joomla! A security bypass vulnerability exists in Joomla! Googlemaps plugin, which can be exploited by attackers to bypass certain security restrictions...

CVE-2014-100006

Multiple cross-site scripting XSS vulnerabilities in modulesv3/googlemap/wtv3streetview.php in webtrees before 1.5.2 allow remote attackers to inject arbitrary web script or HTML via the 1 map, 2 streetview, or 3 reset parameter...

CVE-2014-7182

Multiple cross-site scripting XSS vulnerabilities in the WP Google Maps plugin before 6.0.27 for WordPress allow remote attackers to inject arbitrary web script or HTML via the polyid parameter in an 1 editpoly, 2 editpolyline, or 3 editmarker action in the wp-google-maps-menu page to...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the WP Google Maps plugin before 6.0.27 for WordPress allow remote attackers to inject arbitrary web script or HTML via the polyid parameter in an 1 editpoly, 2 editpolyline, or 3 editmarker action in the wp-google-maps-menu page to...

CVE-2014-7182

The CVE-2014-7182 entry affects the WP Google Maps WordPress plugin, with XSS vulnerabilities in versions prior to 6.0.27. The underlying issue is unsanitized input via the poly_id parameter used by actions edit_poly, edit_polyline, and edit_marker on the wp-google-maps-menu page routed to wp-adm...

CVE-2014-7182

Multiple cross-site scripting XSS vulnerabilities in the WP Google Maps plugin before 6.0.27 for WordPress allow remote attackers to inject arbitrary web script or HTML via the polyid parameter in an 1 editpoly, 2 editpolyline, or 3 editmarker action in the wp-google-maps-menu page to...

PT-2014-7820 · WordPress · Wp Google Maps

Name of the Vulnerable Software and Affected Versions: WP Google Maps plugin versions prior to 6.0.27 Description: The issue allows remote attackers to inject arbitrary web script or HTML via the poly id parameter in an edit poly, edit polyline, or edit marker action in the "wp-google-maps-menu"...

CVE-2014-7182: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the WP Google Maps plugin before 6.0.27 for WordPress allow remote attackers to inject arbitrary web script or HTML via the polyid parameter in an 1 editpoly, 2 editpolyline, or 3 editmarker action in the wp-google-maps-menu page to...

Contact Form Integrated With Google Maps 1.0-2.4 - Stored Cross-Site Scripting (XSS)

The Contact Form Integrated With Google Maps WordPress plugin was affected by a Stored Cross-Site Scripting XSS security vulnerability...

Multiple Cross-Site Scripting (XSS) in WP Google Maps WordPress Plugin

Advisory ID: HTB23236 Product: WP Google Maps WordPress plugin Vendor: WP Google Maps Vulnerable Versions: 6.0.26 and probably prior Tested Version: 6.0.26 Advisory Publication: September 24, 2014 without technical details Vendor Notification: September 24, 2014 Vendor Patch: September 29, 2014...

WordPress WP Google Maps 6.0.26 Cross Site Scripting Vulnerability

WordPress WP Google Maps plugin version 6.0.26 suffers from a cross site scripting vulnerability. Product: WP Google Maps WordPress plugin Vendor: WP Google Maps Vulnerable Versions: 6.0.26 and probably prior Tested Version: 6.0.26 Advisory Publication: September 24, 2014 without technical detail...

WP Google Maps 6.0.26 - Cross Site Scripting (XSS)

The WP Google Maps WordPress plugin was affected by a Cross Site Scripting XSS security vulnerability...

WordPress WP Google Maps 6.0.26 Cross Site Scripting

Advisory ID: HTB23236 Product: WP Google Maps WordPress plugin Vendor: WP Google Maps Vulnerable Versions: 6.0.26 and probably prior Tested Version: 6.0.26 Advisory Publication: September 24, 2014 without technical details Vendor Notification: September 24, 2014 Vendor Patch: September 29, 2014...

CVE-2014-6859

The Daum Maps - Subway aka net.daum.android.map application 3.9.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Daum Maps - Subway aka net.daum.android.map application 3.9.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6859

The CVE-2014-6859 entry applies to Daum Maps - Subway (net.daum.android.map) 3.9.1 on Android, where the app does not verify X.509 certificates from SSL servers. This lack of certificate validation enables man-in-the-middle attackers to spoof servers and access sensitive information via a crafted...

CVE-2014-6859

The Daum Maps - Subway aka net.daum.android.map application 3.9.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...