Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
osgeo vulnerabilities and exploits
(subscribe to this query)
890
VMScore
CVE-2009-0840
Heap-based buffer underflow in the readPostBody function in cgiutil.c in mapserv in MapServer 4.x prior to 4.10.4 and 5.x prior to 5.2.2 allows remote malicious users to have an unknown impact via a negative value in the Content-Length HTTP header.
Osgeo Mapserver 4.10.0
Osgeo Mapserver 4.6.0
Osgeo Mapserver 4.4.0
Osgeo Mapserver 4.2.0
Osgeo Mapserver 5.2.0
Osgeo Mapserver 5.0.0
Osgeo Mapserver 4.8.0
Umn Mapserver 4.0
Osgeo Mapserver 4.10.2
Osgeo Mapserver 5.2.1
Osgeo Mapserver 4.10.3
Osgeo Mapserver 4.10.1
890
VMScore
CVE-2009-0841
Directory traversal vulnerability in mapserv.c in mapserv in MapServer 4.x prior to 4.10.4 and 5.x prior to 5.2.2, when running on Windows with Cygwin, allows remote malicious users to create arbitrary files via a .. (dot dot) in the id parameter.
Osgeo Mapserver 4.10.0
Osgeo Mapserver 4.6.0
Umn Mapserver 4.0
Osgeo Mapserver 5.2.0
Osgeo Mapserver 5.0.0
Osgeo Mapserver 4.10.3
Osgeo Mapserver 4.10.1
Osgeo Mapserver 4.8.0
Osgeo Mapserver 4.4.0
Osgeo Mapserver 4.2.0
Osgeo Mapserver 4.10.2
Osgeo Mapserver 5.2.1
383
VMScore
CVE-2009-0842
mapserv in MapServer 4.x prior to 4.10.4 and 5.x prior to 5.2.2 allows remote malicious users to read arbitrary invalid .map files via a full pathname in the map parameter, which triggers the display of partial file contents within an error message, as demonstrated by a /tmp/sekr...
Osgeo Mapserver 4.10.1
Osgeo Mapserver 4.10.0
Osgeo Mapserver 4.8.0
Osgeo Mapserver 4.6.0
Osgeo Mapserver 4.4.0
Osgeo Mapserver 5.2.0
Osgeo Mapserver 5.0.0
Osgeo Mapserver 4.2.0
Umn Mapserver 4.0
Osgeo Mapserver 4.10.2
Osgeo Mapserver 4.10.3
Osgeo Mapserver 5.2.1
668
VMScore
CVE-2011-2703
Multiple SQL injection vulnerabilities in MapServer prior to 4.10.7, 5.x prior to 5.6.7, and 6.x prior to 6.0.1 allow remote malicious users to execute arbitrary SQL commands via vectors related to (1) OGC filter encoding or (2) WMS time support.
Osgeo Mapserver 4.10.3
Osgeo Mapserver 4.10.1
Osgeo Mapserver 4.8.0
Osgeo Mapserver 4.6.0
Osgeo Mapserver 4.10.0
Osgeo Mapserver 4.10.2
Osgeo Mapserver 4.4.0
Osgeo Mapserver 4.10.5
Osgeo Mapserver 4.10.4
Osgeo Mapserver 4.2.0
Osgeo Mapserver
Osgeo Mapserver 5.2.0
Osgeo Mapserver 5.0.0
Osgeo Mapserver 5.4.0
Osgeo Mapserver 5.6.1
Osgeo Mapserver 5.6.3
Osgeo Mapserver 5.4.2
Osgeo Mapserver 5.6.0
Umn Mapserver 5.2.3
Osgeo Mapserver 5.2.1
Osgeo Mapserver 5.4.1
Umn Mapserver 5.6.4
685
VMScore
CVE-2011-2975
Double free vulnerability in the msAddImageSymbol function in mapsymbol.c in MapServer prior to 6.0.1 might allow remote malicious users to cause a denial of service (application crash) or have unspecified other impact via crafted mapfile data.
Osgeo Mapserver 5.0.0
Osgeo Mapserver 5.2.0
Osgeo Mapserver 5.2.1
Osgeo Mapserver 4.10.0
Osgeo Mapserver 5.4.0
Osgeo Mapserver 4.10.2
Osgeo Mapserver 4.10.3
Osgeo Mapserver 4.8.0
Osgeo Mapserver 5.6.0
Osgeo Mapserver 4.2.0
Umn Mapserver 5.6.4
Umn Mapserver 5.6.5
Umn Mapserver 5.6.6
Osgeo Mapserver
Osgeo Mapserver 5.4.1
Osgeo Mapserver 4.4.0
Osgeo Mapserver 4.6.0
Umn Mapserver 6.0.0
Osgeo Mapserver 5.4.2
Osgeo Mapserver 5.6.3
Umn Mapserver 5.2.2
Umn Mapserver 5.6.7
1 EDB exploit
445
VMScore
CVE-2010-1678
Mapserver 5.2, 5.4 and 5.6 prior to 5.6.5-2 improperly validates symbol index values during Mapfile parsing.
Osgeo Mapserver 5.2.0
Osgeo Mapserver 5.4.0
Osgeo Mapserver
NA
CVE-2021-28398
A privileged attacker in GeoNetwork prior to 3.12.0 and 4.x prior to 4.0.4 can use the directory harvester before-script to execute arbitrary OS commands remotely on the hosting infrastructure. A User Administrator or Administrator account is required to perform this. This occurs...
Osgeo Geonetwork
Osgeo Geonetwork 4.0.0
445
VMScore
CVE-2021-39371
An XML external entity (XXE) injection in PyWPS prior to 4.4.5 allows an malicious user to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.
Osgeo Owslib 0.24.1
Osgeo Pywps
Debian Debian Linux 9.0
NA
CVE-2023-41339
GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. The WMS specification defines an ``sld=<url>`` parameter for GetMap, GetLegendGraphic and GetFeatureInfo operations for user supplied "dynamic styling"...
Osgeo Geoserver
NA
CVE-2023-43795
GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. The OGC Web Processing Service (WPS) specification is designed to process information from any server using GET and POST requests. This presents the opportunity for Se...
Osgeo Geoserver
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-49223
CVE-2024-0044
information disclosure
CVE-2024-35753
HTML injection
CVE-2024-21306
CVE-2024-35733
SQL injection
CVE-2024-35732
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
NEXT »