opendap records
3 published records for vendor opendap.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 2
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Records by year
Bar: total · dark part: CISA KEV.
Attack profile
All records
3 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
42Plan | CVE-2007-2355No exploit | The get_url function in DODS_Dispatch.pm for the CGI_server in OPeNDAP 3 allows remote attackers to execute arbitrary commands via shell metopendap · server3 | Critical10.0 | — | 5.9% | Apr 30, 2007 |
32Monitor | CVE-2007-2767No exploit | Unspecified vulnerability in BES before 3.5.0 in OPeNDAP 4 (Hydrax) before 1.2.1 allows remote attackers to list filesystem contents and obtopendap · bes | High7.8 | — | 2.0% | May 21, 2007 |
31Monitor | CVE-2007-2769No exploit | BES before 3.5.0 in OPeNDAP 4 (Hydrax) before 1.2.1 does not properly handle compressed files, which allows remote attackers to upload arbitopendap · bes | High7.5 | — | 2.6% | May 21, 2007 |
- CVE-2007-235542Plan
The get_url function in DODS_Dispatch.pm for the CGI_server in OPeNDAP 3 allows remote attackers to execute arbitrary commands via shell met
CriticalCVSS 10.0No exploitEPSS 5%opendap · server3Apr 30, 2007
- CVE-2007-276732Monitor
Unspecified vulnerability in BES before 3.5.0 in OPeNDAP 4 (Hydrax) before 1.2.1 allows remote attackers to list filesystem contents and obt
HighCVSS 7.8No exploitEPSS 2%opendap · besMay 21, 2007
- CVE-2007-276931Monitor
BES before 3.5.0 in OPeNDAP 4 (Hydrax) before 1.2.1 does not properly handle compressed files, which allows remote attackers to upload arbit
HighCVSS 7.5No exploitEPSS 2%opendap · besMay 21, 2007