İçeriğe atla
Noroxi

OSGeo kayıtları

osgeo üreticisine ait 56 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
6
Düzeltme kaydı olan
%92,9
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 16
  2. 17
  3. 19
  4. 21
  5. 22
  6. 23
  7. 24
  8. 25
  9. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

56 kayıt
  • CVE-2023-25157
    65Bu hafta

    Unfiltered SQL Injection Vulnerabilities in Geoserver

    KritikCVSS 9,8Kavram kanıtıEPSS %85

    osgeo · geoserver21 Şub 2023

  • CVE-2023-43795
    60Bu hafta

    WPS Server Side Request Forgery in GeoServer

    KritikCVSS 9,8Kavram kanıtıEPSS %69

    osgeo · geoserver25 Eki 2023

  • CVE-2025-30220
    49Planlayın

    GeoTools, GeoServer, and GeoNetwork XML External Entity (XXE) Processing Vulnerability in XSD schema handling

    KritikCVSS 9,1Kavram kanıtıEPSS %42

    geotools · geotools10 Haz 2025

  • CVE-2009-0839
    43Planlayın

    Stack-based buffer overflow in mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2, when the server has a map with a lo

    KritikCVSS 10,0İstismar yokEPSS %9

    osgeo · mapserver31 Mar 2009

  • CVE-2009-2281
    42Planlayın

    Multiple heap-based buffer underflows in the readPostBody function in cgiutil.c in mapserv in MapServer 4.x through 4.10.4 and 5.x before 5.

    KritikCVSS 10,0İstismar yokEPSS %5

    osgeo · mapserver23 Eki 2009

  • CVE-2009-0840
    42Planlayın

    Heap-based buffer underflow in the readPostBody function in cgiutil.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 allows

    KritikCVSS 10,0İstismar yokEPSS %5

    osgeo · mapserver31 Mar 2009

  • CVE-2009-0841
    42Planlayın

    Directory traversal vulnerability in mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2, when running on Windows with

    KritikCVSS 10,0İstismar yokEPSS %5

    osgeo · mapserver31 Mar 2009

  • CVE-2009-1176
    41Planlayın

    mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 does not ensure that the string holding the id parameter ends in a

    KritikCVSS 10,0İstismar yokEPSS %4

    osgeo · mapserver31 Mar 2009

  • CVE-2010-2540
    41Planlayın

    mapserv.c in mapserv in MapServer before 4.10.6 and 5.x before 5.6.4 does not properly restrict the use of CGI command-line arguments that w

    KritikCVSS 10,0İstismar yokEPSS %3

    osgeo · mapserver2 Ağu 2010

  • CVE-2009-1177
    41Planlayın

    Multiple stack-based buffer overflows in maptemplate.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 have unknown impact an

    KritikCVSS 10,0İstismar yokEPSS %2

    osgeo · mapserver31 Mar 2009

  • CVE-2017-5522
    40Planlayın

    Stack-based buffer overflow in MapServer before 6.0.6, 6.2.x before 6.2.4, 6.4.x before 6.4.5, and 7.0.x before 7.0.4 allows remote attacker

    KritikCVSS 9,8İstismar yokEPSS %4

    debian · debian linux15 Mar 2017

  • CVE-2019-17545
    40Planlayın

    GDAL through 3.0.1 has a poolDestroy double free in OGRExpatRealloc in ogr/ogr_expat.cpp when the 10MB threshold is exceeded.

    KritikCVSS 9,8İstismar yokEPSS %2

    osgeo · gdal13 Eki 2019

  • CVE-2022-0699
    39İzleyin

    A double-free condition exists in contrib/shpsort.c of shapelib 1.5.0 and older releases.

    KritikCVSS 9,8İstismar yokEPSS %1

    osgeo · shapelib17 Eki 2022

  • CVE-2021-40822
    36İzleyin

    GeoServer through 2.18.5 and 2.19.x through 2.19.2 allows SSRF via the option for setting a proxy host.

    YüksekCVSS 7,5Kavram kanıtıEPSS %19

    osgeo · geoserver1 May 2022

  • CVE-2019-17546
    36İzleyin

    tif_getimage.c in LibTIFF through 4.0.10, as used in GDAL through 3.0.1 and other products, has an integer overflow that potentially causes

    YüksekCVSS 8,8İstismar yokEPSS %3

    libtiff · libtiff13 Eki 2019

  • CVE-2025-59431
    35İzleyin

    MapServer - WFS XML Filter Query SQL injection

    YüksekCVSS 8,9İstismar yokEPSS %0

    osgeo · mapserver19 Eyl 2025

  • CVE-2022-50899
    34İzleyin

    Geonetwork 4.2.0 - XML External Entity (XXE)

    YüksekCVSS 8,7İstismar yokEPSS %0

    osgeo · geonetwork13 Oca 2026

  • CVE-2024-29198
    33İzleyin

    GeoServer Vulnerable to Unauthenticated SSRF via TestWfsPost

    YüksekCVSS 8,2Kavram kanıtıEPSS %2

    osgeo · geoserver10 Haz 2025

  • CVE-2011-2704
    32İzleyin

    Stack-based buffer overflow in MapServer before 4.10.7 and 5.x before 5.6.7 allows remote attackers to execute arbitrary code via vectors re

    YüksekCVSS 7,5İstismar yokEPSS %5

    osgeo · mapserver1 Ağu 2011

  • CVE-2009-0843
    32İzleyin

    The msLoadQuery function in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 allows remote attackers to determine the existence o

    YüksekCVSS 7,8İstismar yokEPSS %3

    osgeo · mapserver31 Mar 2009

  • CVE-2024-34711
    32İzleyin

    GeoServer has improper ENTITY_RESOLUTION_ALLOWLIST URI validation in XML Processing (SSRF)

    YüksekCVSS 8,2İstismar yokEPSS %0

    osgeo · geoserver10 Haz 2025

  • CVE-2025-58175
    32İzleyin

    GeoServer has a Server-Side Request Forgery (SSRF) Vulnerability in its XML Entity Resolution

    YüksekCVSS 8,2İstismar yokEPSS %0

    osgeo · geoserver18 Haz 2026

  • CVE-2011-2703
    31İzleyin

    Multiple SQL injection vulnerabilities in MapServer before 4.10.7, 5.x before 5.6.7, and 6.x before 6.0.1 allow remote attackers to execute

    YüksekCVSS 7,5İstismar yokEPSS %2

    osgeo · mapserver1 Ağu 2011

  • CVE-2010-1678
    31İzleyin

    Mapserver 5.2, 5.4 and 5.6 before 5.6.5-2 improperly validates symbol index values during Mapfile parsing.

    YüksekCVSS 7,5İstismar yokEPSS %2

    osgeo · mapserver29 Eki 2019

  • CVE-2019-25050
    31İzleyin

    netCDF in GDAL 2.4.2 through 3.0.4 has a stack-based buffer overflow in nc4_get_att (called from nc4_get_att_tc and nc_get_att_text) and in

    YüksekCVSS 7,8İstismar yokEPSS %0

    osgeo · gdal20 Tem 2021