umn kayıtları
umn üreticisine ait 14 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 5
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Yıllara göre kayıt
Çubuk: toplam · koyu kısım: CISA KEV.
Tekrar eden sınıflar
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer7
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-264 Permissions, Privileges, and Access Controls1
- CWE-399 Resource Management Errors1
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
14 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
43Planlayın | CVE-2009-0839İstismar yok | Stack-based buffer overflow in mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2, when the server has a map with a loosgeo · mapserver · CWE-119 | Kritik10,0 | — | %9,0 | 31 Mar 2009 |
42Planlayın | CVE-2009-2281İstismar yok | Multiple heap-based buffer underflows in the readPostBody function in cgiutil.c in mapserv in MapServer 4.x through 4.10.4 and 5.x before 5.osgeo · mapserver · CWE-119 | Kritik10,0 | — | %5,9 | 23 Eki 2009 |
42Planlayın | CVE-2009-0840İstismar yok | Heap-based buffer underflow in the readPostBody function in cgiutil.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 allows osgeo · mapserver · CWE-119 | Kritik10,0 | — | %5,3 | 31 Mar 2009 |
42Planlayın | CVE-2009-0841İstismar yok | Directory traversal vulnerability in mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2, when running on Windows with osgeo · mapserver · CWE-22 | Kritik10,0 | — | %5,3 | 31 Mar 2009 |
41Planlayın | CVE-2009-1176İstismar yok | mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 does not ensure that the string holding the id parameter ends in a osgeo · mapserver · CWE-119 | Kritik10,0 | — | %4,1 | 31 Mar 2009 |
41Planlayın | CVE-2010-2540İstismar yok | mapserv.c in mapserv in MapServer before 4.10.6 and 5.x before 5.6.4 does not properly restrict the use of CGI command-line arguments that wosgeo · mapserver · CWE-264 | Kritik10,0 | — | %3,8 | 2 Ağu 2010 |
41Planlayın | CVE-2009-1177İstismar yok | Multiple stack-based buffer overflows in maptemplate.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 have unknown impact anosgeo · mapserver · CWE-119 | Kritik10,0 | — | %2,9 | 31 Mar 2009 |
32İzleyin | CVE-2011-2704İstismar yok | Stack-based buffer overflow in MapServer before 4.10.7 and 5.x before 5.6.7 allows remote attackers to execute arbitrary code via vectors reosgeo · mapserver · CWE-119 | Yüksek7,5 | — | %5,2 | 1 Ağu 2011 |
32İzleyin | CVE-2009-0843İstismar yok | The msLoadQuery function in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 allows remote attackers to determine the existence oosgeo · mapserver · CWE-20 | Yüksek7,8 | — | %3,1 | 31 Mar 2009 |
31İzleyin | CVE-2011-2703İstismar yok | Multiple SQL injection vulnerabilities in MapServer before 4.10.7, 5.x before 5.6.7, and 6.x before 6.0.1 allow remote attackers to execute osgeo · mapserver · CWE-89 | Yüksek7,5 | — | %2,7 | 1 Ağu 2011 |
28İzleyin | CVE-2011-2975Kavram kanıtı | Double free vulnerability in the msAddImageSymbol function in mapsymbol.c in MapServer before 6.0.1 might allow remote attackers to cause a osgeo · mapserver · CWE-399 | Orta6,8 | — | %4,6 | 1 Ağu 2011 |
28İzleyin | CVE-2013-7262İstismar yok | SQL injection vulnerability in the msPostGISLayerSetTimeFilter function in mappostgis.c in MapServer before 6.4.1, when a WMS-Time service iosgeo · mapserver · CWE-89 | Orta6,8 | — | %2,2 | 5 Oca 2014 |
18İzleyin | CVE-2009-0842İstismar yok | mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 allows remote attackers to read arbitrary invalid .map files via a full pathnameosgeo · mapserver · CWE-200 | Orta4,3 | — | %2,6 | 31 Mar 2009 |
8İzleyin | CVE-2010-2539İstismar yok | Buffer overflow in the msTmpFile function in maputil.c in mapserv in MapServer before 4.10.6 and 5.x before 5.6.4 allows local users to causosgeo · mapserver · CWE-119 | Düşük2,1 | — | %0,3 | 2 Ağu 2010 |
- CVE-2009-083943Planlayın
Stack-based buffer overflow in mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2, when the server has a map with a lo
KritikCVSS 10,0İstismar yokEPSS %9osgeo · mapserver31 Mar 2009
- CVE-2009-228142Planlayın
Multiple heap-based buffer underflows in the readPostBody function in cgiutil.c in mapserv in MapServer 4.x through 4.10.4 and 5.x before 5.
KritikCVSS 10,0İstismar yokEPSS %6osgeo · mapserver23 Eki 2009
- CVE-2009-084042Planlayın
Heap-based buffer underflow in the readPostBody function in cgiutil.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 allows
KritikCVSS 10,0İstismar yokEPSS %5osgeo · mapserver31 Mar 2009
- CVE-2009-084142Planlayın
Directory traversal vulnerability in mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2, when running on Windows with
KritikCVSS 10,0İstismar yokEPSS %5osgeo · mapserver31 Mar 2009
- CVE-2009-117641Planlayın
mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 does not ensure that the string holding the id parameter ends in a
KritikCVSS 10,0İstismar yokEPSS %4osgeo · mapserver31 Mar 2009
- CVE-2010-254041Planlayın
mapserv.c in mapserv in MapServer before 4.10.6 and 5.x before 5.6.4 does not properly restrict the use of CGI command-line arguments that w
KritikCVSS 10,0İstismar yokEPSS %4osgeo · mapserver2 Ağu 2010
- CVE-2009-117741Planlayın
Multiple stack-based buffer overflows in maptemplate.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 have unknown impact an
KritikCVSS 10,0İstismar yokEPSS %3osgeo · mapserver31 Mar 2009
- CVE-2011-270432İzleyin
Stack-based buffer overflow in MapServer before 4.10.7 and 5.x before 5.6.7 allows remote attackers to execute arbitrary code via vectors re
YüksekCVSS 7,5İstismar yokEPSS %5osgeo · mapserver1 Ağu 2011
- CVE-2009-084332İzleyin
The msLoadQuery function in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 allows remote attackers to determine the existence o
YüksekCVSS 7,8İstismar yokEPSS %3osgeo · mapserver31 Mar 2009
- CVE-2011-270331İzleyin
Multiple SQL injection vulnerabilities in MapServer before 4.10.7, 5.x before 5.6.7, and 6.x before 6.0.1 allow remote attackers to execute
YüksekCVSS 7,5İstismar yokEPSS %3osgeo · mapserver1 Ağu 2011
- CVE-2011-297528İzleyin
Double free vulnerability in the msAddImageSymbol function in mapsymbol.c in MapServer before 6.0.1 might allow remote attackers to cause a
OrtaCVSS 6,8Kavram kanıtıEPSS %5osgeo · mapserver1 Ağu 2011
- CVE-2013-726228İzleyin
SQL injection vulnerability in the msPostGISLayerSetTimeFilter function in mappostgis.c in MapServer before 6.4.1, when a WMS-Time service i
OrtaCVSS 6,8İstismar yokEPSS %2osgeo · mapserver5 Oca 2014
- CVE-2009-084218İzleyin
mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 allows remote attackers to read arbitrary invalid .map files via a full pathname
OrtaCVSS 4,3İstismar yokEPSS %3osgeo · mapserver31 Mar 2009
- CVE-2010-25398İzleyin
Buffer overflow in the msTmpFile function in maputil.c in mapserv in MapServer before 4.10.6 and 5.x before 5.6.4 allows local users to caus
DüşükCVSS 2,1İstismar yokEPSS %0osgeo · mapserver2 Ağu 2010