Most severe vulnerabilities for vendor "osgeo"

10

Exploited

First published (updated )

CVE-2022-24816

MapServermapserv.c in mapserv in MapServer before 4.10.6 and 5.x before 5.6.4 does not properly restrict the …

10

First published (updated )

CVE-2010-2540

MapServerBuffer Overflow

10

First published (updated )

CVE-2009-1177

MapServerBuffer Overflow

10

First published (updated )

CVE-2009-1176

MapServerBuffer Overflow

10

First published (updated )

CVE-2009-0839

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

MapServerPath Traversal

10

First published (updated )

CVE-2009-0841

MapServerBuffer Overflow

10

First published (updated )

CVE-2009-0840

MapServerBuffer Overflow, Integer Overflow

10

First published (updated )

CVE-2009-2281

maven/org.geoserver:gs-wmsRemote Code Execution (RCE) vulnerability in evaluating property name expressions in Geoserver

9.8

Exploited

First published (updated )

CVE-2024-36401

MapServerBuffer Overflow

9.8

First published (updated )

CVE-2017-5522

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Debian LinuxDouble Free

9.8

First published (updated )

CVE-2019-17545

OSGeo ShapelibDouble Free, Use After Free

9.8

First published (updated )

CVE-2022-0699

GeoServer GeoWebCacheUnfiltered SQL Injection Vulnerabilities in Geoserver

9.8

First published (updated )

CVE-2023-25157

maven/org.geoserver.extension:gs-wps-coreWPS Server Side Request Forgery in GeoServer

9.8

First published (updated )

CVE-2023-43795

IBM Cognos AnalyticsInteger Overflow, Buffer Overflow

8.8

First published (updated )

CVE-2019-17546

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

maven/org.geoserver.web:gs-web-appUnsecured WMS dynamic styling sld=<url> parameter affords blind unauthenticated SSRF in GeoServer

8.6

First published (updated )

CVE-2023-41339

debian/owslibXML External Entity (XXE) Injection in OWSLib

8.2

First published (updated )

CVE-2023-27476

MapServerInput Validation

7.8

First published (updated )

CVE-2009-0843

GDALBuffer Overflow

7.8

First published (updated )

CVE-2019-25050

MapServerSQL Injection, Buffer Overflow

7.5

First published (updated )

CVE-2011-2703

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

MapServerBuffer Overflow

7.5

First published (updated )

CVE-2011-2704

MapServerInput Validation

7.5

First published (updated )

CVE-2010-1678

MapServerInfoleak

7.5

First published (updated )

CVE-2016-9839

pip/pywpsXEE

7.5

First published (updated )

CVE-2021-39371

GeoServer GeoWebCacheSSRF

7.5

First published (updated )

CVE-2021-40822

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

GeoServer GeoWebCacheImproper Input Validation in GeoServer

7.2

First published (updated )

CVE-2022-24847

GeoNetworkOS Command Injection

7.2

First published (updated )

CVE-2021-28398

MapServerSQL Injection

medium

6.8

First published (updated )

CVE-2013-7262

MapServerDouble Free

medium

6.8

First published (updated )

CVE-2011-2975

GDAL (Geospatial Data Abstraction Library)Buffer Overflow

medium

5.5

First published (updated )

CVE-2025-29480

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.