677 matches found
Denial Of Service (DoS)
geoserver is vulnerable to denial of service DoS attacks. The vulnerability exists due to the attempts to prematurely flush buffer contents when geoserver is handling an in-memory buffer, causing DoS attacks...
org.acegisecurity:acegi-security-tiger (1.0.0-rc1), org.apache.directory.mina:mina-integration-spring (>=0.9.1, <=0.9.5) +23 more potentially affected by CVE-2016-5007 via org.springframework:spring-core (1.2.5)
org.springframework:spring-core MAVEN version 1.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - org.acegisecurity:acegi-security-tiger 1.0.0-rc1 -...
org.geoserver:community (1.4.0_gt2.2.x), org.geoserver:platform (>=1.4.0-m1, <=1.4.0_gt2.2.x) +7 more potentially affected by CVE-2015-3192 via org.springframework:spring-web (1.2.5)
org.springframework:spring-web MAVEN version 1.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.geoserver:community 1.4.0gt2.2.x - org.geoserver:platform =1.4.0-m1, =1.4.0gt2.2.x -...
org.acegisecurity:acegi-security-tiger (1.0.0-rc1), org.apache.directory.mina:mina-integration-spring (>=0.9.1, <=0.9.5) +23 more potentially affected by CVE-2018-1272 via org.springframework:spring-core (1.2.5)
org.springframework:spring-core MAVEN version 1.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - org.acegisecurity:acegi-security-tiger 1.0.0-rc1 -...
org.geoserver:community (1.4.0_gt2.2.x), org.geoserver:platform (>=1.4.0-m1, <=1.4.0_gt2.2.x) +6 more potentially affected by CVE-2016-9878 via org.springframework:spring-webmvc (1.2.5)
org.springframework:spring-webmvc MAVEN version 1.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.geoserver:community 1.4.0gt2.2.x - org.geoserver:platform =1.4.0-m1, =1.4.0gt2.2.x -...
Geoserver 2.5.x < 2.5.5.1, 2.6.x < 2.6.4, 2.7.x < 2.7.1.1 XXE Vulnerability - Active Check
Geoserver is prone to an XML external entity XXE vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Geoserver < 2.7.1.1 / < 2.6.4 / < 2.5.5.1 - XXE Exploit
Exploit for multiple platform in category web applications Exploit Title : GeoServer XXE Date : 11/08/2015 Exploit Author : David Bloom Script - Ping to Sven Claessens, Jacques Villemur and Eric Donners Vendor homepage : http://geoserver.org Software Link : http://geoserver.org/release/stable...
Geoserver 2.7.1.1 2.6.4 2.5.5.1 - XML External Entity
Geoserver 2.7.1.1 2.6.4 2.5.5.1 - XML External Entity Exploit Title : GeoServer XXE Date : 11/08/2015 Exploit Author : David Bloom Script - Ping to Sven Claessens, Jacques Villemur and Eric Donners Vendor homepage : http://geoserver.org Software Link : http://geoserver.org/release/stable Version ...
Geoserver < 2.7.1.1 / < 2.6.4 / < 2.5.5.1 - XML External Entity
Exploit Title : GeoServer XXE Date : 11/08/2015 Exploit Author : David Bloom Script - Ping to Sven Claessens, Jacques Villemur and Eric Donners Vendor homepage : http://geoserver.org Software Link : http://geoserver.org/release/stable Version : 2.7 : 2.7.1.1 / 2.6 : 2.6.4 / 2.5 : 2.5.5.1 Tested :...
GeoServer Memory Corruption Vulnerability
This host is installed with GeoServer and is prone to Memory Corruption vulnerability. OpenVAS Vulnerability Test $Id: secpodgeoservermemcorrvuln.nasl 5055 2017-01-20 14:08:39Z teissa $ GeoServer Memory Corruption Vulnerability Authors: Nikita MR Copyright: Copyright c 2009 SecPod,...
GeoServer Detection (HTTP)
HTTP based detection of GeoServer. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.900945";...
GeoServer < 1.6.1, 1.7.x < 1.7.0-beta1 DoS Vulnerability
GeoServer is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:geoserver:geoserver"...
CVE-2008-7227
PartialBufferOutputStream2 in GeoServer before 1.6.1 and 1.7.0-beta1 attempts to flush buffer contents even when it is handling an "in memory buffer," which prevents the reporting of a service exception, with unknown impact and attack vectors...
Buffer overflow
PartialBufferOutputStream2 in GeoServer before 1.6.1 and 1.7.0-beta1 attempts to flush buffer contents even when it is handling an "in memory buffer," which prevents the reporting of a service exception, with unknown impact and attack vectors...
CVE-2008-7227
PartialBufferOutputStream2 in GeoServer before 1.6.1 and 1.7.0-beta1 attempts to flush buffer contents even when it is handling an "in memory buffer," which prevents the reporting of a service exception, with unknown impact and attack vectors...
CVE-2008-7227
Geoserver exposes a vulnerability CVE-2008-7227 in which PartialBufferOutputStream2 may flush buffer contents while handling an in-memory buffer, preventing service exceptions from being reported. Affected products are GeoServer prior to 1.6.1 and 1.7.0-beta1. The underlying cause is in PartialBu...
CVE-2008-7227: Improper Restriction of Operations within the Bounds of a Memory Buffer
PartialBufferOutputStream2 in GeoServer before 1.6.1 and 1.7.0-beta1 attempts to flush buffer contents even when it is handling an "in memory buffer," which prevents the reporting of a service exception, with unknown impact and attack vectors...