467 matches found
CVE-2024-23818: Improper Neutralization of Input During Web Page Generation
GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. A stored cross-site scripting XSS vulnerability exists in versions prior to 2.23.3 and 2.24.1 that enables an authenticated administrator with workspace-level privileges to store a...
PT-2024-20099 · Geoserver · Geoserver
Name of the Vulnerable Software and Affected Versions: GeoServer versions prior to 2.23.3 and 2.24.1 Description: A stored cross-site scripting XSS issue exists that enables an authenticated administrator with workspace-level privileges to store a JavaScript payload in the GeoServer catalog. This...
Huawei HarmonyOS and EMUI WMS Module Privilege Control Class Vulnerability
Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scenario distributed operating system based on a microkernel.Huawei EMUI is a user interface developed by Huawei based on the Android operating system. A privilege control type vulnerability exists in Huawe...
Huawei HarmonyOS and EMUI WMS Module Business Logic Error Vulnerability
Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scenario distributed operating system based on a microkernel.Huawei EMUI is a user interface developed by Huawei based on the Android operating system. A business logic error vulnerability exists in Huawei...
Huawei EMUI Security Vulnerability
Huawei EMUI is an Android-based mobile operating system developed by Huawei, a Chinese company. A security vulnerability exists in Huawei EMUI, which originates from a privilege control type vulnerability in the WMS module...
Huawei EMUI 安全漏洞
Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scenario distributed operating system based on a microkernel.Huawei EMUI is a user interface developed by Huawei based on the Android operating system. A business logic error vulnerability exists in Huawei...
PT-2024-41546
Уязвимость службы Web Map Service WMS программного обеспечения для администрирования и публикации геоданных на сервере OSGeo GeoServer связана с непринятием мер по защите структуры веб-страницы. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, проводить межсайтовые...
CVE-2023-52102
Vulnerability of parameters being not verified in the WMS module. Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2023-52102
Vulnerability of parameters being not verified in the WMS module. Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2023-52104
Vulnerability of parameters being not verified in the WMS module. Successful exploitation of this vulnerability may affect service confidentiality...
Design/Logic Flaw
Vulnerability of parameters being not verified in the WMS module. Successful exploitation of this vulnerability may affect service confidentiality...
Design/Logic Flaw
Vulnerability of parameters being not verified in the WMS module. Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2023-52104
Vulnerability of parameters being not verified in the WMS module. Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2023-52104
Vulnerability of parameters being not verified in the WMS module. Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2023-52104
Technical details about CVE-2023-52104 are not publicly available in the provided documents. Monitor for updates from official advisories and vendor bulletins for affected products, versions, impact, and remediation.
CVE-2023-52102
Vulnerability of parameters being not verified in the WMS module. Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2023-52102
Vulnerability of parameters being not verified in the WMS module. Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2023-52102
CVE-2023-52102 concerns a parameter verification failure in the WMS module of Huawei HarmonyOS/HarmonyOS-derived components. The root cause is listed as parameters not being verified, leading to potential confidentiality leakage. The CVSSv3.1 data indicates a network-accessible, low-complexity is...