467 matches found
CVE-2023-37241: Improper Input Validation
Input verification vulnerability in the WMS API. Successful exploitation of this vulnerability may cause the device to restart...
CVE-2022-33295
Information disclosure in Modem due to buffer over-read while parsing the wms message received given the buffer and its length...
Information disclosure
Information disclosure in Modem due to buffer over-read while parsing the wms message received given the buffer and its length...
CVE-2022-33295
CVE-2022-33295 describes an information-disclosure issue in the Modem caused by a buffer over-read while parsing a wms message. Affected: Modem component; root cause is reading beyond the provided buffer length, impacting confidentiality. No explicit exploited details or fixes are stated in the c...
CVE-2022-33295 Buffer over-read in Modem
Information disclosure in Modem due to buffer over-read while parsing the wms message received given the buffer and its length...
PT-2023-13299 · Modem · Modem
Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to information disclosure due to a buffer over-read while parsing the wms message. This occurs when the buffer and its length are provided, leading to potential data...
CVE-2022-33295: Buffer Over-read
Information disclosure in Modem due to buffer over-read while parsing the wms message received given the buffer and its length...
GHSA-7G5F-WRX8-5CCF GeoServer OGC Filter SQL Injection Vulnerabilities
Impact GeoServer includes support for the OGC Filter expression language and the OGC Common Query Language CQL as part of the Web Feature Service WFS and Web Map Service WMS protocols. CQL is also supported through the Web Coverage Service WCS protocol for ImageMosaic coverages. SQL Injection...
CVE-2023-25157 Unfiltered SQL Injection Vulnerabilities in Geoserver
GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. GeoServer includes support for the OGC Filter expression language and the OGC Common Query Language CQL as part of the Web Feature Service WFS and Web Map Service WMS protocols. CQL is...
CVE-2023-25157 Unfiltered SQL Injection Vulnerabilities in Geoserver
GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. GeoServer includes support for the OGC Filter expression language and the OGC Common Query Language CQL as part of the Web Feature Service WFS and Web Map Service WMS protocols. CQL is...
CVE-2023-25157
GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. GeoServer includes support for the OGC Filter expression language and the OGC Common Query Language CQL as part of the Web Feature Service WFS and Web Map Service WMS protocols. CQL is...
CVE-2023-25157
GeoServer , an open-source geospatial data server, is vulnerable to SQL injection due to a lack of input filtering in the OGC Filter expression language and CQL (Common Query Language). The vulnerability resides in the CQL Parser & SQL Translator layer, where malformed filter syntax can bypass le...
PT-2023-2269
Name of the Vulnerable Software and Affected Versions GeoServer versions prior to 2.21.4 GeoServer versions prior to 2.22.2 GeoServer versions prior to 2.20.7 GeoServer versions prior to 2.19.7 GeoServer versions prior to 2.18.7 Description The issue is related to SQL injection vulnerabilities in...
CVE-2023-25157: Improper Neutralization of Special Elements used in an SQL Command
GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. GeoServer includes support for the OGC Filter expression language and the OGC Common Query Language CQL as part of the Web Feature Service WFS and Web Map Service WMS protocols. CQL is...
CVE-2021-33949
An issue in FeMiner WMS v1.1 allows attackers to execute arbitrary code via the filename parameter and the exec function...
CVE-2021-33949
An issue in FeMiner WMS v1.1 allows attackers to execute arbitrary code via the filename parameter and the exec function...
Code injection
An issue in FeMiner WMS v1.1 allows attackers to execute arbitrary code via the filename parameter and the exec function...
PT-2023-12229
Name of the Vulnerable Software and Affected Versions FeMiner WMS version 1.1 Description An issue in FeMiner WMS allows attackers to execute arbitrary code via the filename parameter and the exec function. Recommendations For FeMiner WMS version 1.1, consider restricting access to the exec...
CVE-2021-33949
The CVE-2021-33949 entry affects FeMiner WMS v1.1 and enables arbitrary code execution via the filename parameter and the exec function. Multiple connected sources (NVD entry, Red Hat advisory, CNNVD, CVE records) corroborate the issue, describing a remote code execution vulnerability with high i...
