Lucene search
K

16 matches found

Fedora
Fedora
added 2026/03/16 12:28 a.m.1 views

[SECURITY] Fedora 44 Update: qgis-3.44.8-1.fc44

Geographic Information System GIS manages, analyzes, and displays databases of geographic information. QGIS supports shape file viewing and editing, spatial data storage with PostgreSQL/PostGIS, projection on-the-fly, map composition, and a number of other features via a plugin interface. QGIS al...

8.7CVSS5.8AI score0.00541EPSS
Exploits0
Github Security Blog
Github Security Blog
added 2026/01/05 3:32 p.m.10 views

Apache SIS has Improper Restriction of XML External Entity Reference vulnerability

Improper Restriction of XML External Entity Reference vulnerability in Apache SIS. It is possible to write XML files in such a way that, when parsed by Apache SIS, an XML file reveals to the attacker the content of a local file on the server running Apache SIS. This vulnerability impacts the...

6.5CVSS6.6AI score0.00025EPSS
Exploits0References5Affected Software1
OSV
OSV
added 2026/01/05 3:32 p.m.1 views

GHSA-JQMR-2PG9-VFX7 Apache SIS has Improper Restriction of XML External Entity Reference vulnerability

Improper Restriction of XML External Entity Reference vulnerability in Apache SIS. It is possible to write XML files in such a way that, when parsed by Apache SIS, an XML file reveals to the attacker the content of a local file on the server running Apache SIS. This vulnerability impacts the...

6.5CVSS5.8AI score0.00025EPSS
Exploits0References5
Snyk
Snyk
added 2026/01/05 3:32 p.m.3 views

XML External Entity (XXE) Injection

Overview org.apache.sis.core:sis-metadata is an Implementations of metadata derived from ISO 19115. This module provides both an implementation of the metadata interfaces defined in GeoAPI, and a framework for handling those metadata through Java reflection. Affected versions of this package are...

7.1CVSS6AI score0.00025EPSS
Exploits0References2
OSV
OSV
added 2026/01/05 2:15 p.m.3 views

CVE-2025-68280

Improper Restriction of XML External Entity Reference vulnerability in Apache SIS. It is possible to write XML files in such a way that, when parsed by Apache SIS, an XML file reveals to the attacker the content of a local file on the server running Apache SIS. This vulnerability impacts the...

6.5CVSS5.6AI score
Exploits0References3
NVD
NVD
added 2026/01/05 2:15 p.m.2 views

CVE-2025-68280

Improper Restriction of XML External Entity Reference vulnerability in Apache SIS. It is possible to write XML files in such a way that, when parsed by Apache SIS, an XML file reveals to the attacker the content of a local file on the server running Apache SIS. This vulnerability impacts the...

6.5CVSS0.00025EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/01/05 1:45 p.m.20 views

CVE-2025-68280 Apache SIS: XML External Entity (XXE) vulnerability

Improper Restriction of XML External Entity Reference vulnerability in Apache SIS. It is possible to write XML files in such a way that, when parsed by Apache SIS, an XML file reveals to the attacker the content of a local file on the server running Apache SIS. This vulnerability impacts the...

0.00025EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/01/05 1:45 p.m.2 views

CVE-2025-68280 Apache SIS: XML External Entity (XXE) vulnerability

Improper Restriction of XML External Entity Reference vulnerability in Apache SIS. It is possible to write XML files in such a way that, when parsed by Apache SIS, an XML file reveals to the attacker the content of a local file on the server running Apache SIS. This vulnerability impacts the...

6.2AI score0.00025EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/01/05 12:0 a.m.3 views

PT-2026-1285

Name of the Vulnerable Software and Affected Versions Apache SIS versions 0.4 through 1.5 Description An improper restriction of XML external entity reference issue exists in Apache SIS. An attacker can craft XML files that, when parsed by Apache SIS, reveal the content of local files on the...

6.5CVSS5.9AI score0.00025EPSS
Exploits0References11
OpenVAS
OpenVAS
added 2022/03/27 12:0 a.m.5 views

Fedora: Security Advisory for libgeotiff (FEDORA-2022-6746739d52)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
Exploits0References2
Fedora
Fedora
added 2022/03/26 3:34 p.m.18 views

[SECURITY] Fedora 36 Update: libgeotiff-1.7.0-6.fc36

GeoTIFF represents an effort by over 160 different remote sensing, GIS, cartographic, and surveying related companies and organizations to establish a TIFF based interchange format for georeferenced raster imagery...

1.8AI score
Exploits0
Fedora
Fedora
added 2021/05/05 1:4 a.m.51 views

[SECURITY] Fedora 32 Update: perl-Image-ExifTool-12.16-3.fc32

ExifTool is a Perl module with an included command-line application for reading and writing meta information in image, audio, and video files. It reads EXIF, GPS, IPTC, XMP, JFIF, MakerNotes, GeoTIFF, ICC Profile, Photoshop IRB, FlashPix, AFCP, and ID3 meta information from JPG, JP2, TIFF, GIF,...

7.8CVSS7.6AI score0.92782EPSS
Exploits38
OpenVAS
OpenVAS
added 2021/05/05 12:0 a.m.24 views

Fedora: Security Advisory for perl-Image-ExifTool (FEDORA-2021-e3d8833d36)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.8CVSS7.4AI score0.92782EPSS
Exploits38References4
Tenable Nessus
Tenable Nessus
added 2017/04/06 12:0 a.m.14 views

openSUSE Security Update : geotiff (openSUSE-2017-422)

This geotiff version update to 1.4.2 fixes the following issues : - Update to 1.4.2 boo1029595 - update to EPSG v8.9 database - cleanups and security fixes - Small packaging cleanup - Switched download link to OSGeo server - Fix Group tag. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

7.1AI score
Exploits0References1
OSV
OSV
added 2017/04/04 6:16 a.m.3 views

OPENSUSE-SU-2017:0916-1 Recommended update for geotiff

This geotiff version update to 1.4.2 fixes the following issues: - Update to 1.4.2 boo1029595 update to EPSG v8.9 database cleanups and security fixes - Small packaging cleanup - Switched download link to OSGeo server - Fix Group tag...

7.3AI score
Exploits0References1
OSV
OSV
added 2017/04/04 6:16 a.m.2 views

OPENSUSE-SU-2017:0917-1 Recommended update for geotiff

This geotiff version update to 1.4.2 fixes the following issues: - Update to 1.4.2 boo1029595 update to EPSG v8.9 database cleanups and security fixes - Small packaging cleanup - Switched download link to OSGeo server - Fix Group tag...

7.3AI score
Exploits0References1
Rows per page
Query Builder