Server-side Request Forgery (SSRF)

Overview osm-static-maps is a Create a static image of a map with the features you want Affected versions of this package are vulnerable to Server-side Request Forgery SSRF. User input given to the package is passed directly to a template without escaping ... . As such, it is possible for an...

apls (>=0.0.6 <=0.1.0), datacube (=1.6.2) +16 more potentially affected by CVE-2019-17545 via gdal (>=2.1.0 <=3.0.1)

gdal PYPI version =2.1.0, =0.0.6, =0.1.0, =0.0.35, =0.1.0, =1.0.60, =0.0.4, =0.1.2, =1.0.16, =0.9.0, =0.0.6, =0.0.3, =0.1.0 - routing-ortools-osrm =1.0.1 and more Source cves: CVE-2019-17545 Source advisory: OSV:PYSEC-2019-241...

CVE-2019-17504

An issue was discovered in Kirona Dynamic Resource Scheduling DRS 5.5.3.5. A reflected Cross-site scripting XSS vulnerability allows remote attackers to inject arbitrary web script via the /osm/report/ password parameter...

OSM Offline Maps Android Wear - Apache license, LGPL license vulnerabilities

HackApp vulnerability scanner discovered that application OSM Offline Maps Android Wear published at the 'play' market has multiple vulnerabilities...

Fedora 20 : ikiwiki-3.20140125-1.fc20 (2014-1747)

Update to the latest stable version. Changes in ikiwiki 3.20140125 : - inline: Allow overriding the title of the feed. Closes: http://bugs.debian.org/735123 Thanks, Christophe Rhodes - osm: Escape name parameter. Closes: http://bugs.debian.org/731797 Changes in ikiwiki 3.20140102 : - aggregate:...

CVE-2012-1647

Multiple cross-site scripting XSS vulnerabilities in the "stand alone PHP application for the OSM Player," as used in the MediaFront module 6.x-1.x before 6.x-1.5 and 7.x-1.x before 7.x-1.5 for Drupal, allow remote attackers to inject arbitrary web script or HTML via 1 $SERVER'HTTPHOST' or 2...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the "stand alone PHP application for the OSM Player," as used in the MediaFront module 6.x-1.x before 6.x-1.5 and 7.x-1.x before 7.x-1.5 for Drupal, allow remote attackers to inject arbitrary web script or HTML via 1 $SERVER'HTTPHOST' or 2...

CVE-2012-1647

Multiple cross-site scripting XSS vulnerabilities in the "stand alone PHP application for the OSM Player," as used in the MediaFront module 6.x-1.x before 6.x-1.5 and 7.x-1.x before 7.x-1.5 for Drupal, allow remote attackers to inject arbitrary web script or HTML via 1 $SERVER'HTTPHOST' or 2...

CVE-2012-1647

CVE-2012-1647 affects the MediaFront Drupal module (Drupal 6.x: 6.x-1.x prior to 6.x-1.5; Drupal 7.x: 7.x-1.x prior to 7.x-1.5). The vulnerability is cross-site scripting via input in PHP library handling the stand-alone OSM Player, specifically through $_SERVER["HTTP_HOST"], $_SERVER["SCRIPT_NAM...

Cisco IOS OSM Line Card Header Corruption

The Optical Service Module OSM Line Cards installed in Catalyst 6500 or Cisco 7600 chassis are vulnerable a denial of service attack upon receiving a specifically constructed or corrupted packet from the local network. C Tenable Network Security, Inc. include"compat.inc"; if description...

CVE-2009-1998

Unspecified vulnerability in the Oracle Communications Order and Service Management component in Oracle Industry Applications 2.8.0, 6.2.0, 6.3.0, and 6.3.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors...

CVE-2002-2239

The Cisco Optical Service Module (OSM) in Catalyst 6500/7600 chassis with IOS 12.1(8)E–12.1(13.4)E is affected. A malformed-packet can be sent remotely to cause a denial of service (hang) via the OSM, as documented in multiple sources (OSM LC IOS vulnerability). The issue originates from how spec...

OSM Line Card Header Corruption Vulnerability

...

Cisco Security Advisory: OSM Line Card Header Corruption Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Cisco Security Advisory: OSM Line Card Header Corruption Vulnerability ======================================================================== Revision 1.0 FINAL For Public Release 2002 December 11 16:00 UTC -...