CVE-2026-124016

The postal-mime library before version 4.2.1 is vulnerable to an algorithmic complexity denial of service (DoS) via the PostalMime.processLine() function. Unauthenticated remote attackers can cause excessive CPU consumption by delivering crafted emails with deeply nested multipart structures (up ...

PT-2026-95102

Name of the Vulnerable Software and Affected Versions MapServer versions 6.0 through 8.6.3 Description MapServer's OpenLayers HTML output for the endpoint SERVICE=WMS&REQUEST=GetMap&FORMAT=application/openlayers reflects an attacker-controlled X-Forwarded-Host value received as HTTP X FORWARDED...

EUVD-2007-4611

Malware in sbrugna...

SUSE CVE-2007-4542

Multiple cross-site scripting XSS vulnerabilities in MapServer before 4.10.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving the 1 processLine function in maptemplate.c and the 2 writeError function in mapserv.c in the mapserv CGI program...

PT-2020-22341

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A stack-buffer-overflow crash has been reported, involving the not::Cli::Interpreter::ProcessService, not::Cli::Interpreter::ProcessLine, and...

CVE-2007-4629

Buffer overflow in the processLine function in maptemplate.c in MapServer before 4.10.3 allows attackers to cause a denial of service and possibly execute arbitrary code via a mapfile with a long layer name, group name, or metadata entry name...

DEBIAN-CVE-2007-4629

Buffer overflow in the processLine function in maptemplate.c in MapServer before 4.10.3 allows attackers to cause a denial of service and possibly execute arbitrary code via a mapfile with a long layer name, group name, or metadata entry name...

CVE-2007-4629: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the processLine function in maptemplate.c in MapServer before 4.10.3 allows attackers to cause a denial of service and possibly execute arbitrary code via a mapfile with a long layer name, group name, or metadata entry name...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in MapServer before 4.10.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving the 1 processLine function in maptemplate.c and the 2 writeError function in mapserv.c in the mapserv CGI program...