Catalog

Findings

Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.

SearchRecord typeSeveritySourceStackWeaknessSort

Known exploited only

Reset

UnknownOSGeo geonetwork Missing AuthorizationVuln · CVE-2026-63219 · Geonetwork · Core-Geonetwork · CVE.org · FIRST EPSS · VulnCheck KEVKEVEPSS 0.5%Sep 3, 2026
UnknownOSGeo geonetwork Improper Control of Generation of Code ('Code Injection')Vuln · CVE-2026-58400 · Geonetwork · Core-Geonetwork · CVE.org · FIRST EPSS · VulnCheck KEVKEVEPSS 1.2%Sep 3, 2026
Low1.9A vulnerability has been found in OSGeo gdal up to 3.13.0dev-4.Vuln · CVE-2026-8213 · osgeo · gdal · CVE.org · NIST NVDMay 9, 2026
Low1.9A flaw has been found in OSGeo gdal up to 3.13.0dev-4.Vuln · CVE-2026-8212 · osgeo · gdal · CVE.org · NIST NVDMay 9, 2026
Medium6.1MapServer is a system for developing web-based GIS applications.Vuln · CVE-2026-42030 · osgeo · mapserver · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%May 8, 2026
Low1.9A weakness has been identified in OSGeo gdal up to 3.13.0dev-4.Vuln · CVE-2026-8088 · osgeo · gdal · CVE.org · FIRST EPSS · NIST NVDEPSS 0.2%May 7, 2026
Low1.9A security flaw has been discovered in OSGeo gdal up to 3.13.0dev-4.Vuln · CVE-2026-8087 · osgeo · gdal · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%May 7, 2026
Low1.9A vulnerability was identified in OSGeo gdal up to 3.13.0dev-4.Vuln · CVE-2026-8086 · osgeo · gdal · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%May 7, 2026
Low1.9A vulnerability was determined in OSGeo gdal up to 3.13.0dev-4.Vuln · CVE-2026-8084 · osgeo · gdal · CVE.org · FIRST EPSS · NIST NVDEPSS 0.2%May 7, 2026
Critical9.1A Dynamic-link Library Injection vulnerability in OSGeo Project MapServer before v8.0 allows attackers to execute arbitrary code via a crafted executable.Vuln · CVE-2026-30479 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.5%Apr 9, 2026
High7.5MapServer is a system for developing web-based GIS applications.Vuln · CVE-2026-33721 · osgeo · mapserver · CVE.org · FIRST EPSS · NIST NVDEPSS 0.8%Mar 27, 2026
Critical9.4Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in OSGeo gdal (frmts/zlib/contrib/infback9 modules).Vuln · CVE-2026-4738 · CVE.org · NIST NVDMar 24, 2026
Critical9.8OSGeo GeoServer Improper Restriction of XML External Entity Reference VulnerabilityVuln · CVE-2025-58360 · OSGeo · GeoServer · CISA KEV · CVE.org · FIRST EPSS · GeoServerKEVEPSS 60.5%Nov 25, 2025
UnknownOSGeo GeoServer Server-Side Request Forgery (SSRF)Vuln · CVE-2024-29198 · OSGeo · GeoServer · CVE.org · VulnCheck KEV · GeoServerKEVJul 31, 2025
UnknownOSGeo GeoServer Missing AuthorizationVuln · CVE-2025-27505 · OSGeo · GeoServer · CVE.org · VulnCheck KEV · GeoServerKEVJul 21, 2025
UnknownOSGeo GeoServer Server-Side Request Forgery (SSRF)Vuln · CVE-2023-43795 · OSGeo · GeoServer · CVE.org · VulnCheck KEV · GeoServerKEVJul 22, 2024
UnknownOSGeo GeoServer Improper Input ValidationVuln · CVE-2022-24847 · OSGeo · GeoServer · CVE.org · VulnCheck KEV · GeoServerKEVJul 16, 2024
Critical9.8OSGeo GeoServer GeoTools Eval Injection VulnerabilityVuln · CVE-2024-36401 · OSGeo · GeoServer · CISA KEV · CVE.org · FIRST EPSS · GeoServerKEVEPSS 99.8%Jul 1, 2024
UnknownOSGeo GeoServer Server-Side Request Forgery (SSRF)Vuln · CVE-2021-40822 · OSGeo · GeoServer · CVE.org · VulnCheck KEV · GeoServerKEVJan 22, 2024
UnknownGeoServer 2 wps:Execute Request wps:LiteralData Remote Code ExecutionVuln · CVE-2023-35042 · OSGeo · GeoServer · CVE.org · VulnCheck KEV · GeoServerKEVJun 12, 2023
Critical10.0OSGeo GeoServer JAI-EXT Code Injection VulnerabilityVuln · CVE-2022-24816 · OSGeo · JAI-EXT · CISA KEV · CVE.org · FIRST EPSS · GeoServerKEVEPSS 99.9%Apr 13, 2022
UnknownOSGeo GeoServer Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Vuln · CVE-2023-25157 · OSGeo · GeoServer · CVE.org · VulnCheck KEV · GeoServerKEVSep 22, 2020