geopp CVE Vulnerabilities & CVE List (5)

Products (CPE): — CVEs: 5

geopp vulnerability overview

Aggregates CVE and security vulnerability intelligence across all geopp-related products, including CVSS, EPSS, publication dates, and vulnerability intelligence data.

Historical issues mainly involve vendor risk path handling and vendor risk buffer overflow and related problems; some flaws may lead to vendor impact application crash, affecting vendor surface software deployment scenarios.

Vulnerability distribution trend (last 24 months)

Showing 15 of 5 CVEs
«« First « Prev Page 1 / 1 Next »
CVE Summary Source Max CVSS EPSS % Published Updated
CVE-2010-0554 The HTTP Authentication implementation in Geo++ GNCASTER 1.4.0.7 and earlier uses the same nonce for all authentication, which allows remote attackers to hijack web sessions or bypass authentication via a replay attack. [email protected] 7.5 0.17% 2010-02-04 2026-04-29
CVE-2010-0553 Geo++ GNCASTER 1.4.0.7 and earlier allows remote authenticated users to cause a denial of service (application crash) and possibly execute arbitrary code via a long NMEA data sentence. [email protected] 6.5 17.25% 2010-02-04 2026-04-29
CVE-2010-0552 Geo++ GNCASTER 1.4.0.7 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via multiple requests for a non-existent file using a long URI. [email protected] 7.5 9.23% 2010-02-04 2026-04-29
CVE-2010-0551 HTTP authentication implementation in Geo++ GNCASTER 1.4.0.7 and earlier allows remote attackers to read authentication headers of other users via a large request with an incorrect authentication attempt, which includes sensitive memory in the response. NOTE: this is referred to as a "memory leak" by some sources, but is better characterized as "memory disclosure." [email protected] 5.0 0.39% 2010-02-04 2026-04-29
CVE-2010-0550 admin.htm in Geo++ GNCASTER 1.4.0.7 and earlier does not properly enforce HTTP Digest Authentication, which allows remote authenticated users to use HTTP Basic Authentication, bypassing intended server policy. [email protected] 4.0 0.35% 2010-02-04 2026-04-29
«« First « Prev Page 1 / 1 Next »
cvelogic Threat Intelligence