Export limit exceeded: 11763 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2026-16637

OPeNDAP Hyrax SSRF and Credential Disclosure via Unvalidated Redirects

OPeNDAP Hyrax allows SSRF and credential disclosure via unvalidated HTTP redirects that bypass the AllowedHosts allowlist and leak Earthdata headers (User-Id, Echo-Token) to attacker-controlled endpoints.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Opendap
Products
Hyrax-docker
CVE-2007-2355

The get_url function in DODS_Dispatch.pm for the CGI_server in OPeNDAP 3 allows remote attackers to execute arbitrary commands via shell metacharacters in a URL.

CVSS 2.0 · 10.0 Critical EPSS 6.0% KEV · Not listed
Vendors
Opendap
Products
Server3
CVE-2007-2767

Unspecified vulnerability in BES before 3.5.0 in OPeNDAP 4 (Hydrax) before 1.2.1 allows remote attackers to list filesystem contents and obtain sensitive information via unknown vectors.

CVSS 2.0 · 7.8 High EPSS 2.1% KEV · Not listed
Vendors
Opendap
Products
Bes Hyrax
CVE-2007-2769

BES before 3.5.0 in OPeNDAP 4 (Hydrax) before 1.2.1 does not properly handle compressed files, which allows remote attackers to upload arbitrary files or execute arbitrary commands via a crafted compressed file.

CVSS 2.0 · 7.5 High EPSS 2.7% KEV · Not listed
Vendors
Opendap
Products
Bes Hyrax