27 matches found
CVE-2026-72577
Multiple vulnerabilities in NASA fprime-gds through 3.4.3 allow an unauthenticated remote attacker to achieve arbitrary code execution on the ground station host and inject arbitrary commands to connected spacecraft. The Flask application in src/fprimegds/flask/app.py applies no authentication to...
CVE-2026-72577: Missing Authentication for Critical Function
Multiple vulnerabilities in NASA fprime-gds through 3.4.3 allow an unauthenticated remote attacker to achieve arbitrary code execution on the ground station host and inject arbitrary commands to connected spacecraft. The Flask application in src/fprimegds/flask/app.py applies no authentication to...
EUVD-2025-8097
Malicious code in bioql PyPI...
EUVD-2025-8099
Malicious code in bioql PyPI...
EUVD-2025-8096
Malicious code in bioql PyPI...
CVE-2024-55029
NASA Fprime v3.4.3 was discovered to contain multiple cross-site scripting XSS vulnerabilities...
CVE-2024-55030
A command injection vulnerability in the Command Dispatcher Service of NASA Fprime v3.4.3 allows attackers to execute arbitrary commands...
CVE-2024-55028
A template injection vulnerability in the Dashboard of NASA Fprime v3.4.3 allows attackers to execute arbitrary code via uploading a crafted Vue file...
CVE-2024-55029
NASA Fprime v3.4.3 was discovered to contain multiple cross-site scripting XSS vulnerabilities...
CVE-2024-55028
A template injection vulnerability in the Dashboard of NASA Fprime v3.4.3 allows attackers to execute arbitrary code via uploading a crafted Vue file...
CVE-2024-55030
A command injection vulnerability in the Command Dispatcher Service of NASA Fprime v3.4.3 allows attackers to execute arbitrary commands...
CVE-2024-55028: Improper Control of Generation of Code
A template injection vulnerability in the Dashboard of NASA Fprime v3.4.3 allows attackers to execute arbitrary code via uploading a crafted Vue file...
PT-2025-12826
Name of the Vulnerable Software and Affected Versions NASA Fprime version 3.4.3 Description A command injection issue in the Command Dispatcher Service allows attackers to execute arbitrary commands. Recommendations For NASA Fprime version 3.4.3, consider disabling the Command Dispatcher Service...
PT-2025-12825
Name of the Vulnerable Software and Affected Versions NASA Fprime version 3.4.3 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. XSS is a type of security vulnerability that allows an attacker to inject malicious scripts into a website, potentially leading to...
CVE-2024-55029
NASA Fprime v3.4.3 was discovered to contain multiple cross-site scripting XSS vulnerabilities...
CVE-2024-55029
The NASA Fprime v3.4.3 framework and the fprime-gds (PyPI) package are vulnerable to Cross-site Scripting (XSS) . The root cause is the improper neutralization of input during web page generation, specifically within the Run Commands table of fprime-gds version 4.3.0. An attacker can execute scri...
CVE-2024-55030
NASA Fprime v3.4.3 contains a command injection vulnerability (CWE-77) within the Command Dispatcher Service . This flaw allows an attacker to execute arbitrary commands on the system. The vulnerability is associated with the fprime-gds (PyPI) package, specifically version 4.3.0 , which may also ...
CVE-2024-55028
A template injection vulnerability in the Dashboard of NASA Fprime v3.4.3 allows attackers to execute arbitrary code via uploading a crafted Vue file...
