606 matches found
CVE-2024-35057
An issue in NASA AIT-Core v2.5.2 allows attackers to execute arbitrary code via a crafted packet...
CVE-2024-35058
An issue in the API wait function of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary code via supplying a crafted string...
CVE-2024-35059
An issue in the Pickle Python library of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary commands...
CVE-2024-35057
An issue in NASA AIT-Core v2.5.2 allows attackers to execute arbitrary code via a crafted packet...
CVE-2024-35059
CVE-2024-35059 affects NASA AIT-Core v2.5.2 and its Pickle-based processing. Red Hat entries describe an unencrypted network channel enabling a man-in-the-middle, which when chained with CVE-2024-35059 results in unauthenticated, fully remote code execution. The core issue is the use of Pickle wi...
CVE-2024-35060
CVE-2024-35060 affects NASA AIT-Core v2.5.2 due to a flaw in the YAML Python library that allows arbitrary command execution via a crafted YAML file. Affected component: YAML Python library; root cause described as an issue in the library. Impact per sources: attacker-executed commands. Remediati...
CVE-2024-35058
An issue in the API wait function of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary code via supplying a crafted string...
CVE-2024-35057
An issue in NASA AIT-Core v2.5.2 allows attackers to execute arbitrary code via a crafted packet...
sbuv.gsfc.nasa.gov Improper Access Control vulnerability OBB-3907531
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
nasa.or.id Cross Site Scripting vulnerability OBB-3898162
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
GHSA-V8FC-QXVJ-F3MG NASA Open MCT Cross Site Scripting vulnerability
Cross Site Scripting XSS vulnerability in NASA Open MCT aka openmct through 3.1.0 allows attackers to run arbitrary code via the new component feature in the flexibleLayout plugin...
GHSA-4G88-4HGM-M99X NASA Open MCT Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability in NASA Open MCT aka openmct through 3.1.0 allows attackers to view sensitive information via the flexibleLayout plugin...
NASA Open MCT Cross Site Scripting vulnerability
Cross Site Scripting XSS vulnerability in NASA Open MCT aka openmct through 3.1.0 allows attackers to run arbitrary code via the new component feature in the flexibleLayout plugin...
NASA Open MCT Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability in NASA Open MCT aka openmct through 3.1.0 allows attackers to view sensitive information via the flexibleLayout plugin...
CVE-2023-45884
Cross Site Request Forgery CSRF vulnerability in NASA Open MCT aka openmct through 3.1.0 allows attackers to view sensitive information via the flexibleLayout plugin...
CVE-2023-45884
Cross Site Request Forgery CSRF vulnerability in NASA Open MCT aka openmct through 3.1.0 allows attackers to view sensitive information via the flexibleLayout plugin...
CVE-2023-45885
Cross Site Scripting XSS vulnerability in NASA Open MCT aka openmct through 3.1.0 allows attackers to run arbitrary code via the new component feature in the flexibleLayout plugin...
Cross site request forgery (csrf)
Cross Site Request Forgery CSRF vulnerability in NASA Open MCT aka openmct through 3.1.0 allows attackers to view sensitive information via the flexibleLayout plugin...
Cross site scripting
Cross Site Scripting XSS vulnerability in NASA Open MCT aka openmct through 3.1.0 allows attackers to run arbitrary code via the new component feature in the flexibleLayout plugin...